Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/ae3ab3ce-bb11-3806-9127-79d1eb778ec1.roa
File: ae3ab3ce-bb11-3806-9127-79d1eb778ec1.roa (raw, json)
Hash identifier: Y1MKuctB/a3qd6VUF9spQUSPMNV8L/dEsmtcjCxwGm0=
Subject key identifier: BD:09:98:94:6B:C7:F9:49:BF:71:DE:10:E3:09:CD:85:F6:6A:42:67
Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial: 010D0C9F432858487325C9794C77A6F7B5FBCF80
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/ae3ab3ce-bb11-3806-9127-79d1eb778ec1.roa
Signing time: Mon 06 Jan 2025 02:00:40 +0000
ROA not before: Mon 06 Jan 2025 02:00:40 +0000
ROA not after: Sun 06 Apr 2025 01:00:40 +0000
asID: 54113
IP address blocks: 140.248.249.0/25 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:73:25:c9:79:4c:77:a6:f7:b5:fb:cf:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
Validity
Not Before: Jan 6 02:00:40 2025 GMT
Not After : Apr 6 01:00:40 2025 GMT
Subject: CN=d29369cd-f34b-447c-bc89-701fa2a51f62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:89:fc:68:a8:9d:0b:c3:7f:56:ce:14:3e:02:
e7:51:90:8b:08:fb:f5:80:d1:b3:7e:a8:26:ae:1a:
7b:49:06:bc:56:49:3a:87:d9:2b:64:ab:61:c1:91:
7c:74:51:0e:e3:31:c3:59:c3:4b:2f:63:a4:62:0f:
ae:92:98:81:90:0b:92:a6:60:fa:37:16:15:a9:71:
a4:4d:ff:ae:18:44:b6:11:82:cd:28:1b:44:cb:d5:
de:81:a6:67:7f:bb:de:5c:ab:fb:05:0d:ba:d7:43:
47:d9:42:d5:df:64:35:8b:ab:d1:1f:45:44:52:0e:
b2:ca:4a:fb:f2:3e:35:6d:e9:e4:59:df:03:7a:26:
88:4c:11:07:5a:85:3e:44:2a:1b:59:a2:3b:58:b8:
1e:66:97:b2:74:b5:65:c9:49:fc:b6:35:0e:3b:8e:
0e:80:5d:b3:79:42:2b:ac:ff:4e:4f:b3:61:e0:e5:
f7:d6:62:34:94:ef:75:2d:0e:61:9c:dc:4e:1d:8b:
3f:58:41:e1:82:f0:b9:a5:42:09:f9:05:23:e2:d7:
cd:f1:8f:3e:ba:d1:23:1e:67:82:2a:20:33:bb:49:
e9:27:9e:33:75:23:af:8e:36:ba:66:31:df:06:6d:
86:ae:28:ef:04:4e:fb:70:51:50:38:25:f7:05:ce:
5d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:09:98:94:6B:C7:F9:49:BF:71:DE:10:E3:09:CD:85:F6:6A:42:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/ae3ab3ce-bb11-3806-9127-79d1eb778ec1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
X509v3 Authority Key Identifier:
keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
sbgp-ipAddrBlock: critical
IPv4:
140.248.249.0/25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:e2:88:d9:ad:a6:37:56:6c:a2:a8:3e:6b:87:04:6c:58:b7:
2d:55:d5:d9:a3:bc:68:99:8d:5d:29:d5:1f:e7:c8:15:ad:aa:
60:71:14:9c:25:e2:d5:e6:5f:06:e8:43:1b:aa:b3:89:12:6e:
90:1e:cb:1a:59:e3:a4:c7:20:fd:96:47:f4:09:9f:f2:9d:e4:
5f:d0:79:b9:5f:b3:10:9e:65:88:df:50:c4:f8:7f:c0:ca:08:
5e:70:71:a7:d6:f4:4c:64:62:78:66:69:78:7d:bf:10:e3:54:
b7:73:78:0a:f9:54:ab:8d:cb:7b:37:2d:d6:da:be:6f:1b:86:
75:ea:8d:28:76:c0:87:42:e8:1f:d9:34:7f:71:30:6c:9a:a8:
fe:b0:c4:4a:af:d5:ed:5d:3d:31:4d:b6:ae:46:2a:2d:7c:73:
a8:24:91:b9:df:c3:f6:93:1b:3c:87:0d:82:32:e4:78:38:dd:
2e:03:e8:1e:fa:57:be:14:4c:0b:f6:53:65:88:14:b9:ad:42:
f8:3d:77:03:db:03:ec:f8:78:0f:44:4e:12:55:f0:22:de:e5:
af:f9:b4:2f:9f:2f:1f:33:80:6e:1e:11:54:ff:75:b0:a9:ab:
6f:51:d0:b8:e8:ed:3c:64:d2:b3:69:22:0f:9c:ff:37:bc:1a:
ef:1b:4e:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:16:08 2025 by rpki-client