Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/442b47f6-5bc3-30e9-bf8c-37ceb123ab09.roa
File: 442b47f6-5bc3-30e9-bf8c-37ceb123ab09.roa (raw, json)
Hash identifier: Hf39Kghcq2yaaGxBoSxFT33mM0axps5kzZOgnIJzoeM=
Subject key identifier: 0D:C2:E8:32:FB:85:B8:8E:73:21:7E:8E:D1:3C:80:8A:22:4B:2B:E8
Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial: 010D0C9F432858487325C507F63D80133DA538C0
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/442b47f6-5bc3-30e9-bf8c-37ceb123ab09.roa
Signing time: Mon 06 Jan 2025 02:00:40 +0000
ROA not before: Mon 06 Jan 2025 02:00:40 +0000
ROA not after: Sun 06 Apr 2025 01:00:40 +0000
asID: 54113
IP address blocks: 140.248.240.0/26 maxlen: 26
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:73:25:c5:07:f6:3d:80:13:3d:a5:38:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
Validity
Not Before: Jan 6 02:00:40 2025 GMT
Not After : Apr 6 01:00:40 2025 GMT
Subject: CN=4a3f5520-4ab4-438a-90c1-f4fcf1a6d214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:55:4b:1a:4a:b9:3e:03:61:9b:a2:77:6b:80:
7c:a9:91:21:09:ef:ed:60:fa:20:52:3e:ad:cb:c8:
db:6c:e7:86:e5:fb:12:ed:32:d9:42:fd:87:94:91:
80:ed:82:0b:96:80:a1:f5:9e:f9:1c:5f:50:10:c7:
eb:e9:d5:77:2c:5c:2d:c8:89:42:01:f5:dd:bc:10:
04:16:3b:82:30:a5:15:e4:d3:18:b7:06:44:f7:dd:
ad:6f:dc:34:7f:dd:97:b2:81:8d:f3:95:7a:1c:df:
e1:09:c4:7c:87:70:a9:14:c4:80:98:83:a3:94:4c:
d6:48:2d:96:3a:38:2a:06:38:9f:50:32:a7:3e:e3:
1c:fb:ad:9a:35:b8:28:4b:3c:b9:ef:88:5b:b1:4f:
f1:96:65:76:4e:e7:11:ba:5c:cf:ec:ed:f8:02:12:
d1:3b:38:67:92:02:95:23:c9:17:c7:52:3d:26:cf:
7a:d4:9a:fa:74:85:2e:c2:45:20:c5:b8:23:5a:6d:
28:4a:ac:b9:3e:b7:6e:56:01:ca:55:ce:4d:79:a4:
e7:25:f1:ab:5e:df:fa:49:5c:6c:27:98:e3:4c:18:
17:e4:6a:cd:18:1c:32:91:ed:b9:e6:67:ef:34:85:
c0:ac:26:16:27:d4:20:2a:61:95:81:7c:7f:67:f4:
64:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:C2:E8:32:FB:85:B8:8E:73:21:7E:8E:D1:3C:80:8A:22:4B:2B:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/442b47f6-5bc3-30e9-bf8c-37ceb123ab09.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
X509v3 Authority Key Identifier:
keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
sbgp-ipAddrBlock: critical
IPv4:
140.248.240.0/26
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:1b:38:dc:2d:e2:4f:57:a9:18:f4:13:af:73:ca:1e:c5:1e:
f3:a4:64:84:0c:5d:f7:cb:ca:2b:6d:85:a4:b4:cf:14:91:04:
4e:ac:e6:0b:f6:28:b1:74:d1:40:12:c4:53:58:f8:07:ab:f8:
14:94:4c:6c:56:d9:d2:8e:02:0a:86:66:44:16:25:9c:cc:6c:
ad:9d:00:5f:a8:94:c0:14:c3:14:ac:ef:90:e2:e3:78:6d:29:
a0:b3:3d:66:e9:86:23:60:8b:b4:44:65:a1:77:34:5a:f1:c1:
b5:5b:8c:fa:bf:ef:8d:78:28:f6:04:3b:be:6f:67:0b:2a:5f:
60:d3:f4:8b:a7:8e:bb:a3:d1:89:bf:bd:61:f2:d4:34:d7:9c:
9f:de:62:21:7d:0b:60:26:ae:5d:d3:4c:f7:cf:25:27:eb:41:
95:e9:bc:c6:64:37:78:c3:28:27:40:54:ed:14:86:57:66:12:
24:72:b8:f1:2c:60:7c:ab:6a:4e:5b:69:61:24:1d:30:70:8d:
78:c4:67:62:e3:52:5d:70:4f:47:69:92:98:7e:dd:9c:d4:3d:
09:9e:4c:21:e9:3f:6e:ec:06:6c:38:e1:f0:03:a9:a5:33:55:
c6:12:7f:d8:99:40:df:8d:72:0c:e8:ec:9d:83:08:44:aa:c7:
90:de:07:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:58:35 2025 by rpki-client