Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/cc28800f-b959-3908-be46-8f6467cae86f.roa
File: cc28800f-b959-3908-be46-8f6467cae86f.roa (raw, json)
Hash identifier: 1kqBZO7rRQ321L1BGuH9xSxhny+6qBLRsIlDmUsnNxM=
Subject key identifier: 7D:85:75:3D:5C:E4:DC:44:35:C3:8C:88:05:AB:15:F8:92:4A:C9:36
Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial: 010D0C9F432858487325C8ACF239BAFAF8029000
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/cc28800f-b959-3908-be46-8f6467cae86f.roa
Signing time: Mon 06 Jan 2025 02:00:40 +0000
ROA not before: Mon 06 Jan 2025 02:00:40 +0000
ROA not after: Sun 06 Apr 2025 01:00:40 +0000
asID: 54113
IP address blocks: 140.248.222.128/25 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:73:25:c8:ac:f2:39:ba:fa:f8:02:90:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
Validity
Not Before: Jan 6 02:00:40 2025 GMT
Not After : Apr 6 01:00:40 2025 GMT
Subject: CN=4082a601-40fa-4127-8849-d227b5c97b85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ed:00:8b:47:ab:66:c8:44:55:9b:df:d8:21:
9c:ab:1f:3b:6a:0c:1f:7f:da:cd:f9:13:66:d4:16:
c1:c8:79:f1:73:31:5b:c0:2b:6d:a6:b6:ee:d9:20:
01:c8:14:e7:77:2a:c6:65:23:80:1a:c6:d3:20:04:
83:f7:0b:7c:5a:04:8a:df:c7:eb:a5:d8:c3:c5:43:
20:4e:0a:f8:36:07:ae:53:75:b8:65:a6:21:d3:c1:
d7:9c:43:e6:bf:f2:a7:4c:cd:df:02:b9:cf:cd:56:
ed:1e:2e:76:cb:e5:53:28:eb:4f:24:c9:49:0a:a7:
59:4d:ea:72:01:85:6d:dc:21:38:7b:a2:5b:70:5e:
f2:dc:b4:10:ec:d2:8a:10:48:01:e6:7a:a2:9e:be:
df:95:02:f7:80:68:3d:8a:6d:b1:03:10:2d:12:1d:
7a:45:c1:f4:54:91:58:56:3e:49:f9:5d:73:40:60:
ab:41:c4:20:da:47:73:cf:17:58:fb:9e:80:06:64:
fd:10:9b:11:27:7b:b8:4e:db:6b:e3:94:a5:07:6f:
eb:9f:47:76:ee:f9:cb:bd:ed:e5:fe:78:90:fc:0a:
b9:34:e7:b0:a0:ea:8f:7e:db:da:f3:fe:11:b5:6b:
3e:c1:8d:24:b2:9c:a9:08:d4:38:8b:d2:26:54:54:
8a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:85:75:3D:5C:E4:DC:44:35:C3:8C:88:05:AB:15:F8:92:4A:C9:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/cc28800f-b959-3908-be46-8f6467cae86f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
X509v3 Authority Key Identifier:
keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
sbgp-ipAddrBlock: critical
IPv4:
140.248.222.128/25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:26:0a:de:76:1b:30:93:6f:ad:03:5d:1f:b8:73:15:ce:5f:
d6:9a:e3:55:62:e9:3a:f7:34:82:0f:d5:85:5d:b0:22:58:5d:
fa:58:44:cb:d5:f7:54:61:44:2e:9a:5e:09:3c:84:28:c3:81:
ac:23:92:f0:19:e0:f6:7c:b4:ae:88:0e:14:7c:2f:e6:bf:af:
9e:83:90:ca:01:f5:f9:3f:e9:e5:72:34:37:38:9c:59:28:33:
9c:04:53:8e:f3:71:8e:cd:e5:45:11:87:ec:4e:80:45:5e:55:
76:38:53:c6:02:33:fc:0d:96:3e:20:88:c2:f5:5e:ef:9f:81:
01:71:d6:a5:93:c2:55:25:58:1a:ce:69:13:fc:2c:76:d0:bd:
d2:92:36:4f:11:7e:7a:df:94:69:3e:86:b4:9b:ef:82:a2:64:
19:54:40:4d:d4:88:a9:e0:e1:34:b3:11:5c:da:f1:d9:b2:b8:
56:f2:ff:df:f9:79:36:1e:70:44:51:c2:e8:d5:0d:a8:3f:d8:
05:7a:f5:7d:b6:ba:1c:71:0b:b0:34:54:db:4e:ad:45:ef:4d:
2b:19:ad:bb:3d:3f:1d:98:d9:2f:f1:1b:f7:96:ae:ae:6b:41:
0d:81:d2:95:71:53:3d:2f:4a:74:e4:ee:d8:27:fc:c5:79:45:
43:89:4b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:11:32 2025 by rpki-client