Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/1cb5efad-7ea8-3233-a95e-eae80a4544e1.roa
File: 1cb5efad-7ea8-3233-a95e-eae80a4544e1.roa (raw, json)
Hash identifier: mgJx5qnqMYAzHEPmJXZzjCh9SE2TNRLsZSpvJCPhMME=
Subject key identifier: E6:CD:1E:8B:46:6C:48:38:71:FE:B9:D1:B2:ED:62:55:9C:3F:2F:AC
Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial: 010D0C9F432858487325C0C3A2D746A3B04F7140
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/1cb5efad-7ea8-3233-a95e-eae80a4544e1.roa
Signing time: Mon 06 Jan 2025 02:00:40 +0000
ROA not before: Mon 06 Jan 2025 02:00:40 +0000
ROA not after: Sun 06 Apr 2025 01:00:40 +0000
asID: 54113
IP address blocks: 140.248.212.112/28 maxlen: 28
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:73:25:c0:c3:a2:d7:46:a3:b0:4f:71:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
Validity
Not Before: Jan 6 02:00:40 2025 GMT
Not After : Apr 6 01:00:40 2025 GMT
Subject: CN=83da4c23-5693-48d0-b5f7-a0bec0f750ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:33:2d:1a:2c:32:ee:af:b2:56:f0:70:ab:d8:
df:a2:5a:84:eb:23:0c:f4:31:12:b8:97:60:ee:9d:
22:2c:01:f3:17:ab:e1:7e:00:4c:aa:d1:4e:b7:0e:
3c:43:a4:ce:5b:d7:f7:1b:19:95:c0:ce:67:98:40:
1c:82:6d:33:3e:c0:07:a7:51:04:ea:5a:21:6b:5d:
d9:71:07:bf:50:dc:f7:32:2a:b6:fc:83:6d:14:b4:
b1:7e:50:11:4a:e7:8a:29:d5:54:ff:09:30:ad:dd:
ce:7d:bd:bc:b6:95:b0:7d:2d:c1:a9:4c:9e:51:12:
fc:cc:08:fa:4c:8f:ef:73:8f:78:16:2e:2d:e6:69:
c7:29:12:8b:aa:b0:a6:11:bc:d6:57:cf:af:30:b9:
52:c8:5b:ae:fd:14:d4:d3:8d:da:fb:79:95:49:f8:
7f:3a:fc:ea:2c:d5:7f:c0:65:20:03:a3:d3:20:7c:
05:16:84:aa:d9:8b:12:82:98:fe:3a:85:60:74:47:
7d:e1:8d:57:d0:57:c7:85:ee:fd:7a:c5:4e:1c:e7:
c8:86:96:a5:2c:97:e2:ba:62:38:5f:55:41:59:48:
53:91:eb:cd:4b:38:cf:56:08:79:80:74:24:fd:3f:
33:aa:61:58:6a:35:6f:bd:8a:93:c7:86:db:79:ca:
1a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:CD:1E:8B:46:6C:48:38:71:FE:B9:D1:B2:ED:62:55:9C:3F:2F:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/1cb5efad-7ea8-3233-a95e-eae80a4544e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
X509v3 Authority Key Identifier:
keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
sbgp-ipAddrBlock: critical
IPv4:
140.248.212.112/28
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:e0:47:89:25:3b:11:a2:ad:e3:97:d4:e1:26:08:69:2b:c8:
60:a2:1d:6a:1a:ef:ac:34:51:25:59:8e:3d:f1:44:11:0e:ea:
ee:27:4e:a4:98:25:5e:b5:4c:f9:d2:0f:a0:fe:d2:8c:70:22:
64:b3:41:22:de:ff:a3:f3:d0:04:79:3b:09:a3:7f:58:f0:a5:
5e:6c:84:51:80:3c:e7:c4:73:00:4c:e2:98:70:7f:a7:fa:92:
7b:b6:5e:93:5a:05:a9:ce:19:02:09:22:a7:bc:44:21:09:53:
16:a0:00:ec:e0:b3:fb:3d:9e:1e:66:5c:10:21:ca:b7:a4:2e:
c4:98:e4:3d:fa:b1:03:19:9d:c1:68:3f:e8:3e:90:48:33:62:
66:fb:69:27:6f:e1:9e:23:45:3c:1f:b8:ec:d6:71:e7:5b:e3:
7d:4b:56:31:49:1b:b8:65:cd:ec:9e:3c:3d:fe:12:f9:c5:c5:
65:15:b9:c3:b4:f4:10:c5:09:50:58:c7:b5:d8:85:93:08:da:
06:20:3e:42:5f:ac:5f:30:97:aa:e2:25:c9:cb:b4:f9:f3:03:
f8:c2:e2:83:de:c5:f9:72:58:2c:01:aa:83:45:5e:9b:06:c9:
a1:26:3b:45:cb:59:e4:23:3d:3f:ff:c9:1f:0d:d8:91:9a:a7:
27:5d:01:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:03:41 2025 by rpki-client