Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/678288a1-08e1-387f-8902-46b21f84d113.roa
File: 678288a1-08e1-387f-8902-46b21f84d113.roa (raw, json)
Hash identifier: +S8SbInSQa/Tvuo12F2+p6NELuYwcI6wD5ZG+aqN+4I=
Subject key identifier: FC:CE:B6:6C:46:06:47:07:E6:35:B8:12:43:8F:E9:9F:C8:75:8D:3C
Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial: 010D0C9F432858487325C94D654B6590DCB72DC0
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/678288a1-08e1-387f-8902-46b21f84d113.roa
Signing time: Mon 06 Jan 2025 02:00:40 +0000
ROA not before: Mon 06 Jan 2025 02:00:40 +0000
ROA not after: Sun 06 Apr 2025 01:00:40 +0000
asID: 54113
IP address blocks: 140.248.247.128/25 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:73:25:c9:4d:65:4b:65:90:dc:b7:2d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
Validity
Not Before: Jan 6 02:00:40 2025 GMT
Not After : Apr 6 01:00:40 2025 GMT
Subject: CN=6d69ef0f-3f4b-4459-b8e5-f8fc1eaa773f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:99:bf:fa:e2:84:d4:1e:a6:4a:47:c2:05:4a:
a6:94:ff:fd:ec:5c:f1:55:ce:f0:4b:37:ed:7a:0a:
57:57:32:1a:fd:14:d6:08:fc:20:15:96:e0:3f:45:
27:0c:d3:41:92:6b:c7:4b:77:ee:cf:3f:18:75:9c:
ce:91:2c:49:ed:28:de:6c:41:d0:9a:64:79:71:ee:
72:7c:87:3e:9a:32:56:e3:fa:19:66:54:4c:97:50:
29:bc:e6:98:c8:b2:e9:bf:0b:5b:aa:14:c8:e5:b7:
50:eb:61:e0:a3:62:90:99:3b:d1:03:f7:a8:b2:a2:
4f:e9:b2:04:a2:e1:34:59:f9:e3:53:e7:e2:f7:7a:
45:98:55:2a:e9:29:36:86:f6:35:b6:08:64:ab:b9:
bd:c7:a7:40:0a:15:6f:02:7d:29:9c:e3:9a:c3:db:
2d:8c:f7:b4:41:20:b6:1f:e2:1a:03:51:d4:8d:8c:
ce:0a:3a:70:e5:da:c6:1b:b7:51:d4:28:56:83:19:
af:12:d1:ac:65:de:14:5e:72:b2:f9:cc:f2:01:0e:
4e:dc:3f:ac:50:9d:6f:c4:ea:d5:d1:70:e5:5c:82:
5c:66:19:4a:4a:9e:39:4f:15:62:4c:d4:05:a9:6f:
3f:96:cd:1b:c2:fb:52:e1:3c:e0:92:10:58:84:fc:
3e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:CE:B6:6C:46:06:47:07:E6:35:B8:12:43:8F:E9:9F:C8:75:8D:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/678288a1-08e1-387f-8902-46b21f84d113.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
X509v3 Authority Key Identifier:
keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
sbgp-ipAddrBlock: critical
IPv4:
140.248.247.128/25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:7d:71:5b:df:76:64:40:cd:28:6b:b8:9d:27:ee:f2:39:88:
06:80:62:bb:4b:af:7d:3b:e8:09:8f:dd:18:90:5f:92:f8:01:
92:f6:ea:5c:a9:76:8a:91:16:71:4f:b1:15:62:8c:8b:8c:f0:
59:5d:20:30:76:42:68:65:e7:54:e3:d4:7f:27:e7:b3:8f:f4:
cf:22:10:a7:ef:96:08:bc:21:e3:2a:c6:85:4c:50:a3:10:98:
cb:f1:c0:be:ac:47:2a:44:08:73:bd:c5:76:fa:6f:a1:d7:6e:
dc:02:28:53:6e:57:2f:5d:7b:88:03:c9:05:c5:56:82:e3:e9:
80:6e:1b:40:4e:2d:b8:ed:5e:da:49:8f:db:22:df:56:e7:3e:
9f:5b:da:6b:f5:38:70:d3:2f:82:a7:22:6f:5b:e8:4e:e3:bf:
10:d1:58:24:d6:a9:c4:8b:5d:8c:3a:ba:2c:c8:bf:a2:80:3a:
b9:d5:08:9f:56:01:ba:94:dc:d3:39:84:98:f9:a0:a6:51:3e:
e2:72:46:2f:dc:43:d7:fe:9f:db:64:b2:00:0b:12:76:c4:a4:
4f:79:72:2f:9b:cc:d0:36:9e:e8:80:25:c0:76:95:b7:23:54:
38:4a:c7:02:5b:cc:65:e1:6d:44:48:d3:df:16:4f:f2:58:22:
d9:2f:96:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:28:47 2025 by rpki-client