Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/c09ca17c-a771-37ee-85c0-2e4e694409b8.roa
File: c09ca17c-a771-37ee-85c0-2e4e694409b8.roa (raw, json)
Hash identifier: x0/I7tew5JiDkWk75txbY/Q753QZjz+bYP67aVgs+M0=
Subject key identifier: FC:E0:19:18:40:4C:4C:1C:ED:07:D8:11:26:15:9B:29:A7:00:D6:CC
Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial: 010D0C9F432858487325C4DAF635B7E76D3A5600
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/c09ca17c-a771-37ee-85c0-2e4e694409b8.roa
Signing time: Mon 06 Jan 2025 02:00:40 +0000
ROA not before: Mon 06 Jan 2025 02:00:40 +0000
ROA not after: Sun 06 Apr 2025 01:00:40 +0000
asID: 54113
IP address blocks: 140.248.221.128/26 maxlen: 26
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:73:25:c4:da:f6:35:b7:e7:6d:3a:56:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
Validity
Not Before: Jan 6 02:00:40 2025 GMT
Not After : Apr 6 01:00:40 2025 GMT
Subject: CN=8a0ee4a5-48cc-4375-86be-04b0727b8fbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:de:a1:8a:a1:ee:27:85:4f:12:75:08:11:bc:
66:be:87:17:0b:6c:6b:6a:61:8a:04:3a:f3:89:8f:
56:1a:b7:3f:06:ee:31:da:b8:ea:02:5e:73:65:4b:
b6:e7:7c:f6:e2:90:7f:46:e4:9d:39:0c:59:4e:b4:
31:11:13:69:f6:26:21:98:f1:7a:43:ac:38:57:58:
65:3a:91:c9:65:ad:b8:dd:56:65:7b:d7:e5:c5:89:
74:20:9e:af:d1:91:32:2b:8d:41:48:2f:46:0c:40:
ed:44:60:e4:07:b2:f9:68:0c:bf:65:7c:46:3a:db:
a5:a8:c0:c5:26:a0:e6:aa:9d:69:1b:ad:69:94:72:
24:8f:4d:ec:2a:12:de:cc:19:16:3a:fe:6a:b9:fb:
9a:53:13:fa:da:bf:92:7a:7e:03:88:62:5e:d1:ec:
f2:1e:ab:9e:a8:cc:af:28:52:3d:c7:61:bc:b8:c9:
91:29:f3:3f:5f:c6:6c:6e:fe:b3:fb:3b:32:db:c6:
40:14:02:6b:e9:7b:1f:72:15:e4:9c:18:6e:85:c1:
00:7e:93:71:75:85:fe:63:fb:3c:56:90:35:46:a2:
e7:68:24:bb:a0:b2:df:c5:bc:0c:9c:89:2f:28:a9:
ec:c8:b2:8e:c0:d2:f0:50:0d:b6:23:02:80:e9:0e:
2d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:E0:19:18:40:4C:4C:1C:ED:07:D8:11:26:15:9B:29:A7:00:D6:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/c09ca17c-a771-37ee-85c0-2e4e694409b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
X509v3 Authority Key Identifier:
keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
sbgp-ipAddrBlock: critical
IPv4:
140.248.221.128/26
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c6:1b:f8:49:dc:d9:b2:ac:b9:a0:dd:a4:9c:fd:60:6f:21:ba:
0d:0f:b4:a7:3b:0d:07:80:0d:a6:43:26:58:23:db:53:c1:ef:
59:6c:3c:4c:15:1b:c6:a9:70:aa:57:7e:6b:a0:9c:3b:ba:93:
e6:70:e1:19:04:28:ae:29:8c:ae:82:63:4a:86:60:b0:6f:45:
b6:26:2e:7d:76:8b:10:ee:c8:af:13:cd:5b:7a:04:49:8c:a6:
fc:9e:a3:b4:44:1d:eb:d9:65:57:e8:00:5f:f7:75:e3:95:dd:
be:5b:d7:ed:ce:24:d2:61:1f:68:ac:83:5e:0b:56:96:ab:14:
a5:d3:e2:4e:92:e9:94:d1:a4:41:e0:aa:2f:65:2b:df:f2:4c:
1f:cb:c4:55:07:8c:0c:e9:c0:78:73:e7:34:be:c9:c7:7e:c0:
5a:bf:c3:a3:d1:f4:d3:cb:f8:34:e8:ab:e5:8a:9b:8c:b2:6f:
9e:64:e9:9a:86:55:5c:0c:65:e2:78:9b:fb:b2:f5:bc:3f:83:
0b:da:c8:ed:40:05:f0:82:2f:e1:ac:35:ed:27:02:82:47:07:
c7:19:f0:2d:87:29:3b:a5:c6:c7:28:9c:b6:ab:68:75:4b:a7:
68:9d:4e:93:51:f7:f5:12:08:94:a5:0e:65:04:2a:12:b9:62:
9f:bb:a6:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:03:01 2025 by rpki-client