Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/7a41bf96-81e0-3d86-9651-b24d5834d2ba.roa
File: 7a41bf96-81e0-3d86-9651-b24d5834d2ba.roa (raw, json)
Hash identifier: taK5oNM7Ytgma8mGDyZFGOfHhn8WiQYP51M866jKgTA=
Subject key identifier: A8:8E:20:8D:FC:F6:EB:C9:48:41:AF:6B:67:E2:87:5D:51:46:94:46
Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial: 010D0C9F432858487325C7EFBD0EA257B6D20680
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/7a41bf96-81e0-3d86-9651-b24d5834d2ba.roa
Signing time: Mon 06 Jan 2025 02:00:40 +0000
ROA not before: Mon 06 Jan 2025 02:00:40 +0000
ROA not after: Sun 06 Apr 2025 01:00:40 +0000
asID: 54113
IP address blocks: 140.248.211.0/25 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:73:25:c7:ef:bd:0e:a2:57:b6:d2:06:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
Validity
Not Before: Jan 6 02:00:40 2025 GMT
Not After : Apr 6 01:00:40 2025 GMT
Subject: CN=de1840c7-3095-4b37-aea8-50da999aa6f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:78:e7:95:69:6e:04:98:d0:24:85:1c:ed:a4:
49:29:62:1c:f3:dc:f8:e9:c9:f8:09:54:eb:d0:30:
82:3b:e7:c3:bd:63:98:f6:95:d2:83:f1:e3:8d:a7:
61:9c:23:07:62:4f:34:40:dc:bd:19:86:54:b5:94:
93:cf:70:1b:a5:fb:28:cd:d7:2e:5a:b5:dc:f2:5e:
44:05:bc:22:68:60:aa:cc:c2:02:22:a3:75:6f:3d:
42:52:74:a8:ca:64:38:66:01:fd:c9:6c:57:ca:00:
72:e5:93:7b:f1:92:fe:0e:13:b4:24:a6:27:25:88:
17:0d:1c:0b:1d:30:be:86:9e:a6:a3:fd:58:6c:cf:
fb:5b:b8:c7:6a:a0:ff:27:f8:15:3b:ce:cf:5b:74:
4b:00:85:5f:04:32:df:db:c2:1f:15:12:b9:88:b5:
cd:f9:02:91:bd:c8:b6:7d:25:22:21:af:d8:ad:9b:
af:59:ae:e4:2f:77:2f:82:e9:e6:55:57:69:b3:8f:
7a:85:93:87:30:a7:77:82:87:2d:2e:c7:87:bf:43:
85:01:91:1f:d3:c7:db:ed:4c:fc:51:79:aa:47:47:
5e:1c:3e:2d:fd:2f:d3:da:eb:8f:49:e0:50:f7:5e:
da:77:12:c2:93:f5:44:a5:2b:d5:ec:fb:fd:cc:ba:
ab:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:8E:20:8D:FC:F6:EB:C9:48:41:AF:6B:67:E2:87:5D:51:46:94:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/7a41bf96-81e0-3d86-9651-b24d5834d2ba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
X509v3 Authority Key Identifier:
keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
sbgp-ipAddrBlock: critical
IPv4:
140.248.211.0/25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b6:73:a6:23:7e:de:9e:d1:b3:89:83:b1:04:3a:8e:15:2d:c6:
82:34:e6:89:b7:43:41:b1:49:a3:77:6b:86:3d:89:a8:f6:67:
c3:00:72:f6:ea:29:87:35:ad:dd:c2:67:d5:ee:24:13:c3:0d:
43:1e:65:1a:45:3b:41:a6:4b:34:ec:ce:92:90:72:7f:5f:9d:
cf:94:fb:c0:0f:02:65:75:30:b6:cc:60:2d:be:79:9c:f6:2d:
72:d5:a5:1b:35:55:9c:1c:fd:34:4a:b3:bf:66:9e:d4:c7:8a:
50:78:0b:9a:71:38:dd:3a:70:f7:4d:b6:57:2f:74:61:40:a7:
65:25:7e:74:e9:1b:7f:ee:78:e9:b2:e8:02:7c:d8:0a:5c:fb:
64:c4:28:c3:b4:d7:49:60:ea:a6:eb:3c:b0:be:1e:92:da:2b:
58:f8:0d:cd:4b:39:e0:d5:e6:9c:43:b4:c7:d7:d2:4c:b9:be:
fa:17:cf:ca:fb:b0:99:0b:2b:2c:b6:1f:39:4d:6f:86:29:e6:
e3:5f:4c:b7:4a:c8:9b:f1:8d:51:5e:12:2f:84:0d:dd:e4:a1:
14:69:5c:e3:6a:82:f1:fe:50:80:f3:47:a0:8d:c0:93:80:a5:
87:f5:65:e1:34:41:1e:b0:12:fe:56:41:ed:a5:c0:7c:8c:95:
9e:4d:a4:57
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEhzJcfvvQ6iV7bSBoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz
YTYzMB4XDTI1MDEwNjAyMDA0MFoXDTI1MDQwNjAxMDA0MFowLzEtMCsGA1UEAxMk
ZGUxODQwYzctMzA5NS00YjM3LWFlYTgtNTBkYTk5OWFhNmYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHjnlWluBJjQJIUc7aRJKWIc89z46cn4CVTr
0DCCO+fDvWOY9pXSg/HjjadhnCMHYk80QNy9GYZUtZSTz3AbpfsozdcuWrXc8l5E
BbwiaGCqzMICIqN1bz1CUnSoymQ4ZgH9yWxXygBy5ZN78ZL+DhO0JKYnJYgXDRwL
HTC+hp6mo/1YbM/7W7jHaqD/J/gVO87PW3RLAIVfBDLf28IfFRK5iLXN+QKRvci2
fSUiIa/YrZuvWa7kL3cvgunmVVdps496hZOHMKd3goctLseHv0OFAZEf08fb7Uz8
UXmqR0deHD4t/S/T2uuPSeBQ917adxLCk/VEpSvV7Pv9zLqroQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFKiOII389uvJSEGva2fih11RRpRGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1
ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvN2E0MWJmOTYtODFlMC0z
ZDg2LTk2NTEtYjI0ZDU4MzRkMmJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh
MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3
M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1
YzA5NzNhNjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHjPjTADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQC2c6Yjft6e0bOJg7EEOo4VLcaCNOaJt0NBsUmjd2uGPYmo9mfDAHL2
6imHNa3dwmfV7iQTww1DHmUaRTtBpks07M6SkHJ/X53PlPvADwJldTC2zGAtvnmc
9i1y1aUbNVWcHP00SrO/Zp7Ux4pQeAuacTjdOnD3TbZXL3RhQKdlJX506Rt/7njp
sugCfNgKXPtkxCjDtNdJYOqm6zywvh6S2itY+A3NSzng1eacQ7TH19JMub76F8/K
+7CZCyssth85TW+GKebjX0y3Ssib8Y1RXhIvhA3d5KEUaVzjaoLx/lCA80egjcCT
gKWH9WXhNEEesBL+VkHtpcB8jJWeTaRX
-----END CERTIFICATE-----
Generated at Sat Apr 26 00:40:21 2025 by rpki-client