Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/3c6171b5-f200-3902-9504-6b5f9eb4fa1e.roa
File: 3c6171b5-f200-3902-9504-6b5f9eb4fa1e.roa (raw, json)
Hash identifier: NKrXciDAB+uKpmI1FwiQHDW9lW0/HndVHujM+0CzHTU=
Subject key identifier: 82:9C:3A:64:61:3E:63:06:7C:30:73:56:41:09:F7:5B:F6:F7:03:A7
Certificate issuer: /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
Certificate serial: 010D0C9F43285848A9962355CF759513BF6EF780
Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/3c6171b5-f200-3902-9504-6b5f9eb4fa1e.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 14340
IP address blocks: 140.190.240.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:23:55:cf:75:95:13:bf:6e:f7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=1f9d5d33-f458-4b70-a79d-f758722d8c36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:8f:03:23:ab:59:85:83:56:10:f2:8c:f3:cb:
c5:42:4a:0c:66:d7:e1:a3:46:22:e1:30:aa:47:46:
44:9f:27:08:2b:aa:e0:77:ef:bd:bc:d7:f2:ea:be:
7c:1a:a7:b5:4b:78:91:12:60:df:1f:2d:df:18:da:
54:6b:54:ca:db:3c:67:8a:ed:9a:7f:8f:e5:87:44:
71:d4:68:73:73:c0:34:49:3d:e9:1f:8d:cd:8c:47:
ef:d1:fc:e1:72:8b:a8:ff:c3:9c:85:2f:a4:49:85:
0b:d3:a7:ca:47:68:f9:48:39:f6:bf:a7:79:19:ae:
3c:83:34:4e:54:c9:7c:5f:75:bf:73:ba:7e:00:ae:
9d:12:06:12:e3:63:64:f5:9c:3b:80:6f:0a:4d:1b:
55:e5:11:f0:c8:cf:f3:8f:49:d4:8e:07:26:0d:31:
fa:dc:c6:ec:e4:9d:75:1c:3a:d3:54:19:a9:fd:ef:
18:40:fe:11:28:f5:a6:88:87:33:c7:1b:6e:f0:9e:
d0:02:ab:4f:94:4e:c4:eb:e8:9c:8b:18:f8:10:cf:
29:7a:75:aa:70:50:84:78:e7:f3:66:a7:d7:05:45:
44:c8:22:28:b5:75:7f:8d:11:1d:3c:a1:21:8e:8f:
93:a7:c5:3b:9d:36:b4:d5:bb:ac:92:d5:01:bb:2e:
87:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:9C:3A:64:61:3E:63:06:7C:30:73:56:41:09:F7:5B:F6:F7:03:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/3c6171b5-f200-3902-9504-6b5f9eb4fa1e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl
X509v3 Authority Key Identifier:
keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
sbgp-ipAddrBlock: critical
IPv4:
140.190.240.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:bf:8e:23:0e:20:81:c3:58:9a:ed:38:f6:be:76:88:ad:63:
55:b8:16:fc:dc:81:3d:d6:70:4a:41:1e:ff:35:13:13:78:f2:
e3:68:35:71:1f:fa:44:6c:07:e8:77:f7:78:2d:0f:2d:c1:d6:
59:f1:14:d3:d2:d6:24:17:9d:ec:c5:e8:54:6e:f5:53:ce:d7:
60:6d:8e:60:69:13:e7:07:28:69:d3:ed:41:10:ba:a3:80:43:
86:fb:66:9f:12:e1:97:b7:d0:2f:1e:dd:39:d9:cd:ec:6f:8d:
3c:00:85:ab:91:0c:03:51:f7:6d:0f:67:19:2e:b2:99:f6:19:
4b:c7:1d:d2:ed:1d:bc:34:70:9b:89:e9:7e:f2:76:2b:80:94:
66:ca:b2:29:7f:a6:84:ed:90:e3:46:15:4e:67:8c:c2:b7:e9:
99:1e:31:0b:d9:7a:b5:6c:a0:a0:c2:8e:99:19:74:d5:46:44:
2f:16:0e:df:71:09:bd:f8:4f:98:4a:ee:ef:d8:f6:9e:78:b4:
c0:76:f3:51:02:2b:e6:88:8f:70:0f:55:ec:5d:f1:2a:4b:8f:
dc:18:36:c7:10:75:21:52:5e:18:c7:8a:2e:73:d4:4b:9c:3c:
4e:fb:e0:aa:16:de:43:9f:d1:6c:09:2f:9c:e4:15:ba:86:36:
a7:c1:23:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 03:26:30 2025 by rpki-client on console.sobornost.net