Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/a8558a95-6d34-3599-b59d-f6bde1bc8bc1.roa
File: a8558a95-6d34-3599-b59d-f6bde1bc8bc1.roa (raw, json)
Hash identifier: F+qhj3o6+LFlCYWWoZdhSkfSWLpV25s1ZToMdVDUWks=
Subject key identifier: 92:F7:70:1B:10:CF:DC:9F:24:38:2C:B4:9D:1F:AD:A2:72:92:7C:62
Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial: 010D0C9F4328584950F96CD657E07C4F03C3AB80
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/a8558a95-6d34-3599-b59d-f6bde1bc8bc1.roa
Signing time: Wed 26 Mar 2025 13:00:53 +0000
ROA not before: Wed 26 Mar 2025 13:00:53 +0000
ROA not after: Tue 24 Jun 2025 13:00:53 +0000
asID: 11290
IP address blocks: 205.151.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:50:f9:6c:d6:57:e0:7c:4f:03:c3:ab:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Validity
Not Before: Mar 26 13:00:53 2025 GMT
Not After : Jun 24 13:00:53 2025 GMT
Subject: CN=13a796e3-b579-4043-8f3c-7c2780367e66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f4:26:e1:54:22:f0:05:03:b1:8c:13:a1:c8:
1b:fa:59:a1:e4:9c:05:e1:3a:73:70:05:fd:8e:a0:
1a:cc:cf:f4:c8:31:75:e8:e9:8a:88:75:0f:56:3d:
6f:e4:bd:aa:fe:59:3d:3e:d9:4a:33:70:d2:50:b4:
ec:fc:66:06:9a:0a:cb:12:f5:b4:e6:e8:a2:1f:ba:
f4:15:ac:94:fa:ad:64:f4:89:74:5f:a2:7d:b3:e8:
b8:03:98:c6:2a:a9:0a:c8:7f:22:a0:59:fe:c3:2e:
5f:db:cf:00:a0:7f:f2:08:97:f9:19:9e:ca:fc:bc:
e4:16:9e:76:e3:91:4b:fe:05:d8:01:34:94:a1:29:
54:3c:6a:88:ad:34:c0:14:6e:80:0c:8c:a6:af:70:
ae:a0:d2:3f:6c:a0:08:6c:a8:b5:6b:76:ca:4d:b7:
09:78:33:ba:82:bc:26:65:86:ca:f9:7b:2d:d9:e1:
43:42:04:14:44:5f:16:ce:25:b4:30:53:0d:09:dd:
6e:14:97:b0:1e:f1:06:38:ed:26:6a:e9:e2:94:27:
8f:99:c4:9a:c0:b7:81:21:6c:e8:51:86:a2:c2:9c:
37:a9:19:51:5c:f8:8d:bb:3a:73:fd:11:29:53:21:
a9:b5:f5:b8:13:5d:95:a7:46:90:d1:b4:5e:42:d7:
ad:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:F7:70:1B:10:CF:DC:9F:24:38:2C:B4:9D:1F:AD:A2:72:92:7C:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/a8558a95-6d34-3599-b59d-f6bde1bc8bc1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
X509v3 Authority Key Identifier:
keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
sbgp-ipAddrBlock: critical
IPv4:
205.151.61.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:43:b4:2c:3a:d9:4a:05:0b:26:4f:20:e3:6c:b5:86:8d:7b:
21:a1:64:cd:c2:a1:76:f0:13:d4:e6:d7:09:36:f3:fd:1b:0e:
ee:a6:43:bd:cc:9c:e6:0c:32:20:3a:c4:e4:87:bb:25:70:d8:
20:a2:99:56:7f:2a:19:d1:f2:b1:e9:e4:01:8a:ed:78:ed:80:
ed:33:b3:48:14:b6:e0:3a:28:f5:73:6a:87:4c:d8:e1:3d:ae:
f9:6c:42:91:12:cd:c8:c1:22:5c:54:a8:08:ec:70:b6:d5:3d:
e0:2c:e6:1c:21:10:b4:fd:9d:94:98:e1:b5:c2:ab:29:89:28:
54:e6:de:ce:7f:71:c1:2d:ef:34:d4:16:49:ae:9b:da:6d:97:
7c:4b:7d:53:49:ad:72:fc:a2:a3:3d:91:d3:6c:1f:db:2c:8c:
47:3f:e2:f8:87:81:7c:bb:67:d5:a4:84:ec:62:af:72:f6:81:
c6:f9:57:ea:6e:a1:5a:28:50:ff:0b:08:2a:2d:f1:0f:e8:c7:
cd:59:77:7d:c4:c7:24:54:ed:83:c9:e3:19:00:93:9c:4d:11:
84:d5:4d:0f:70:2a:40:b2:92:57:f9:90:af:d0:4f:50:56:81:
80:f3:52:6a:10:92:9b:16:da:bb:77:a3:df:9a:99:1d:d3:b6:
6e:51:76:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:50:16 2025 by rpki-client