Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/f62217ef-de08-3ce5-adaa-1740b66c2023.roa
File: f62217ef-de08-3ce5-adaa-1740b66c2023.roa (raw, json)
Hash identifier: J0fW+e1hJc2vnegqT8bNv9hczgXf/GggLtx8avXdNVU=
Subject key identifier: 45:17:C2:61:E8:5F:0A:D9:6C:7A:7F:6B:00:F3:F1:3E:EC:E1:1E:CA
Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial: 010D0C9F4328584953C43010866A07290586C500
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/f62217ef-de08-3ce5-adaa-1740b66c2023.roa
Signing time: Thu 27 Mar 2025 13:00:52 +0000
ROA not before: Thu 27 Mar 2025 13:00:52 +0000
ROA not after: Wed 25 Jun 2025 13:00:52 +0000
asID: 54113
IP address blocks: 140.248.239.128/25 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:53:c4:30:10:86:6a:07:29:05:86:c5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
Validity
Not Before: Mar 27 13:00:52 2025 GMT
Not After : Jun 25 13:00:52 2025 GMT
Subject: CN=3dcd0ee1-8618-428a-ac45-9e75293025c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:56:db:75:70:01:06:51:54:fb:b0:84:25:e3:
04:af:b3:9f:0e:66:78:57:e3:3d:d2:e4:b3:84:9a:
1d:8c:a5:57:d3:72:dd:2b:69:21:ca:ec:0c:84:53:
72:3a:37:43:40:9a:b2:f3:48:2b:2f:2e:1d:da:23:
76:95:1d:fe:dc:1a:2e:34:c1:d8:56:a3:af:18:2c:
f6:11:0a:bd:a9:9e:ae:53:99:b6:c0:47:2a:87:a9:
7d:68:9a:64:47:1c:8e:26:6e:f2:3a:d4:3a:61:a8:
9e:4d:66:1d:00:65:5d:ca:d3:f9:58:30:19:b3:05:
ec:39:08:9c:b2:e7:a8:1e:79:bd:cb:57:86:b1:7c:
f7:10:ac:7e:11:bb:0e:f3:86:89:81:1e:f1:33:d5:
7b:c2:b8:48:49:a2:76:e2:c7:10:26:42:69:4b:ce:
21:fb:7f:fc:01:3d:be:a4:2e:85:06:84:ef:d4:4f:
d7:42:fd:9e:7b:2d:9a:bf:94:98:d7:a4:18:c3:81:
49:4c:0b:53:e4:60:94:cf:95:6a:0c:8c:e6:36:d9:
f0:a4:e6:e5:1a:6d:14:f5:7f:33:06:ff:e4:64:bc:
9f:bf:f8:72:14:47:57:ce:83:e8:43:de:9f:1b:d4:
be:5d:eb:4c:ca:5b:e1:61:59:0a:f1:36:a4:b8:58:
30:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:17:C2:61:E8:5F:0A:D9:6C:7A:7F:6B:00:F3:F1:3E:EC:E1:1E:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/f62217ef-de08-3ce5-adaa-1740b66c2023.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
X509v3 Authority Key Identifier:
keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
sbgp-ipAddrBlock: critical
IPv4:
140.248.239.128/25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:89:d3:2f:0f:56:e8:19:4e:4a:82:cf:97:e4:c1:1c:ff:5e:
2e:3d:43:33:0a:15:51:51:f9:8b:74:cf:4b:83:ba:2b:51:f8:
92:9a:ba:cf:d8:79:9d:e8:d8:63:2b:cf:bb:6c:0c:4a:e4:bf:
ea:c2:0a:c9:12:e5:4b:b4:8f:8d:af:ab:c7:7a:e6:7c:36:66:
8b:ab:32:80:eb:a0:a0:7e:71:96:11:e2:cb:f5:32:fe:6e:76:
0f:1d:61:2b:b8:b5:a0:18:c1:a3:50:7f:47:65:b6:26:1b:4a:
b5:72:84:9b:ef:5d:fe:59:a2:4b:27:fe:98:e8:b9:d4:5e:e0:
fe:72:e0:b5:7b:75:75:21:63:7e:ec:16:fb:27:eb:df:0b:93:
c8:fc:a9:b4:92:6b:b5:53:98:28:17:9c:40:70:95:8e:9e:d3:
76:27:cb:e2:f2:11:56:ba:2d:31:a0:dc:8e:cd:7d:5a:54:06:
63:b0:f6:2c:96:7d:8d:b4:ff:56:65:74:6b:e1:dd:58:91:38:
f5:dd:84:8f:a2:63:f3:f2:27:6a:e7:15:91:91:ef:c1:11:3b:
67:2b:e4:f2:5f:06:e8:c4:36:ba:3b:ec:5c:aa:73:50:b4:af:
7a:23:8b:65:11:da:4e:d6:c2:9b:7b:d7:4a:98:d9:55:07:ad:
9f:f7:b3:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 02:42:43 2025 by rpki-client