Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/4ef1567d-c5cc-328b-9777-c38749d3e355.roa
File: 4ef1567d-c5cc-328b-9777-c38749d3e355.roa (raw, json)
Hash identifier: hvVT02bVdPQZvaWVaxNNRYlCgFHLdwN63tB6oGfyF4s=
Subject key identifier: 7B:FD:60:A6:8E:5F:EC:FF:65:50:82:67:A2:42:37:5C:27:E9:14:8B
Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial: 010D0C9F432858487325D93A033EA4E0F577F800
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/4ef1567d-c5cc-328b-9777-c38749d3e355.roa
Signing time: Mon 06 Jan 2025 02:00:40 +0000
ROA not before: Mon 06 Jan 2025 02:00:40 +0000
ROA not after: Sun 06 Apr 2025 01:00:40 +0000
asID: 54113
IP address blocks: 151.101.248.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:73:25:d9:3a:03:3e:a4:e0:f5:77:f8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
Validity
Not Before: Jan 6 02:00:40 2025 GMT
Not After : Apr 6 01:00:40 2025 GMT
Subject: CN=10d0ea71-b9f9-444d-9c29-63f67525f328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:07:5a:0c:68:d6:b4:94:3c:ee:bd:e3:40:03:
7c:41:ce:45:3d:93:25:2e:cc:87:af:da:58:e3:00:
92:fb:c1:d2:8a:ee:cc:48:12:a7:02:64:f0:6e:4c:
b8:3d:01:c2:1f:5d:a2:1a:f9:f9:9b:95:cc:84:b3:
76:bc:b7:36:3c:6d:0a:0b:64:fc:5f:7c:4e:ae:70:
3e:d4:bb:36:7c:25:98:4c:57:e1:1f:ad:49:e0:0b:
01:48:6e:ff:dc:60:73:64:22:b5:0f:d0:aa:18:8d:
ed:23:d2:04:18:03:03:2f:a6:e0:14:79:cf:de:d1:
e9:3c:19:f6:8c:9e:36:3b:ff:9a:3f:27:9b:01:ae:
61:22:3d:d5:4e:13:a0:d0:11:96:ed:63:8b:b8:d9:
95:a2:ff:87:e3:ab:31:bb:a5:06:94:b4:d4:03:91:
7d:4d:12:42:65:d3:f6:56:28:ef:1c:b4:31:ad:f8:
a5:ae:e6:a7:0c:df:08:51:ab:68:6f:70:01:be:31:
57:4f:af:8c:a4:26:f7:c8:63:6e:13:62:b0:96:03:
e5:67:1e:01:00:da:59:6f:23:48:bc:bf:d8:69:0c:
72:e0:78:03:a3:c3:67:fc:3c:35:63:b6:b7:7b:37:
74:cb:f5:19:a1:07:63:e1:8f:68:da:02:1b:c3:dd:
cb:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:FD:60:A6:8E:5F:EC:FF:65:50:82:67:A2:42:37:5C:27:E9:14:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/4ef1567d-c5cc-328b-9777-c38749d3e355.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
X509v3 Authority Key Identifier:
keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
sbgp-ipAddrBlock: critical
IPv4:
151.101.248.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:44:0b:34:d1:9d:1f:16:d5:57:19:81:93:c2:d9:8a:ec:f6:
4a:a1:f1:91:82:bd:2a:ad:b1:2a:dd:3f:d0:d7:93:29:43:10:
5f:f9:ea:3f:4e:82:6f:4b:67:9d:89:96:9b:57:c5:51:7d:16:
3d:0d:1d:5e:28:a4:dc:cd:71:f0:4c:62:37:da:0c:1f:bf:07:
a3:9f:a8:b9:16:b6:29:0e:39:c7:3c:84:35:76:75:ff:33:03:
a3:22:ec:c8:5a:97:3c:d3:bc:f3:42:8b:18:a2:b9:9d:f1:fe:
b7:ae:db:9c:d2:53:7a:93:bf:d0:f7:85:cc:74:d8:af:b1:b1:
ba:e8:4b:3c:3a:dd:fd:3b:ff:7c:e9:3e:2a:c5:16:49:15:29:
92:a0:7c:4d:58:e0:3e:e5:eb:2a:b5:7c:5e:a3:af:5b:18:7e:
ab:96:05:1e:97:a3:fc:cd:13:56:c1:fa:ee:69:d7:b4:66:ee:
a2:1f:67:b9:5c:62:80:bc:a2:68:57:50:ee:96:cc:3b:05:91:
fb:66:20:73:6d:2e:52:e3:42:e2:f4:45:e9:bd:8c:25:69:b5:
f6:69:59:f0:63:e4:a6:75:85:36:23:aa:66:96:b8:a5:44:91:
f9:3c:99:bd:a8:58:4b:03:9f:77:94:f2:4f:77:f0:41:91:85:
52:be:00:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:10:43 2025 by rpki-client