Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/7a3fa5ab-858f-3f3b-a525-a6ab8846c33d.roa
File: 7a3fa5ab-858f-3f3b-a525-a6ab8846c33d.roa (raw, json)
Hash identifier: I1q1fcpeCTorrHiyyhQKQHsd856be4CEo2T+yo1lHZE=
Subject key identifier: 15:73:99:75:3B:82:2C:1B:0A:FB:E0:72:23:67:03:71:B7:FD:71:54
Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial: 010D0C9F432858487325C8BECC09470B53EA3620
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/7a3fa5ab-858f-3f3b-a525-a6ab8846c33d.roa
Signing time: Mon 06 Jan 2025 02:00:40 +0000
ROA not before: Mon 06 Jan 2025 02:00:40 +0000
ROA not after: Sun 06 Apr 2025 01:00:40 +0000
asID: 54113
IP address blocks: 140.248.239.0/25 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:73:25:c8:be:cc:09:47:0b:53:ea:36:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
Validity
Not Before: Jan 6 02:00:40 2025 GMT
Not After : Apr 6 01:00:40 2025 GMT
Subject: CN=1ff62f02-76a1-4106-88e6-5339522a4b0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b1:eb:16:36:84:37:f8:4b:0f:9e:e6:f5:5a:
0a:4c:f5:92:6c:9f:6d:5b:7b:8a:ec:e8:74:ac:96:
86:22:e4:16:af:c5:07:fc:5e:ed:42:fc:15:1d:70:
f1:1b:40:7d:53:22:c2:bd:f5:44:b0:47:a8:56:37:
4f:9f:54:eb:e7:a4:e9:c0:c6:21:0d:eb:07:9a:f1:
b2:66:89:49:8c:0f:3c:44:c3:f1:65:e0:64:cd:69:
e3:3f:fa:0d:74:38:3f:46:62:d3:7c:70:83:ec:16:
a3:19:eb:88:a8:da:fb:05:37:20:7c:a7:67:79:90:
b8:b3:0b:b0:55:f8:8d:dd:0f:e9:f4:61:d9:2d:22:
bf:a0:b6:05:62:63:5b:8b:5a:b6:a3:d5:8e:50:15:
dc:7d:98:8a:d8:18:c4:e3:d6:74:55:83:a8:36:73:
f1:75:77:93:78:ce:26:b7:b5:8c:70:83:67:b3:65:
32:8f:4b:88:f9:a3:4c:79:6f:46:15:3e:11:00:3d:
95:b6:2d:bf:75:8a:32:88:11:6e:47:80:1d:bf:d7:
83:62:ab:e5:aa:22:12:e7:5c:ad:6b:5e:6b:fd:37:
6c:00:83:98:a3:59:2f:b3:2a:e3:d1:e3:18:06:4d:
b3:c3:10:76:6a:a8:8a:01:81:cd:97:6a:30:9d:ef:
ad:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:73:99:75:3B:82:2C:1B:0A:FB:E0:72:23:67:03:71:B7:FD:71:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/7a3fa5ab-858f-3f3b-a525-a6ab8846c33d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
X509v3 Authority Key Identifier:
keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
sbgp-ipAddrBlock: critical
IPv4:
140.248.239.0/25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:ee:ef:09:5c:02:51:97:f6:0c:1e:f8:18:a7:ed:b1:50:b3:
36:bc:bf:9f:32:bc:f5:68:8f:4e:77:66:f7:3a:a6:ef:cb:bd:
93:1d:46:12:e0:e7:c1:ba:47:42:f4:0a:5b:bf:fd:7b:4b:be:
a1:7e:bf:e2:86:72:7c:c4:8e:ac:45:13:a2:38:d0:86:ca:ec:
94:90:d0:50:29:9f:f0:dc:8c:31:bc:ad:e9:3e:7e:ab:8e:c5:
41:ac:2c:db:56:97:f9:55:b7:37:22:68:03:2c:e6:a4:87:1b:
dc:8f:ba:30:5a:3a:85:25:ed:cf:e4:e9:ef:12:fe:2f:27:31:
23:0c:69:7d:ef:8f:50:20:a2:31:02:16:d1:e7:44:2e:16:2b:
29:f7:df:b5:85:6a:7f:05:8a:dc:b7:98:89:93:28:d1:cb:16:
9a:1e:9f:4d:44:7c:3b:33:66:9a:67:15:df:f6:2a:ef:59:e8:
19:3b:f6:0c:65:05:09:53:35:46:b5:35:03:51:18:63:18:c4:
c6:51:06:5c:d5:79:ba:92:45:2e:49:c0:bc:df:76:20:ac:99:
c0:cc:88:49:27:98:8d:5a:35:b1:59:bf:3f:3d:ec:05:83:39:
1f:96:15:9a:b9:81:82:66:9c:b9:68:18:51:0b:57:cd:a8:20:
21:c2:20:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:34:22 2025 by rpki-client