Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/897cd219-2596-36ba-b119-1a7d373e60a6.roa
File: 897cd219-2596-36ba-b119-1a7d373e60a6.roa (raw, json)
Hash identifier: 8ty7Ct42LLaUtjune+DuzeOnZT+NVdFmldcgEh0bCC0=
Subject key identifier: 8A:5C:4F:E7:E8:24:80:05:92:BB:C8:C7:41:39:7A:B8:F4:F7:CD:A6
Certificate issuer: /CN=269d2481-9b5f-41f2-a09c-92994a3ae335
Certificate serial: 010D0C9F432858486695AC13136F0266643D8A80
Authority key identifier: 6F:D8:81:3C:73:19:9C:F6:AD:A5:DB:82:9A:A0:53:16:FF:23:ED:54
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/897cd219-2596-36ba-b119-1a7d373e60a6.roa
Signing time: Wed 01 Jan 2025 14:00:53 +0000
ROA not before: Wed 01 Jan 2025 14:00:53 +0000
ROA not after: Tue 01 Apr 2025 13:00:53 +0000
asID: 400384
IP address blocks: 140.235.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:66:95:ac:13:13:6f:02:66:64:3d:8a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=269d2481-9b5f-41f2-a09c-92994a3ae335
Validity
Not Before: Jan 1 14:00:53 2025 GMT
Not After : Apr 1 13:00:53 2025 GMT
Subject: CN=e2bbff49-2e3e-480b-9d48-3a6f42c9d6b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ac:72:98:66:32:31:9d:fd:b5:cc:fa:0d:ce:
24:f4:75:7e:27:2e:5e:3d:bb:0d:7c:4c:01:7c:a5:
78:15:54:4c:25:25:a8:d2:ae:d5:b5:d9:e6:be:7b:
50:d3:3a:f6:fb:36:62:ee:8a:55:7c:54:15:1b:fb:
51:0f:e9:78:a4:40:5e:bb:b0:48:01:9f:4b:2c:59:
fb:1c:2c:1f:e3:88:2c:f8:7a:23:72:f4:01:70:dd:
9c:41:30:49:12:24:97:4a:2a:a2:46:2a:65:e6:1a:
45:a1:55:3e:41:d2:89:cd:a9:46:41:78:45:d5:ba:
07:2f:ea:b5:b4:c9:54:53:53:6e:07:01:b5:90:59:
b6:7c:04:31:c2:0a:90:70:77:35:73:ba:e6:26:43:
48:80:a9:ee:ee:8f:18:db:a0:59:57:71:a7:77:a0:
df:c4:df:e9:3a:36:71:c5:0b:e9:d1:94:e1:ed:4f:
38:98:b9:92:4d:b3:03:3a:20:7d:26:5a:86:4b:d6:
da:a0:16:f4:5c:58:14:59:d8:84:3e:fe:ad:d0:64:
fc:6b:57:cc:57:1f:be:dd:67:32:6b:10:6d:3f:60:
6a:81:8b:8f:88:11:fa:e9:0a:63:8c:69:53:62:e3:
21:71:97:97:81:1f:7d:17:04:e8:85:6a:3e:c7:75:
06:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:5C:4F:E7:E8:24:80:05:92:BB:C8:C7:41:39:7A:B8:F4:F7:CD:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/897cd219-2596-36ba-b119-1a7d373e60a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/269d2481-9b5f-41f2-a09c-92994a3ae335.crl
X509v3 Authority Key Identifier:
keyid:6F:D8:81:3C:73:19:9C:F6:AD:A5:DB:82:9A:A0:53:16:FF:23:ED:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer
sbgp-ipAddrBlock: critical
IPv4:
140.235.67.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:51:99:07:77:92:21:b2:13:5d:0f:99:8d:3a:10:3d:15:8c:
9a:e3:0b:e6:e1:cd:c4:f4:dd:45:7e:50:3a:6e:37:a6:87:e1:
11:64:39:ca:30:70:cf:d3:47:fc:ae:b4:24:3e:f9:35:7a:db:
b0:b1:b1:81:dc:14:07:2c:a4:7d:29:34:08:96:a8:bf:7f:6f:
09:c1:1a:0a:c4:73:a4:6f:ae:bf:a6:ae:99:46:a2:37:6b:1c:
80:63:e8:36:04:dc:2c:e4:e0:ac:b2:e0:e8:7c:7c:66:0b:83:
da:26:da:2a:84:1f:17:ff:7b:1e:95:a0:29:4e:e5:40:96:ea:
bc:08:66:b5:b1:6c:3b:6e:3c:2d:a5:53:e8:42:bd:99:28:d5:
7f:0f:72:dd:09:31:85:aa:90:67:23:3d:a3:1a:d6:78:62:b9:
c3:73:3c:57:71:b8:b3:ef:71:df:2c:e5:c4:4d:1b:1c:b9:ea:
29:27:2c:38:f3:5e:b7:ae:16:34:92:ec:47:12:b8:a0:cc:d5:
62:96:a4:24:c9:82:7d:73:6c:c4:25:79:d0:71:cd:40:06:a1:
be:7f:81:1b:75:7f:f3:19:b0:16:97:7a:9e:a2:12:36:01:ae:
17:e0:2c:c9:e5:ce:43:92:4e:90:14:41:f0:1a:61:25:e0:3b:
da:cd:27:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:43:56 2025 by rpki-client