Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/2dd6f539-f0a8-3109-acc2-e6b04eed1f2e.roa
File: 2dd6f539-f0a8-3109-acc2-e6b04eed1f2e.roa (raw, json)
Hash identifier: XBd/rkArlzr3nl9AVJcKiywV/5/No/9maSjjcVrrtyU=
Subject key identifier: B4:CB:50:7D:4B:6D:22:4C:73:2E:F2:DA:A7:CF:B2:EA:79:67:F0:57
Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial: 010D0C9F432858487325C9D8280E9AEA99C35F20
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/2dd6f539-f0a8-3109-acc2-e6b04eed1f2e.roa
Signing time: Mon 06 Jan 2025 02:00:40 +0000
ROA not before: Mon 06 Jan 2025 02:00:40 +0000
ROA not after: Sun 06 Apr 2025 01:00:40 +0000
asID: 54113
IP address blocks: 140.248.252.0/25 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:73:25:c9:d8:28:0e:9a:ea:99:c3:5f:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
Validity
Not Before: Jan 6 02:00:40 2025 GMT
Not After : Apr 6 01:00:40 2025 GMT
Subject: CN=13b3f773-d961-40ab-9e0f-1ca294c6bfdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0a:9b:9b:19:ca:1e:ef:ef:8f:c7:4e:65:52:
16:c3:52:0d:fb:db:8f:57:fd:f3:86:fa:34:ce:bd:
35:75:dc:d6:5e:e9:6c:94:ad:d9:56:7d:4a:e1:4a:
2c:aa:f6:6b:9a:d7:e1:01:fb:20:0f:e8:da:b0:9f:
60:29:b2:5d:65:76:ec:7d:d7:cb:15:91:62:b1:97:
28:44:fd:f5:29:9b:93:90:ed:da:94:70:0c:c8:e7:
f7:13:cb:69:91:57:e6:ec:d6:89:78:d5:08:5a:9c:
35:3e:3b:60:b8:86:db:aa:f4:32:cb:99:45:8b:ad:
de:0f:c1:df:b0:e8:36:46:d5:25:41:be:fe:99:5d:
9f:01:57:db:c7:8d:86:9a:58:64:26:fa:56:fe:11:
3d:87:a0:94:cc:40:c7:18:57:77:9e:fd:99:b7:c0:
27:6d:77:13:63:d6:35:ac:cd:de:ab:03:37:6f:44:
14:13:88:df:5c:59:5a:ae:4b:8e:a9:a0:a1:e8:70:
dd:38:84:15:b2:78:ff:83:9d:67:f8:96:c5:df:7a:
c7:bd:8a:66:b4:fd:40:a1:a8:f3:62:2a:1c:2b:6b:
20:9d:e8:78:f7:9c:80:a4:3a:91:30:a4:7f:c0:11:
45:14:20:cb:d0:9c:48:31:78:87:4f:52:06:c5:b9:
93:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:CB:50:7D:4B:6D:22:4C:73:2E:F2:DA:A7:CF:B2:EA:79:67:F0:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/2dd6f539-f0a8-3109-acc2-e6b04eed1f2e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
X509v3 Authority Key Identifier:
keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
sbgp-ipAddrBlock: critical
IPv4:
140.248.252.0/25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:d9:76:ab:52:1b:ae:fe:3d:9f:ff:4d:71:f5:5d:77:38:45:
b3:ae:e4:b8:55:12:97:3e:24:f7:2c:19:5b:e8:25:b3:17:0e:
61:de:07:97:a2:46:77:a6:d0:1b:e2:2e:7d:3d:e7:de:ad:86:
bc:b3:de:a6:36:d5:8b:0b:8f:25:95:1b:38:5d:18:e7:0f:5d:
da:ca:e7:b0:3f:66:9b:01:07:30:df:03:ae:9b:73:1f:d3:94:
df:75:2a:cf:41:1a:cb:67:d7:ca:b5:90:ca:ba:37:6e:ed:9e:
27:23:8b:f3:4e:3c:94:31:7c:1e:29:f9:84:bb:ff:d2:78:cd:
a1:35:42:69:2d:a9:10:2d:30:15:6f:b6:5a:cb:30:f3:9b:39:
8f:82:b6:45:b3:f5:75:dc:89:d0:b7:8c:3f:a8:52:e2:6f:cb:
a9:6a:a3:52:5a:c4:bf:5c:f9:e4:d7:35:36:45:fc:05:18:42:
93:e5:f9:8e:9c:b2:bd:a6:5e:a9:be:d6:f5:4a:81:23:6f:55:
e6:97:67:0d:e6:c9:1a:a3:e4:f6:cf:1d:84:12:d1:b0:4d:ef:
0a:1f:73:6c:9c:3b:33:8d:fe:ec:b1:11:b1:9f:7d:cc:84:22:
83:e4:b4:d2:33:ed:fb:b2:e8:90:a6:62:d0:3a:ad:11:7f:f7:
bb:2b:ba:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:07:07 2025 by rpki-client