Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/58f5b525-3b04-3980-ab3f-e302d8147214.roa
File: 58f5b525-3b04-3980-ab3f-e302d8147214.roa (raw, json)
Hash identifier: aw9m5Z+jkv1Hr7b6fsVVmF9mhSfp9VB81xrxbRCK38w=
Subject key identifier: E3:5C:B4:E7:29:84:5E:E3:B1:D8:CB:AB:A9:47:A5:87:7E:59:2B:5D
Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial: 010D0C9F432858487325CFA94BDCEC65E60DE5B4
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/58f5b525-3b04-3980-ab3f-e302d8147214.roa
Signing time: Mon 06 Jan 2025 02:00:40 +0000
ROA not before: Mon 06 Jan 2025 02:00:40 +0000
ROA not after: Sun 06 Apr 2025 01:00:40 +0000
asID: 54113
IP address blocks: 140.248.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:73:25:cf:a9:4b:dc:ec:65:e6:0d:e5:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
Validity
Not Before: Jan 6 02:00:40 2025 GMT
Not After : Apr 6 01:00:40 2025 GMT
Subject: CN=ba993f8e-8312-4675-ba32-adc6ce9dccd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:26:27:ee:86:e9:5e:08:a2:33:9d:6e:dc:29:
5e:ef:a4:22:ec:7d:82:94:d0:2f:66:a0:ce:9e:60:
9e:d6:7d:b9:a8:f4:29:9d:15:eb:e2:0f:d9:ab:5f:
a5:76:0c:42:5e:ec:91:7f:ab:1f:d2:43:82:0a:29:
ca:91:9e:b3:7f:db:29:3e:34:b7:d8:3b:71:37:53:
e7:b4:d0:a6:ec:86:7b:c5:e6:b1:24:a2:af:c8:6a:
70:02:aa:7f:76:1f:4e:ce:0d:6e:c9:72:cc:14:8d:
8d:56:73:5e:27:ec:c1:a2:ba:cd:59:6b:a5:72:8f:
1a:1e:ee:02:10:a2:49:b0:96:c3:dc:8e:6b:c9:ae:
96:5a:e6:c2:fc:1b:39:a5:a1:ea:b2:15:c4:bd:40:
de:c9:d4:ce:da:bb:06:57:a9:b8:73:6c:60:12:be:
f5:a1:40:e3:25:99:7d:65:83:f0:5f:8e:aa:f2:2c:
1d:f7:50:f0:b2:57:6d:28:12:24:df:d4:4d:ae:be:
f5:2e:48:0b:58:53:3c:5c:9e:ab:c9:a3:5d:ba:cb:
8d:b0:fb:03:77:4b:01:25:b2:c9:ae:f4:f2:e1:1d:
aa:d0:7c:6e:1f:ed:ba:7a:15:53:bd:ef:f8:4d:41:
f0:15:71:8f:28:52:f1:96:bf:08:f8:fb:50:85:9e:
28:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:5C:B4:E7:29:84:5E:E3:B1:D8:CB:AB:A9:47:A5:87:7E:59:2B:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/58f5b525-3b04-3980-ab3f-e302d8147214.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
X509v3 Authority Key Identifier:
keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
sbgp-ipAddrBlock: critical
IPv4:
140.248.202.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ad:4f:1a:e1:c4:e7:59:28:6f:e4:76:f5:b8:1d:67:5c:95:cb:
1f:1c:56:4f:18:a5:01:97:14:6a:28:d5:d0:27:79:88:12:81:
74:48:f3:b3:e9:d3:02:32:81:82:be:3a:3c:83:41:9a:91:29:
cb:f6:69:bc:65:90:64:75:6b:36:9d:0c:37:ce:a3:7e:12:db:
6a:cf:46:af:06:c5:34:39:b0:f7:79:63:23:dc:42:1f:53:91:
d7:b9:b1:75:81:1a:6d:a9:3c:28:89:07:a9:67:d9:98:70:df:
79:fa:d4:4e:2c:cc:73:7c:e2:5b:4e:3c:73:b0:74:bc:ac:60:
15:e8:cf:64:b5:6d:38:98:84:e3:1a:bc:67:88:f4:50:31:fe:
c0:65:7e:ea:f3:5f:81:b5:d8:9d:7c:fb:c0:41:b4:5e:38:5b:
8d:28:0e:34:41:b4:38:3b:94:5d:ff:78:d4:92:38:2d:78:78:
65:dc:44:21:11:4e:3a:55:63:d2:69:77:6c:3d:cd:a9:4a:82:
85:89:ea:85:af:b6:01:b9:ab:6c:94:6a:af:13:1a:c6:1f:fc:
ed:7a:11:93:1d:07:02:8e:48:27:2e:06:d0:f4:0b:8f:ac:f3:
44:59:9a:fd:62:e3:ba:d3:81:a2:5c:0c:71:db:9c:d1:ee:f3:
e0:9c:cd:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:42:13 2025 by rpki-client