Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/3dd9312b-0b44-3178-a2d7-c6ad8886f840.roa
File: 3dd9312b-0b44-3178-a2d7-c6ad8886f840.roa (raw, json)
Hash identifier: OOHPs4evYA8FsXE2pF2HqikgzXeWhUzSekZMVIbGo/0=
Subject key identifier: 48:90:34:7E:07:B1:5C:E1:12:60:33:6F:2D:D4:2B:0E:5F:29:36:72
Certificate issuer: /CN=61939bbc-e50f-4ced-8482-e7c4008e3583
Certificate serial: 010D0C9F43285847EEC7112A14BACBC5B6B7DF00
Authority key identifier: 3F:8D:F8:51:B6:E3:53:FA:6A:C1:CF:4A:DD:0E:91:CE:C3:DE:49:16
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/3dd9312b-0b44-3178-a2d7-c6ad8886f840.roa
Signing time: Tue 19 Nov 2024 16:03:26 +0000
ROA not before: Tue 19 Nov 2024 16:03:26 +0000
ROA not after: Mon 17 Feb 2025 16:03:26 +0000
asID: 397453
IP address blocks: 143.223.240.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ee:c7:11:2a:14:ba:cb:c5:b6:b7:df:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61939bbc-e50f-4ced-8482-e7c4008e3583
Validity
Not Before: Nov 19 16:03:26 2024 GMT
Not After : Feb 17 16:03:26 2025 GMT
Subject: CN=58ccab26-8d2b-433b-8537-7378344c5d41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ec:0a:61:2d:1c:27:f8:bc:10:07:f2:44:05:
a1:8d:14:37:a0:a2:4f:ef:ac:d1:c7:85:eb:1a:8e:
b3:af:05:bd:fb:b8:fc:a7:15:01:6f:a1:1c:b7:84:
8d:ea:5e:a5:e1:d4:89:1c:f2:27:05:ad:ab:3b:82:
ee:ea:c4:8e:a7:f6:78:09:be:b2:62:e3:45:cc:3a:
6d:b8:b2:e9:6d:ca:22:37:22:93:14:d1:cd:03:2b:
43:c1:1b:e6:29:e0:24:32:8d:ba:64:8b:5b:28:36:
44:f4:25:01:84:82:b8:96:31:00:08:05:e7:e4:67:
68:d6:51:55:28:05:9b:d8:2c:0a:b3:05:1f:67:a4:
42:af:33:e6:22:da:01:40:08:e4:80:aa:f6:71:b9:
4d:91:90:42:4a:fd:6c:f5:09:e7:ac:c4:23:8b:43:
97:07:b3:42:d2:05:a0:30:66:51:93:42:6a:41:8b:
a4:d3:1e:22:70:20:b1:42:80:75:a8:e1:a7:14:46:
91:08:f6:78:98:d5:ae:46:67:fa:c9:d5:a1:fb:c7:
9e:b8:be:54:7d:8a:97:36:0f:5c:27:75:b4:0e:8f:
61:0a:40:58:12:8c:31:37:97:1c:df:ca:aa:86:2c:
f3:0c:bc:da:2c:c1:53:7d:14:ca:ec:6f:05:d5:55:
c0:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:90:34:7E:07:B1:5C:E1:12:60:33:6F:2D:D4:2B:0E:5F:29:36:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/3dd9312b-0b44-3178-a2d7-c6ad8886f840.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/61939bbc-e50f-4ced-8482-e7c4008e3583.crl
X509v3 Authority Key Identifier:
keyid:3F:8D:F8:51:B6:E3:53:FA:6A:C1:CF:4A:DD:0E:91:CE:C3:DE:49:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583.cer
sbgp-ipAddrBlock: critical
IPv4:
143.223.240.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:7b:12:e9:73:22:31:40:4c:bc:a1:8a:39:23:b8:db:13:ac:
f3:56:f0:2b:13:46:ac:bb:21:cd:08:f2:db:00:d6:02:88:71:
cc:4e:ed:b7:6e:ee:f1:4f:f1:63:fd:43:4d:61:0e:09:c6:b2:
68:26:e2:71:f5:32:e7:7e:3f:16:9e:1e:71:e6:77:d1:16:38:
21:fb:b8:a7:ef:99:57:10:0a:d5:55:68:c2:a7:79:67:d5:fe:
9a:37:14:c5:4f:3a:a5:3f:87:1e:b5:7d:aa:e1:3e:b9:92:af:
f2:5e:e1:e5:24:e9:fc:42:92:14:19:6f:f8:4c:ed:3c:ee:8b:
3a:52:3f:f0:59:92:6d:b8:82:32:bb:0a:51:02:71:76:c6:9b:
38:05:f5:bf:0d:51:36:09:26:5f:7f:9d:c4:a3:72:84:3c:e3:
d8:27:74:8e:58:78:6c:f6:54:5c:4d:1d:02:f7:09:ec:d3:5d:
1c:7b:8e:d0:4d:74:11:2f:91:b0:fb:73:8a:6a:72:c6:32:1a:
a2:b9:d2:6d:11:76:77:2b:cc:38:27:79:6b:aa:dc:52:9d:16:
12:dd:3d:7a:46:f5:bc:97:33:78:ad:9a:d1:68:97:db:7f:29:
be:f3:c2:b0:8c:38:a9:ca:d1:69:cf:9f:d4:56:bd:c3:a9:71:
5a:bf:dd:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:47:22 2025 by rpki-client