Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/32edac01-155a-3d0e-a2c1-ab944d3296fa.roa
File: 32edac01-155a-3d0e-a2c1-ab944d3296fa.roa (raw, json)
Hash identifier: HjrfxM7iLW7LLx0NRGKXAhUR6w/PowTGVFs1F9uu1Qg=
Subject key identifier: 09:43:9A:11:14:46:1E:D4:1A:7F:84:DB:63:93:79:08:52:E2:9E:E9
Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial: 010D0C9F4328584953C44D5F311F5C88BC78B480
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/32edac01-155a-3d0e-a2c1-ab944d3296fa.roa
Signing time: Thu 27 Mar 2025 13:00:52 +0000
ROA not before: Thu 27 Mar 2025 13:00:52 +0000
ROA not after: Wed 25 Jun 2025 13:00:52 +0000
asID: 11290
IP address blocks: 140.106.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:53:c4:4d:5f:31:1f:5c:88:bc:78:b4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Validity
Not Before: Mar 27 13:00:52 2025 GMT
Not After : Jun 25 13:00:52 2025 GMT
Subject: CN=3ce1370d-cd4e-463f-8c2e-692458b31c3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f1:3f:dd:d9:55:05:b7:17:4b:d2:10:75:2d:
13:f7:f0:f1:63:4f:be:40:aa:3b:22:c6:a8:cb:0c:
ec:da:bc:4c:2f:43:0c:02:f4:12:60:5d:be:9d:5d:
3a:fd:d9:6e:b0:10:33:ef:3e:12:dc:69:4e:11:e6:
42:77:f4:a5:22:de:f6:60:21:30:91:2c:a4:e1:11:
4f:64:67:10:00:72:85:91:c6:dc:2e:29:39:fe:b3:
1d:42:87:af:a7:4e:37:59:ee:e1:90:98:50:62:58:
e0:fc:73:d3:41:b5:c5:cf:00:e7:11:95:f1:fc:f4:
af:26:2f:9a:c8:32:8a:61:80:6e:45:29:49:d3:59:
30:ef:b6:43:54:25:3a:f0:79:92:2a:39:45:1d:06:
5e:8c:59:75:e2:9c:94:aa:5f:fd:44:cf:e5:a0:d5:
c2:20:b7:ee:a5:5e:21:3e:cf:68:95:eb:a7:a6:02:
16:10:42:e1:fa:78:35:16:2c:f4:3e:f0:26:84:ce:
46:39:79:c4:cf:49:93:39:0f:8d:c6:b6:3c:6d:3e:
51:60:df:d4:fc:c4:ea:2d:ed:fb:9f:76:b5:a2:07:
91:37:c7:d3:ce:cd:17:b6:4a:c8:46:32:cc:dd:d3:
8d:04:33:6c:9a:25:06:f3:e7:4e:72:a1:8e:a4:a5:
e1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:43:9A:11:14:46:1E:D4:1A:7F:84:DB:63:93:79:08:52:E2:9E:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/32edac01-155a-3d0e-a2c1-ab944d3296fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
X509v3 Authority Key Identifier:
keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
sbgp-ipAddrBlock: critical
IPv4:
140.106.0.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:97:43:c2:49:34:29:60:c8:51:e2:84:5e:26:ed:3a:e7:78:
9b:c8:5d:ae:3a:25:58:7d:f1:ca:0a:f0:f3:3c:f3:3b:a8:34:
a5:59:33:7e:b8:68:18:90:cc:8f:e6:8b:d7:b1:5c:bd:f9:aa:
52:f2:1c:9b:a9:2f:a4:cd:97:bc:bc:b8:fb:36:45:ef:b8:ad:
2b:d4:e0:6e:3b:ba:3c:9e:64:cb:da:1f:d4:0a:b4:53:25:03:
20:a6:df:1f:88:99:15:12:b0:97:6e:a4:7a:59:36:65:7e:7b:
2f:8c:36:f2:e1:f3:8f:93:b7:48:4a:e5:73:61:b5:7a:6e:24:
a1:c7:e5:77:60:81:3a:04:75:3e:99:35:d9:b5:a2:82:22:a3:
35:61:38:51:61:06:9d:80:78:2f:e9:cb:ae:32:b6:68:1b:04:
1d:01:c2:22:ed:2e:ac:b5:ba:ff:47:25:9f:28:0d:71:9f:25:
b3:ed:b1:9c:46:9b:bd:ce:89:97:7c:ba:db:dc:67:53:a4:4d:
da:33:69:09:09:04:b3:0a:90:0d:78:3d:de:3a:92:68:75:34:
50:a1:04:c3:76:78:ca:e3:ef:9c:da:83:5a:5a:91:04:bd:85:
5d:99:85:24:32:44:7f:68:41:b3:ec:24:70:51:2b:c3:be:1a:
de:8b:c0:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:49 2025 by rpki-client on console.sobornost.net