Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/60b89cbe-19a3-3c09-b8a3-73671851e5f4.roa
File: 60b89cbe-19a3-3c09-b8a3-73671851e5f4.roa (raw, json)
Hash identifier: /WClNQNVl3MI1G9XJDdFcvtJvgFQKLNQh9rvsJ6A38w=
Subject key identifier: 90:A2:B8:9B:5C:9E:5F:BD:93:BD:A9:DD:04:8C:C6:4F:C3:53:D3:7C
Certificate issuer: /CN=61939bbc-e50f-4ced-8482-e7c4008e3583
Certificate serial: 010D0C9F432858489075F915570D5D8C35AB3180
Authority key identifier: 3F:8D:F8:51:B6:E3:53:FA:6A:C1:CF:4A:DD:0E:91:CE:C3:DE:49:16
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/60b89cbe-19a3-3c09-b8a3-73671851e5f4.roa
Signing time: Thu 16 Jan 2025 14:00:50 +0000
ROA not before: Thu 16 Jan 2025 14:00:50 +0000
ROA not after: Wed 16 Apr 2025 13:00:50 +0000
asID: 397453
IP address blocks: 141.193.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:90:75:f9:15:57:0d:5d:8c:35:ab:31:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61939bbc-e50f-4ced-8482-e7c4008e3583
Validity
Not Before: Jan 16 14:00:50 2025 GMT
Not After : Apr 16 13:00:50 2025 GMT
Subject: CN=f76df504-2066-45ed-8263-5085e6e262d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fb:ff:3b:11:46:f4:15:01:50:8c:b8:09:0e:
19:54:61:04:67:aa:5b:0e:a7:48:06:ee:50:21:4f:
c3:ca:8e:5f:37:74:88:51:8a:e3:61:ca:56:e2:c7:
76:b9:e6:cb:01:35:23:c9:1c:37:cf:49:6b:24:d1:
2f:c4:e8:b4:87:1b:c9:43:31:06:99:fb:8e:53:44:
c8:34:aa:90:11:c9:68:13:a8:e0:03:6f:83:51:89:
5c:7e:27:c8:1f:d9:bd:2f:71:b5:ff:fb:d2:47:ab:
95:15:92:70:a2:7b:f9:69:f9:99:cf:24:f1:72:4a:
fe:f4:b7:51:8d:f5:f6:0b:23:37:71:68:15:b7:23:
20:e8:5f:2e:72:66:4a:f8:26:4b:a5:ed:af:3d:64:
22:c9:b1:58:31:37:4a:de:ed:b1:a6:84:ab:ad:6a:
01:30:47:f3:cd:03:ee:1f:54:ec:8a:78:6a:81:0c:
fe:39:2d:83:d2:52:75:63:c0:e2:cf:28:6b:e7:37:
91:20:83:03:c8:de:7e:41:76:68:dc:1a:45:2b:7e:
76:c6:92:ab:7d:58:31:c4:65:26:8b:5c:c7:27:77:
8b:da:e3:dc:4f:6b:73:e4:56:7d:e0:78:34:41:01:
d9:d8:03:bc:1c:04:4f:f8:a2:29:0d:b8:3b:cf:9e:
15:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:A2:B8:9B:5C:9E:5F:BD:93:BD:A9:DD:04:8C:C6:4F:C3:53:D3:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/60b89cbe-19a3-3c09-b8a3-73671851e5f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/61939bbc-e50f-4ced-8482-e7c4008e3583.crl
X509v3 Authority Key Identifier:
keyid:3F:8D:F8:51:B6:E3:53:FA:6A:C1:CF:4A:DD:0E:91:CE:C3:DE:49:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583.cer
sbgp-ipAddrBlock: critical
IPv4:
141.193.238.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:bb:b9:f1:dd:5b:e0:4f:e6:9b:c8:07:6b:1a:f7:bc:cc:75:
f0:3c:72:65:43:03:cf:8b:e1:bc:15:f2:31:72:47:6a:fb:59:
64:ac:f9:c4:a1:f0:05:8b:af:0d:c5:10:1e:ef:e8:9f:b8:3c:
57:dc:6a:82:7b:45:02:ef:51:00:0f:b9:0c:0b:03:87:a1:3d:
3c:83:02:8f:ac:76:1e:0c:01:45:b2:4f:55:a4:45:90:71:9a:
33:03:73:75:c6:d4:31:bb:a1:0b:73:7d:ba:d5:72:fc:b6:ce:
d3:b8:92:65:e3:c8:36:56:bf:a9:2c:5a:90:ad:b1:7d:d7:98:
21:05:12:b1:a2:02:6f:60:91:72:c2:c1:4d:cf:22:82:5b:d7:
e4:16:8a:3f:55:8e:d3:a7:1f:40:a7:b2:53:6d:1f:c8:12:75:
24:d3:10:47:f9:46:f8:f0:92:a3:e4:56:f6:2e:43:ce:77:9e:
c7:bb:27:6c:b8:ea:04:da:83:81:91:d0:41:79:11:fe:c4:e5:
ba:a7:da:28:75:39:b3:0a:11:40:f6:b4:75:34:d3:be:72:86:
2e:37:d2:a9:66:ea:ee:dc:c1:a0:62:6a:7c:94:da:25:4a:52:
b8:d0:32:45:a5:3a:40:7b:e0:c2:8f:b8:86:9c:3b:84:0e:79:
22:17:7f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:45:05 2025 by rpki-client