Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/dd4ff7a7-c91f-31e2-b61f-a5a56970c39f.roa
File: dd4ff7a7-c91f-31e2-b61f-a5a56970c39f.roa (raw, json)
Hash identifier: v9ArxqFLkImh8e5vAKjGQgcS/K2/TJt/7Lsw494YE1E=
Subject key identifier: E8:90:FA:9C:FD:59:13:35:11:1C:59:E2:2D:68:9A:BB:DF:A0:C7:77
Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial: 010D0C9F432858487325C87A81689413CDCEF6C0
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/dd4ff7a7-c91f-31e2-b61f-a5a56970c39f.roa
Signing time: Mon 06 Jan 2025 02:00:40 +0000
ROA not before: Mon 06 Jan 2025 02:00:40 +0000
ROA not after: Sun 06 Apr 2025 01:00:40 +0000
asID: 54113
IP address blocks: 140.248.219.0/25 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:73:25:c8:7a:81:68:94:13:cd:ce:f6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
Validity
Not Before: Jan 6 02:00:40 2025 GMT
Not After : Apr 6 01:00:40 2025 GMT
Subject: CN=fb976890-0b84-4160-96b3-9f260b21fb23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d5:97:c1:1b:2a:b0:62:50:b6:5b:80:e7:34:
7e:ae:0e:1b:76:17:e0:2f:8a:26:67:76:ae:76:f4:
f2:cf:60:de:fd:e4:e9:37:93:1b:31:1e:7f:e4:a4:
97:87:a0:4a:0b:fd:96:86:71:5e:fd:06:c2:aa:af:
01:7d:25:32:db:16:60:c0:fc:6f:78:34:4c:f6:f9:
8f:76:89:0a:3e:7d:e6:f0:bb:38:f0:f2:7b:3c:98:
14:bf:b3:43:7c:e3:36:65:b0:05:76:39:06:44:ed:
e0:ce:21:58:4a:f4:d3:98:99:d6:d6:5d:db:4d:de:
88:5c:29:ca:e7:9a:e8:04:a2:be:b3:9d:ec:02:1b:
4b:41:60:43:5e:a9:e1:e5:bf:0d:d3:98:92:1a:c4:
e9:d0:02:f4:35:0b:d9:6f:26:80:9a:8e:6c:ba:04:
24:d2:b7:1e:cf:18:a8:ac:a1:5a:bb:45:61:a7:da:
75:61:1a:7c:33:1d:bb:6c:6f:f8:c6:da:97:dc:de:
47:1a:21:77:9f:45:4f:da:03:60:06:13:58:b0:62:
12:f0:c2:d8:dc:84:8a:b9:1d:12:6e:49:62:8d:c9:
f9:ea:a6:8c:cc:c0:97:9f:67:3e:38:36:ee:a6:05:
a5:b2:52:b1:2a:72:a1:70:85:12:f3:58:e2:5d:cd:
da:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:90:FA:9C:FD:59:13:35:11:1C:59:E2:2D:68:9A:BB:DF:A0:C7:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/dd4ff7a7-c91f-31e2-b61f-a5a56970c39f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
X509v3 Authority Key Identifier:
keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
sbgp-ipAddrBlock: critical
IPv4:
140.248.219.0/25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:55:8a:83:7c:10:c4:36:ab:a7:df:ed:91:eb:16:81:da:59:
2e:83:38:1b:0e:b1:7f:76:c1:b3:2b:f3:a1:61:a4:f6:9c:e1:
6f:15:5c:ff:3a:81:0e:c9:80:98:48:b8:f5:1e:bb:06:77:ea:
9e:ba:e5:71:bd:64:58:ae:1c:bb:f4:04:a0:84:92:db:bd:91:
47:95:dc:4e:f0:e1:95:19:3a:99:cd:ef:ed:64:98:94:be:13:
40:06:06:96:09:d7:31:11:cc:95:be:3b:b3:26:28:78:6d:c2:
93:a3:d9:3a:36:0a:06:54:c5:a0:f6:00:1b:4f:7e:64:50:d1:
72:34:2e:2a:aa:be:66:aa:e9:ce:d3:a6:d4:6f:74:16:16:7c:
7d:b8:28:4e:2f:11:12:e8:8a:cc:81:04:b1:36:ae:f8:b3:7d:
e2:e1:61:90:f4:31:68:42:09:a7:6a:6a:a8:a6:03:a0:a4:29:
8d:7c:75:17:37:6c:d8:4a:1f:42:09:92:4e:2b:a0:87:dd:6b:
48:be:53:97:9f:10:2b:42:d9:6c:80:17:16:b8:b7:b5:47:7e:
32:a6:48:35:8f:40:a8:bb:d5:5a:19:b0:08:4b:8f:60:56:63:
ce:0b:a3:65:57:ca:66:18:b1:7b:bc:63:96:2f:01:ab:91:e2:
aa:f6:4e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:50:09 2025 by rpki-client