Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/f7682090-8433-335d-b0d4-02e6cfcce5f4.roa
File: f7682090-8433-335d-b0d4-02e6cfcce5f4.roa (raw, json)
Hash identifier: yLEJwzU+KBG/kxpyIwSQKmWw87wVot/eTnMqN9T9xh8=
Subject key identifier: 2D:1F:1E:6C:B0:8D:CE:B0:90:00:FD:D8:F9:3C:A7:0A:F1:A4:A7:6C
Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial: 010D0C9F432858487325D75D81BAD290ECC3A600
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/f7682090-8433-335d-b0d4-02e6cfcce5f4.roa
Signing time: Mon 06 Jan 2025 02:00:40 +0000
ROA not before: Mon 06 Jan 2025 02:00:40 +0000
ROA not after: Sun 06 Apr 2025 01:00:40 +0000
asID: 54113
IP address blocks: 151.101.120.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:73:25:d7:5d:81:ba:d2:90:ec:c3:a6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
Validity
Not Before: Jan 6 02:00:40 2025 GMT
Not After : Apr 6 01:00:40 2025 GMT
Subject: CN=7fa8f5e0-4cd8-4c3b-aba3-6d89e515c37e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:cc:d6:9b:8e:05:f2:86:c8:87:68:32:d5:2e:
b1:03:c9:43:6c:79:78:d5:55:2c:23:32:26:a6:5c:
40:3f:19:6d:8d:11:91:65:03:38:be:12:f9:8d:39:
f5:85:43:19:a1:74:fd:57:0a:26:c0:e3:2c:53:06:
fa:91:93:6c:16:96:8a:d6:16:04:8c:30:31:fd:0d:
bf:a3:3e:43:36:1a:37:40:b5:d9:40:6c:95:6d:5f:
89:75:6b:3b:0c:f9:d5:d3:4d:34:f9:5f:b6:bb:6f:
c7:27:ea:f3:ee:64:30:78:e0:c8:9a:3a:52:bd:81:
5f:f2:15:28:6e:c2:32:4a:41:ae:5d:a0:af:5b:7e:
8f:2c:c5:22:7d:fd:cd:63:8a:5c:e7:5a:87:2f:a3:
52:f8:ce:b1:8a:d7:7f:ff:d1:af:53:ac:5d:54:ff:
67:62:a8:99:21:71:69:aa:8c:d4:6f:db:6f:df:e4:
f9:61:5d:34:64:4c:6b:3d:46:4e:83:aa:87:2c:27:
24:99:f0:53:16:36:39:a7:b8:59:e7:c3:9f:8e:ba:
72:ff:db:17:38:82:9e:5e:de:f6:a4:e5:20:bb:18:
25:08:be:9c:47:1d:50:59:76:db:7d:3d:bb:2a:1f:
7c:46:a8:1b:fc:8a:ad:48:d8:a3:76:b4:1d:47:a0:
c8:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:1F:1E:6C:B0:8D:CE:B0:90:00:FD:D8:F9:3C:A7:0A:F1:A4:A7:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/f7682090-8433-335d-b0d4-02e6cfcce5f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
X509v3 Authority Key Identifier:
keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
sbgp-ipAddrBlock: critical
IPv4:
151.101.120.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:73:54:ad:b7:2f:bd:16:48:da:6a:ef:08:de:36:c6:73:56:
39:39:5d:32:c9:97:54:80:3e:6e:3d:df:5b:a5:d2:66:ec:d3:
d4:62:d1:e3:83:4a:0c:66:18:2a:06:4c:b4:47:fe:58:a6:54:
dd:82:03:15:d3:08:4f:7a:60:eb:73:b4:05:da:6c:9e:e3:98:
5c:ff:86:89:2f:bd:a5:cf:ee:dc:a1:11:e2:e1:41:2d:5d:91:
50:ed:36:04:28:fd:fa:2e:51:41:9e:40:6c:e2:c0:3a:fc:4c:
d6:ac:1a:57:fe:36:8e:44:11:23:5d:78:cf:56:99:65:c5:ef:
39:f1:8a:e8:1f:28:75:45:27:ce:b6:29:d1:e9:1e:56:dc:e8:
e4:a7:d4:51:41:17:0a:e0:58:35:ad:3f:ba:bd:dd:8a:4a:41:
20:f9:36:96:53:d9:5c:fd:b9:4a:01:14:6b:3c:47:aa:5a:fc:
ac:25:ec:35:0b:e4:58:89:ee:00:dd:51:5f:d7:04:66:a2:74:
5e:c1:77:33:bb:0b:5f:34:bb:98:09:e8:6b:0c:94:31:34:b0:
6f:ac:b4:39:4a:e9:ba:14:fe:d8:e5:c5:78:22:c8:90:ea:ae:
ed:31:96:19:ea:16:fd:ce:04:37:bb:4f:f7:d1:43:6d:6e:d5:
6a:67:8c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:01:27 2025 by rpki-client