Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/c28acd5f-5fa6-3c28-9b81-d888c1e73830.roa
File: c28acd5f-5fa6-3c28-9b81-d888c1e73830.roa (raw, json)
Hash identifier: piBXODX+5drQ5Z9ZylISN9e+evwOf1pD8rWmJoqQyAo=
Subject key identifier: 57:77:A7:97:48:F4:92:2A:88:7F:81:93:22:C0:6B:BE:C2:98:F1:B2
Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial: 010D0C9F432858487325C5BAE1DFCD0134C0D800
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/c28acd5f-5fa6-3c28-9b81-d888c1e73830.roa
Signing time: Mon 06 Jan 2025 02:00:40 +0000
ROA not before: Mon 06 Jan 2025 02:00:40 +0000
ROA not after: Sun 06 Apr 2025 01:00:40 +0000
asID: 54113
IP address blocks: 140.248.253.128/26 maxlen: 26
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:73:25:c5:ba:e1:df:cd:01:34:c0:d8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
Validity
Not Before: Jan 6 02:00:40 2025 GMT
Not After : Apr 6 01:00:40 2025 GMT
Subject: CN=ccd8272d-850e-4c43-8dd3-15d84c78c72e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:71:16:2e:4a:a7:27:e6:11:aa:21:83:a1:2e:
a4:05:c9:f2:9f:a4:55:30:c8:37:20:63:b2:09:00:
36:6c:b8:8e:66:47:10:e8:59:6a:bf:07:df:31:26:
fb:b3:0f:37:94:ca:7e:93:8d:ba:c1:55:54:93:2a:
1d:8e:c0:5f:62:1b:b9:d5:59:ea:10:83:4b:4a:51:
a1:13:2c:47:3d:6d:50:45:98:40:68:4d:e7:26:3b:
f7:87:a1:50:48:32:2a:d3:4f:8c:05:4d:4d:4a:37:
66:a8:12:86:2d:13:f8:c3:47:68:65:76:53:d1:ae:
2e:08:69:08:6b:7f:1c:49:68:84:65:4d:99:8f:9a:
f6:cb:91:07:96:89:8f:69:91:a9:d5:13:eb:9a:26:
1a:53:ee:dd:f8:ae:de:cf:81:1a:3d:35:99:b8:b0:
ca:75:bb:3e:e0:29:aa:4a:71:e3:ce:76:57:88:69:
29:2d:ae:99:63:f7:d7:d5:9a:87:09:d3:3f:7d:fe:
9e:90:15:5b:96:b2:72:ab:4a:4e:71:d4:d6:35:02:
8f:83:ac:e1:30:8d:c0:a1:4f:d0:28:bd:92:41:19:
bd:08:e4:70:e0:e2:44:b6:55:96:a9:f6:45:a8:36:
95:1e:58:80:36:07:66:f2:4f:53:b1:ba:74:97:65:
02:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:77:A7:97:48:F4:92:2A:88:7F:81:93:22:C0:6B:BE:C2:98:F1:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/c28acd5f-5fa6-3c28-9b81-d888c1e73830.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
X509v3 Authority Key Identifier:
keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
sbgp-ipAddrBlock: critical
IPv4:
140.248.253.128/26
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:0e:e6:46:20:33:9b:d8:0c:ab:c4:13:40:9e:c4:22:c7:e5:
fb:fb:55:9c:38:eb:7e:bd:42:5a:9a:54:8d:fc:d1:f1:f9:ba:
83:f4:b8:67:01:8e:78:ad:fd:66:3e:a1:d9:7f:fb:d7:e3:a9:
9f:57:7f:2a:33:e6:66:7d:da:5d:56:5f:fa:12:a9:e5:27:a3:
ff:ad:83:dc:e4:fd:05:9f:70:c6:7c:16:67:36:59:62:ee:c4:
0c:56:b2:8a:1b:93:4c:b1:43:f3:0e:15:82:3c:a6:09:b2:04:
9a:6d:b4:a4:14:98:d7:61:d9:af:4f:a9:10:da:6d:01:0b:7b:
5c:a5:22:d2:c8:88:0d:4d:49:2b:6e:0e:18:00:c2:fe:1b:c2:
ca:d3:5a:c9:6b:2c:5a:0b:e1:46:99:b1:10:42:df:37:92:f1:
76:07:12:6d:53:61:aa:b7:fc:0c:3c:97:4e:98:3e:68:c6:7c:
46:6d:3d:e0:6e:3d:af:a1:9d:af:dc:73:38:ce:5c:35:3a:b3:
d6:ab:cf:88:b3:3e:e5:01:5d:ba:d0:cb:0d:f1:e5:80:7d:1e:
57:3d:ee:c7:ad:54:83:18:7a:4a:8f:14:52:d4:d9:59:9f:a1:
00:80:8f:56:67:01:88:d2:ff:fe:04:8e:1f:bd:38:57:e1:25:
59:f4:2d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:57:54 2025 by rpki-client