Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/9e709f33-fe4e-396a-a1eb-44cdd64178ff.roa
File: 9e709f33-fe4e-396a-a1eb-44cdd64178ff.roa (raw, json)
Hash identifier: mFzX3E7rJBS9XbqlB+nAfr/N1ecLOLpGctxuZPVrHyI=
Subject key identifier: 15:7A:03:74:E7:F1:EB:D3:EA:E8:42:54:B3:8E:CE:C9:7E:39:EA:98
Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial: 010D0C9F432858487325C7E00A35AA7C1F414500
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/9e709f33-fe4e-396a-a1eb-44cdd64178ff.roa
Signing time: Mon 06 Jan 2025 02:00:40 +0000
ROA not before: Mon 06 Jan 2025 02:00:40 +0000
ROA not after: Sun 06 Apr 2025 01:00:40 +0000
asID: 54113
IP address blocks: 140.248.209.128/25 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:73:25:c7:e0:0a:35:aa:7c:1f:41:45:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
Validity
Not Before: Jan 6 02:00:40 2025 GMT
Not After : Apr 6 01:00:40 2025 GMT
Subject: CN=b5ba8c73-c2f0-4a94-a85f-81b76917309b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3f:67:93:b8:fb:8a:3c:3d:c9:2c:f5:23:08:
dd:82:04:e9:5b:1b:4b:c0:0d:1c:64:4f:05:dc:e7:
ec:8d:c7:6a:1e:c6:c0:57:0f:a0:a6:b7:77:b0:99:
ce:28:49:2a:96:e7:c1:ff:c6:88:8d:95:ac:92:d8:
7b:09:84:c0:4b:32:4c:ce:43:c8:be:22:86:db:d6:
bf:e1:9c:e1:c2:68:40:d6:08:22:79:5a:fd:ce:02:
6b:a3:f7:64:a3:dd:3d:dd:cf:f7:3d:60:5f:ea:35:
08:bc:06:3b:58:04:90:77:75:b9:c4:3f:d5:8f:a6:
1f:65:c5:84:9f:73:7d:56:20:c4:2c:b3:10:94:c4:
be:5c:29:bf:dd:c3:a6:43:07:2a:77:da:46:53:8a:
c3:61:bf:a5:84:e0:46:73:14:23:b9:b0:47:f6:e8:
43:52:99:97:12:c1:f6:7b:26:bb:21:d4:02:b8:93:
3e:21:39:05:b7:a5:ae:a1:9f:99:67:5f:d5:ef:96:
64:ba:f9:94:6b:b1:af:d8:5f:53:b4:95:7b:4a:25:
b1:e9:82:8d:72:85:50:25:2a:1a:21:ff:dd:d4:d7:
5e:29:25:b4:67:20:47:16:b4:fd:03:da:13:fb:60:
40:1d:54:24:66:bd:2d:a6:4e:53:87:e1:78:59:1f:
55:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:7A:03:74:E7:F1:EB:D3:EA:E8:42:54:B3:8E:CE:C9:7E:39:EA:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/9e709f33-fe4e-396a-a1eb-44cdd64178ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
X509v3 Authority Key Identifier:
keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
sbgp-ipAddrBlock: critical
IPv4:
140.248.209.128/25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:78:da:dd:40:ef:e7:a9:26:b7:be:d6:03:7f:25:f9:d9:c4:
6c:8d:8d:c9:a3:71:01:09:3a:f7:b8:94:c5:d2:fa:c0:90:f7:
a7:5f:73:df:02:06:3a:b1:74:c1:e9:03:16:3d:a0:ef:72:eb:
4e:51:79:40:eb:45:31:f4:ca:ab:a2:ce:f7:6b:ac:e6:18:64:
fd:9b:36:32:fc:cc:d7:02:24:f1:7c:ba:d8:e1:c5:4c:51:9f:
4b:d1:5e:c2:89:7f:8c:98:b8:93:21:d5:59:f0:f8:d0:88:47:
f5:51:0f:98:26:95:2e:56:45:33:d3:64:11:aa:09:a4:48:db:
54:be:10:18:e6:f2:9a:53:6f:86:23:ea:33:71:ba:2f:63:fb:
35:65:0c:2b:61:0e:e1:2d:d5:39:15:a8:ed:ac:d8:50:91:e0:
87:1a:3a:93:57:f6:16:5b:cb:ce:46:1c:2d:10:74:ee:43:fb:
49:e7:ac:59:17:e2:71:b9:f5:9f:7c:66:de:99:57:b7:20:7c:
c4:b1:59:03:a0:5c:d2:c1:d3:a6:ed:54:b3:0a:5d:d4:bd:37:
fc:4d:de:e8:ca:60:a1:0a:90:09:16:a4:b2:44:99:64:2c:7a:
f9:42:f5:20:4d:41:22:fa:96:6c:6c:44:dc:b6:38:cc:a4:8e:
23:f2:32:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:25:26 2025 by rpki-client