Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/532d06b0-0e56-37ae-94d5-b8a87e1e3730.roa
File: 532d06b0-0e56-37ae-94d5-b8a87e1e3730.roa (raw, json)
Hash identifier: aZnfRaQCzBzdxshU3CW/yxVUVXSruHdGoSV9sFSfcbY=
Subject key identifier: FC:DA:69:67:8D:5B:44:13:4E:2D:47:F5:75:55:89:90:D4:5C:FE:48
Certificate issuer: /CN=55640631-1b52-4455-ab16-7633a452f342
Certificate serial: 010D0C9F432858488AE099971B613FC82D467300
Authority key identifier: 50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/532d06b0-0e56-37ae-94d5-b8a87e1e3730.roa
Signing time: Tue 14 Jan 2025 14:00:51 +0000
ROA not before: Tue 14 Jan 2025 14:00:51 +0000
ROA not after: Mon 14 Apr 2025 13:00:51 +0000
asID: 13760
IP address blocks: 142.190.30.0/23 maxlen: 23
142.190.32.0/23 maxlen: 23
142.190.34.0/23 maxlen: 23
142.190.36.0/23 maxlen: 23
142.190.38.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8a:e0:99:97:1b:61:3f:c8:2d:46:73:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55640631-1b52-4455-ab16-7633a452f342
Validity
Not Before: Jan 14 14:00:51 2025 GMT
Not After : Apr 14 13:00:51 2025 GMT
Subject: CN=27353295-7ad7-444b-bae1-c87cca01aee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e5:c4:53:f5:94:d5:76:0a:10:08:d9:39:21:
00:d8:6c:d0:db:8a:86:71:41:5c:f0:88:e5:dd:69:
81:75:9e:61:ed:f2:a4:53:c9:b2:c3:50:59:85:e1:
1f:18:57:2f:78:ea:41:56:b8:2b:10:7d:74:52:88:
6b:4a:25:4f:69:15:1f:95:55:44:d4:a9:ab:49:be:
b4:42:4c:1f:07:23:fa:50:00:e2:d2:de:15:bc:38:
14:d7:0e:48:d9:af:8f:48:02:72:7f:da:f9:6a:1e:
38:29:db:6f:a2:8f:a5:db:45:84:38:9d:6f:7c:a8:
31:18:ef:8c:6c:0f:1e:76:22:4f:f6:3c:1c:1a:ba:
ff:14:87:67:a9:3f:90:d5:e5:cf:af:35:66:b9:fa:
20:f4:10:e3:75:e1:56:ab:94:cf:bd:42:40:73:73:
09:f4:59:e4:c2:bd:6f:a2:34:d1:18:f5:65:7f:25:
3d:c3:90:dc:aa:2d:2e:1b:c5:b2:cd:5c:82:c8:9d:
ba:80:c7:e6:b4:5c:a3:76:3c:1a:9a:4c:a6:ab:16:
cd:45:ff:c3:58:66:32:4f:57:6b:4a:ac:65:fa:a9:
77:ad:49:f3:ea:d0:b9:31:64:9b:be:56:02:c6:49:
3a:05:87:44:db:c6:6c:c8:ab:0b:29:d2:19:0f:8c:
89:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:DA:69:67:8D:5B:44:13:4E:2D:47:F5:75:55:89:90:D4:5C:FE:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/532d06b0-0e56-37ae-94d5-b8a87e1e3730.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl
X509v3 Authority Key Identifier:
keyid:50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
sbgp-ipAddrBlock: critical
IPv4:
142.190.30.0-142.190.39.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:59:52:6e:51:20:dd:cc:b0:fd:f8:a4:63:86:14:8b:3a:34:
54:77:3a:56:3f:b6:2e:d1:84:7f:39:ca:b2:67:27:1c:53:96:
1f:71:38:6e:c9:e2:06:24:19:c3:95:25:4d:54:58:1e:29:24:
1e:bc:9d:f6:dc:c8:2c:46:75:d8:3d:8a:ab:ce:38:02:fb:9f:
12:79:16:c7:c6:fc:0f:0c:14:df:b6:83:84:a7:f8:0f:da:fd:
f5:28:a7:59:1a:d5:46:32:39:4d:8f:00:a4:d6:14:37:a8:c4:
96:37:f7:90:34:7e:12:fc:bd:b4:03:16:51:c4:8f:4a:91:91:
df:be:d6:89:88:91:a0:a4:b7:d7:de:56:ff:88:97:36:8e:fb:
ae:7e:74:39:96:78:a2:bb:e0:2c:7f:25:28:15:af:ff:1e:1c:
34:d5:e3:7e:81:19:5d:62:d8:b9:49:e7:2a:18:89:da:b7:6f:
79:fa:3a:08:20:1a:27:f3:c6:44:66:03:88:ad:61:dc:39:98:
65:76:f4:46:ef:55:5c:35:c8:56:eb:dd:fd:60:97:59:71:08:
6a:84:16:65:cc:db:a6:fd:d7:ef:5f:ba:95:a3:a5:1a:1e:50:
3f:72:09:dd:9b:11:0f:e2:73:f8:ac:71:29:30:c4:d8:8b:d3:
33:ec:98:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:55:26 2025 by rpki-client