Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/2ceb25f6-8048-3ac3-aef5-7143c487d1e3.roa
File: 2ceb25f6-8048-3ac3-aef5-7143c487d1e3.roa (raw, json)
Hash identifier: 7G/csGeCDi+W1YgTJtnX12M3r7wY+XW+M5et3iruHZ8=
Subject key identifier: E2:55:EE:E3:C3:EB:C0:12:63:20:71:FD:F0:88:18:39:7B:47:74:21
Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial: 010D0C9F432858487325CF801BA02457F85DCC20
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/2ceb25f6-8048-3ac3-aef5-7143c487d1e3.roa
Signing time: Mon 06 Jan 2025 02:00:40 +0000
ROA not before: Mon 06 Jan 2025 02:00:40 +0000
ROA not after: Sun 06 Apr 2025 01:00:40 +0000
asID: 54113
IP address blocks: 140.248.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:73:25:cf:80:1b:a0:24:57:f8:5d:cc:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
Validity
Not Before: Jan 6 02:00:40 2025 GMT
Not After : Apr 6 01:00:40 2025 GMT
Subject: CN=2f1bb160-ef79-41c2-ace9-ea112215e1f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:bd:ab:d8:8c:30:6a:a3:85:d3:de:95:c3:e0:
20:cb:e0:33:df:7e:13:33:36:4f:f4:f0:4e:05:46:
d9:db:b9:33:66:09:ad:16:b2:ed:0b:cc:31:07:e6:
77:f1:46:cf:41:a1:c7:6a:7c:6b:ee:c2:b0:28:26:
24:81:8c:ab:63:3c:d5:0d:54:07:52:6e:b6:79:d0:
a7:fa:9d:99:da:e9:08:6b:71:c4:78:ef:be:2f:a4:
4b:90:c3:63:33:1c:33:e8:64:a8:15:52:af:13:35:
88:0d:a5:f4:e4:97:bc:63:99:89:58:83:ee:3a:e0:
33:2f:1d:ac:4e:83:a3:79:7e:26:b1:17:a5:1f:72:
5f:dd:71:a9:b4:c7:29:8d:95:3a:b9:ab:c5:d9:58:
54:1a:70:6a:83:5a:58:ec:61:ef:dd:0a:c4:b8:7f:
df:33:a7:26:5f:04:1c:36:ea:d0:cd:bd:89:5d:df:
e2:fe:1f:1e:6e:78:f3:79:58:af:09:ce:47:e8:a0:
b3:cc:bb:8e:ef:06:0c:ed:a5:f2:e0:e2:bb:a2:0f:
7d:6f:de:b4:42:13:f9:7f:98:0d:a0:41:fa:29:51:
5a:7c:44:6a:d6:6e:e1:15:57:cb:aa:34:35:c8:1f:
4b:93:9c:62:e8:47:ae:1f:dc:d7:47:58:b0:01:1e:
cc:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:55:EE:E3:C3:EB:C0:12:63:20:71:FD:F0:88:18:39:7B:47:74:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/2ceb25f6-8048-3ac3-aef5-7143c487d1e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
X509v3 Authority Key Identifier:
keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
sbgp-ipAddrBlock: critical
IPv4:
140.248.199.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:38:59:ef:34:5d:83:64:6c:dc:d8:27:64:b9:e2:f2:cf:46:
02:ee:ef:95:a0:6d:d7:df:3a:c5:a2:85:2d:0e:b4:46:aa:2d:
a1:71:b2:be:7b:c6:80:86:25:35:25:d5:02:aa:ae:bf:c8:b4:
93:5e:c5:ab:a9:0e:54:01:40:fa:85:76:fc:0a:d3:46:4a:31:
65:e9:ab:e7:10:df:64:a1:be:6f:06:72:01:c8:55:92:ef:8e:
68:40:51:f4:57:00:0a:74:6a:8d:4f:1a:ac:e7:0c:93:e8:bf:
26:c7:2c:73:11:2e:3f:a3:4b:fa:0b:1f:34:91:a9:94:6a:99:
d3:8b:d1:82:76:14:21:ce:be:fe:6e:d7:28:ef:68:07:14:cb:
fe:1d:41:fb:fd:ec:5c:b5:29:0f:5c:3c:14:a5:f2:ca:65:5a:
3f:6d:10:83:fc:1d:10:30:96:29:e9:dc:73:50:1c:25:fe:d8:
bb:05:9e:8a:1b:7b:9c:ec:84:d7:3c:b4:4c:f6:14:1f:3f:d1:
a7:40:16:1c:dc:07:14:eb:7b:92:fd:41:51:e1:41:92:65:63:
6e:97:00:de:38:9c:8e:58:1d:dc:59:a2:18:bb:d2:1c:ab:c6:
13:59:b1:00:41:5b:c6:92:4e:0c:e1:63:8e:4c:d6:a7:db:25:
36:02:0f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:58:16 2025 by rpki-client