Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/06a79a51-0ad5-343a-b679-dde6ab8c434c.roa
File: 06a79a51-0ad5-343a-b679-dde6ab8c434c.roa (raw, json)
Hash identifier: RhoceFL20JjjWP0krsworwTjTUUcDso3BDoG9wInBHY=
Subject key identifier: BB:C3:D9:76:D5:79:3C:E9:55:33:AF:F0:E1:AC:63:EA:C9:AF:D4:CA
Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial: 010D0C9F432858487325C90887076427BC8FFFC0
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/06a79a51-0ad5-343a-b679-dde6ab8c434c.roa
Signing time: Mon 06 Jan 2025 02:00:40 +0000
ROA not before: Mon 06 Jan 2025 02:00:40 +0000
ROA not after: Sun 06 Apr 2025 01:00:40 +0000
asID: 54113
IP address blocks: 140.248.243.0/25 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:73:25:c9:08:87:07:64:27:bc:8f:ff:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
Validity
Not Before: Jan 6 02:00:40 2025 GMT
Not After : Apr 6 01:00:40 2025 GMT
Subject: CN=c9ac1c63-b651-4a61-91e8-56c7f2d91fd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e9:ed:e7:d4:b9:51:6f:83:cc:7e:9d:9c:82:
8a:58:dd:c5:37:01:9b:aa:3d:73:48:6b:ca:d1:de:
53:d4:c6:b9:64:2e:c7:15:31:ca:95:0c:65:e8:bf:
78:55:42:9b:67:e8:c4:de:c2:be:c1:40:a0:b2:92:
e7:b5:84:0b:0d:0a:63:21:d9:c9:cb:eb:94:72:f1:
7c:74:08:52:e4:aa:f6:61:6b:e0:e4:36:4d:71:ce:
da:7a:62:1b:b5:0a:50:59:a2:a6:7b:e6:e6:dc:17:
b8:e7:e6:ed:b2:72:a6:f4:44:6d:3d:89:d1:b2:55:
22:18:08:b9:28:db:a0:2f:6e:90:9c:bb:84:38:d4:
b8:28:cf:ac:96:94:4d:81:72:41:fc:4a:9f:51:2c:
0a:8d:b8:88:68:f9:e3:ef:36:47:9f:b0:f0:a5:05:
9a:63:e5:a8:47:8d:1f:f1:3d:d4:4c:2c:73:84:75:
c0:03:2b:b9:8a:07:0a:11:e6:e4:d1:60:46:46:7d:
29:36:e1:7b:c7:64:ed:d6:d0:0e:91:c4:1a:6c:ae:
ea:92:23:84:97:db:04:fc:42:5b:8f:a2:72:b5:31:
88:57:5a:a8:73:b3:d7:06:34:d9:24:71:0d:e9:7e:
68:d8:18:55:9c:e5:65:ab:e4:ff:ee:a0:36:fa:d5:
e9:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:C3:D9:76:D5:79:3C:E9:55:33:AF:F0:E1:AC:63:EA:C9:AF:D4:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/06a79a51-0ad5-343a-b679-dde6ab8c434c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
X509v3 Authority Key Identifier:
keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
sbgp-ipAddrBlock: critical
IPv4:
140.248.243.0/25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:68:9f:47:8e:43:c4:a8:29:02:a4:a7:5f:33:aa:73:93:ba:
6e:49:14:b5:5e:2b:5d:97:f3:ee:35:be:9c:e9:21:8b:bb:bd:
b1:af:58:3d:db:38:cb:77:da:a5:46:87:ac:d5:e8:9f:20:d3:
5e:34:dc:c9:ce:7d:91:60:b5:3c:d2:41:94:74:80:81:71:bb:
96:f5:25:21:1f:26:b8:4f:f6:2f:83:2b:9f:17:22:7f:82:4b:
4b:7f:14:97:3e:04:29:21:6b:51:7f:52:b5:23:54:37:ec:b8:
cb:92:b7:27:90:b2:4b:47:41:4f:9e:6c:72:23:cf:fe:df:0b:
2a:40:a0:52:fa:14:f9:14:2c:99:19:a8:62:58:02:04:33:dc:
cf:1c:91:1f:f3:cd:2b:44:67:1f:08:d1:16:bf:aa:b3:b1:b0:
80:d1:5c:40:02:ac:13:33:f1:af:7d:f1:65:5c:0f:bb:db:05:
5a:7f:3f:cb:ff:d5:16:a1:d5:f8:9c:98:1a:27:ab:02:65:f8:
16:01:c5:06:3c:b0:b9:d0:7a:c1:75:39:05:92:78:11:a1:c2:
84:b4:fa:2c:10:3e:5b:6a:8f:b6:ed:52:e0:48:66:cf:42:59:
6f:d7:f9:9f:aa:6c:3b:3d:7b:71:e5:8c:7e:62:4a:97:45:a2:
39:c1:59:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:57:31 2025 by rpki-client