Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/a9487ccb-1f17-30c5-9e67-7b8da6bf2cd5.roa
File: a9487ccb-1f17-30c5-9e67-7b8da6bf2cd5.roa (raw, json)
Hash identifier: L81meV3IeV1Y2ZDBRDnTZR6xlDdUYmfTBVWgI+Zzu9s=
Subject key identifier: 2B:C1:60:A9:A1:3D:DB:5A:D7:F1:2F:22:B6:68:1F:9D:1F:F1:14:26
Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial: 010D0C9F4328584953C433C38915A0D9ECACB300
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/a9487ccb-1f17-30c5-9e67-7b8da6bf2cd5.roa
Signing time: Thu 27 Mar 2025 13:00:52 +0000
ROA not before: Thu 27 Mar 2025 13:00:52 +0000
ROA not after: Wed 25 Jun 2025 13:00:52 +0000
asID: 54113
IP address blocks: 140.248.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:53:c4:33:c3:89:15:a0:d9:ec:ac:b3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
Validity
Not Before: Mar 27 13:00:52 2025 GMT
Not After : Jun 25 13:00:52 2025 GMT
Subject: CN=2bedf05f-8898-4f13-b32b-76c1a1f50801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:da:33:80:f0:a1:d3:c2:82:49:a7:06:d4:ca:
d9:02:e1:40:4e:da:f3:24:0e:93:12:68:24:c1:8d:
1f:72:91:08:a8:ca:67:4a:ad:48:e5:18:35:2b:34:
f9:a8:f1:ea:e2:c3:27:78:aa:f5:a5:0e:25:f0:5c:
81:ae:39:70:2e:fc:5c:02:56:6b:39:cb:aa:88:66:
11:31:df:7b:cf:f8:bc:9c:17:18:a5:1d:8d:1a:2c:
5a:ae:e2:87:74:63:81:55:c7:93:e3:eb:53:69:88:
92:b2:35:48:26:a1:e1:2b:99:4e:9d:bc:30:c9:11:
2d:30:2c:f2:d8:86:f8:35:56:b5:cb:1f:51:9d:3f:
76:e2:79:8c:32:ae:01:08:fc:d2:d0:05:97:47:80:
aa:3c:ec:c5:2b:9b:b0:29:0a:c1:57:77:2e:fa:2f:
4c:9f:86:8e:1c:f7:9e:17:4b:3d:9c:4b:46:fd:da:
fd:db:f9:db:94:48:c6:3a:e7:53:d1:87:24:94:84:
1b:0d:11:05:24:22:79:a2:ac:14:7d:28:8f:99:25:
a6:9a:76:6d:a7:d0:aa:6d:c3:53:0c:77:5e:c5:13:
be:01:43:be:4a:26:5f:44:f7:cf:2e:ac:4c:9c:84:
60:4c:7f:0d:79:72:b8:a7:14:e2:1f:08:27:95:35:
93:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:C1:60:A9:A1:3D:DB:5A:D7:F1:2F:22:B6:68:1F:9D:1F:F1:14:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/a9487ccb-1f17-30c5-9e67-7b8da6bf2cd5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
X509v3 Authority Key Identifier:
keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
sbgp-ipAddrBlock: critical
IPv4:
140.248.25.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:22:f2:bf:b5:7c:d5:2a:a4:b2:04:d0:b2:7a:9d:f8:aa:57:
c9:67:be:93:a2:8a:65:fd:65:cb:c8:d1:50:be:15:af:af:5a:
ac:8a:cb:d6:af:ba:0a:7c:d7:aa:c4:59:51:95:38:80:b8:dc:
25:28:2b:f1:ef:41:52:d0:e9:9f:42:fc:5d:6c:33:bf:09:02:
fb:8d:8d:b0:91:6e:8f:d3:0b:d4:56:74:22:a0:bf:c4:44:7b:
c7:d5:2b:4d:20:cc:02:06:7a:c6:1d:ca:08:b4:d7:d6:6a:12:
3d:18:84:87:22:1d:11:6a:13:e8:d3:c9:24:b1:a5:9c:45:3c:
a8:b4:4b:26:55:ff:58:8f:ba:16:b8:5f:32:8a:fa:91:88:13:
24:ac:4d:d7:1a:32:ff:c5:6c:db:12:50:ea:dc:4f:f0:9b:e1:
3c:60:49:9b:c9:b9:65:2b:08:ba:65:61:79:9f:fa:49:b4:25:
59:af:c7:87:8a:81:92:28:22:4b:8b:ba:92:dc:8f:56:05:1f:
1f:4f:76:20:1d:cf:e5:03:37:9a:bd:b5:d0:63:79:39:97:ff:
f8:fd:68:19:e1:92:3f:0f:81:e7:1c:cc:fb:29:ca:f5:7f:54:
5b:ab:7b:fb:e6:f3:e0:b1:7c:f9:7c:13:c1:92:37:77:ff:1e:
b2:69:e2:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:49:03 2025 by rpki-client