Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/ad8b3a33-5d11-3a8d-930d-dba5952c65a7.roa
File: ad8b3a33-5d11-3a8d-930d-dba5952c65a7.roa (raw, json)
Hash identifier: Gt3NuTU8wQnenQaOX+g8pbVuKHD5lzQgVKp7gWJSedw=
Subject key identifier: E1:B1:97:B9:3A:3C:C7:8D:FD:A2:25:E5:23:A0:9A:8D:56:33:29:ED
Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial: 010D0C9F43285848ADC627EAF5926811D3C96DC0
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/ad8b3a33-5d11-3a8d-930d-dba5952c65a7.roa
Signing time: Mon 27 Jan 2025 02:00:39 +0000
ROA not before: Mon 27 Jan 2025 02:00:39 +0000
ROA not after: Sun 27 Apr 2025 01:00:39 +0000
asID: 54113
IP address blocks: 140.248.86.224/28 maxlen: 28
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ad:c6:27:ea:f5:92:68:11:d3:c9:6d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
Validity
Not Before: Jan 27 02:00:39 2025 GMT
Not After : Apr 27 01:00:39 2025 GMT
Subject: CN=a7b66a88-7daf-4213-b25d-2ed4797b3099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:bf:6e:93:ff:7f:65:e9:24:8c:aa:ba:83:46:
f8:5a:1e:0a:20:f9:40:21:01:8a:02:63:bc:70:59:
20:69:02:a6:f8:01:bd:23:69:e4:c9:cc:e9:8c:66:
5a:62:98:ac:c9:6e:1e:f2:8c:77:35:9f:5c:55:06:
d2:0d:86:a3:03:1b:af:a6:1e:d6:e8:af:09:84:3d:
b7:69:7c:37:b3:54:0c:a5:b6:1a:6e:65:1e:c6:b6:
d2:99:0d:ed:25:08:20:59:ce:ec:4a:d3:6a:6f:5b:
21:0d:9e:43:04:41:66:a0:36:44:f1:15:d7:04:f4:
87:50:37:b4:ac:c1:54:82:a6:31:39:3f:03:c5:3f:
d6:12:79:e6:e9:8f:72:e3:95:15:2e:69:31:31:48:
96:3f:a3:98:a4:9a:19:51:1d:34:e6:7e:3a:a5:be:
d6:bf:4b:4d:68:3b:29:60:3c:7a:b4:a3:e1:91:0f:
d5:da:d9:92:e8:85:f0:e5:f7:f9:c5:13:02:4c:af:
93:44:84:5c:1c:88:1c:f1:9f:9f:f1:73:e4:a4:f8:
47:46:4a:0d:60:d1:00:65:69:ea:c9:67:28:b4:44:
fc:8b:14:60:a6:17:b6:97:04:e7:1c:93:e6:60:66:
5d:2f:2b:2b:5a:3f:a6:4e:ff:c1:9e:3c:b9:07:66:
21:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:B1:97:B9:3A:3C:C7:8D:FD:A2:25:E5:23:A0:9A:8D:56:33:29:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/ad8b3a33-5d11-3a8d-930d-dba5952c65a7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
X509v3 Authority Key Identifier:
keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
sbgp-ipAddrBlock: critical
IPv4:
140.248.86.224/28
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:ab:0d:be:28:f2:21:8e:ad:cd:a4:95:5b:7b:66:18:2b:de:
34:84:9c:de:44:f2:01:5e:9a:99:be:ab:e8:59:e4:ca:75:01:
95:d0:59:da:b3:7f:41:61:31:fc:08:1f:9f:ba:b1:b1:0c:64:
7e:bb:38:64:04:1e:46:f1:05:3c:92:82:9e:77:93:4f:de:b7:
85:69:55:65:51:4a:71:eb:b2:51:2b:ae:6f:7d:4b:98:90:1f:
f1:42:75:01:38:52:64:f6:29:7b:64:6f:9f:de:85:b3:05:fd:
54:51:8f:f3:38:62:45:9c:5b:a6:ed:a3:35:6a:48:0f:1c:92:
13:4a:d6:4f:43:e7:27:d0:0e:7e:82:dd:8a:a4:ad:c6:b1:b0:
bb:ce:03:ca:c4:5e:8e:d1:93:48:12:3a:45:8b:f4:22:8a:c7:
23:8d:82:85:36:1d:6c:f9:e9:03:a0:d7:17:50:5e:d4:9c:81:
3d:60:53:bb:af:2a:f3:20:ab:64:57:18:e2:2b:3c:b5:e1:f6:
ac:db:bb:28:5c:d8:4c:3d:c4:18:54:3f:03:ce:0f:ae:31:61:
f6:36:db:95:22:e4:f2:63:e4:0f:0a:8a:f5:91:a4:ef:86:63:
97:ba:b7:63:c5:85:11:fa:d0:ea:b0:6b:d7:73:8c:26:03:4f:
6b:4b:06:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 02:42:45 2025 by rpki-client