Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e5a14f8e-0246-4348-b099-d30bc5afba9f/7001d8f6-98e6-325a-aa3f-85af31d48333.roa
File: 7001d8f6-98e6-325a-aa3f-85af31d48333.roa (raw, json)
Hash identifier: /RO4gSO9NXhTScEXtt/bq3fB8gN0EvJ2DAubAVKO2kY=
Subject key identifier: 63:7A:9A:46:46:59:FB:5E:FB:50:FD:97:A1:12:64:8E:2E:D7:33:67
Certificate issuer: /CN=e5a14f8e-0246-4348-b099-d30bc5afba9f
Certificate serial: 010D0C9F43285848C3EF578BA8D5D63F92EDCC80
Authority key identifier: BD:F7:0C:5B:43:16:14:25:87:D8:8E:C3:37:E9:E4:FE:D8:BC:2C:EC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e5a14f8e-0246-4348-b099-d30bc5afba9f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e5a14f8e-0246-4348-b099-d30bc5afba9f/7001d8f6-98e6-325a-aa3f-85af31d48333.roa
Signing time: Tue 04 Feb 2025 00:31:46 +0000
ROA not before: Tue 04 Feb 2025 00:31:46 +0000
ROA not after: Sun 04 May 2025 23:31:46 +0000
asID: 6939
IP address blocks: 162.247.140.0/24 maxlen: 24
162.247.141.0/24 maxlen: 24
2605:f980:b001::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c3:ef:57:8b:a8:d5:d6:3f:92:ed:cc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a14f8e-0246-4348-b099-d30bc5afba9f
Validity
Not Before: Feb 4 00:31:46 2025 GMT
Not After : May 4 23:31:46 2025 GMT
Subject: CN=7de9dec3-ee02-47be-8088-332f3817a1aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:d5:32:4a:66:00:d1:f4:75:8d:94:5b:8e:0d:
79:78:e7:9f:6a:ff:f4:f3:68:32:42:17:91:7d:40:
88:04:aa:5f:22:03:40:c0:ef:cc:ce:cc:58:6c:bc:
48:fe:91:0c:87:82:a0:45:b0:26:5e:fb:06:1b:a5:
15:dc:38:ec:8c:91:6d:c2:77:d3:c4:bb:bd:c5:4f:
27:7a:7a:6f:11:27:34:8f:a3:c2:4c:74:be:98:d2:
48:27:40:84:24:4e:ff:48:62:78:ab:4c:41:97:07:
6a:f8:87:65:28:79:00:30:3e:fe:ff:ca:e3:a4:5b:
4a:f4:0a:c9:86:fa:5e:f8:54:03:02:e6:f9:f1:79:
65:9f:cb:a4:ee:4e:d0:8d:69:7b:2d:56:c3:eb:87:
cf:ab:cb:04:d5:71:86:b9:d8:25:8f:63:3d:b1:f4:
a9:eb:7e:20:00:80:0e:11:13:27:38:f7:15:91:c3:
75:f7:42:23:26:48:9b:05:31:2f:20:b8:b1:31:7c:
de:dc:51:b2:aa:4f:f8:25:80:76:3a:f9:b8:f1:cb:
cb:dc:ef:51:e1:87:56:23:f3:de:40:78:03:96:f6:
10:c3:57:2e:a9:9f:01:37:df:67:bd:fb:f5:7d:3b:
c2:83:06:c3:b8:84:00:ff:d4:b8:f0:bd:07:fe:2b:
85:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:7A:9A:46:46:59:FB:5E:FB:50:FD:97:A1:12:64:8E:2E:D7:33:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e5a14f8e-0246-4348-b099-d30bc5afba9f/7001d8f6-98e6-325a-aa3f-85af31d48333.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e5a14f8e-0246-4348-b099-d30bc5afba9f/e5a14f8e-0246-4348-b099-d30bc5afba9f.crl
X509v3 Authority Key Identifier:
keyid:BD:F7:0C:5B:43:16:14:25:87:D8:8E:C3:37:E9:E4:FE:D8:BC:2C:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e5a14f8e-0246-4348-b099-d30bc5afba9f.cer
sbgp-ipAddrBlock: critical
IPv4:
162.247.140.0/23
IPv6:
2605:f980:b001::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:e0:91:89:11:dd:7c:8e:8f:9d:97:42:2d:0c:3a:5b:74:dc:
42:4c:91:4f:2f:bd:9c:e3:ff:83:99:d7:ef:df:ef:d5:95:e6:
41:b1:52:11:9f:bf:55:74:ce:11:bf:27:5e:06:49:48:f5:b8:
e3:2d:9b:74:61:3a:6a:5d:91:e9:9a:af:4d:b2:cf:ec:8c:ea:
a4:db:fe:c4:b8:b3:de:3d:fd:09:e5:fd:b6:b3:1b:b3:72:d4:
96:99:e5:27:3b:9e:f5:5f:b3:f1:bf:89:dd:eb:1d:f1:01:eb:
d2:3e:9e:75:4b:63:cb:7d:be:e6:43:96:c2:64:0d:59:68:92:
9d:bc:8d:e3:64:d0:76:66:d7:3b:0d:07:60:ef:c9:94:6f:0c:
98:ea:8a:b6:61:d4:58:66:2b:66:eb:99:89:e9:61:0f:df:6d:
c0:72:09:a5:e1:e4:9d:09:a5:a0:f4:52:31:37:61:9a:60:4b:
60:be:f7:b2:ee:b2:09:6b:02:da:8a:84:40:e2:17:ac:a2:46:
41:64:ec:02:8c:b8:80:a9:1f:f9:bf:18:f0:9a:a7:31:07:89:
8b:bf:62:14:76:8c:b1:a1:73:dc:5c:0c:2d:a0:90:c2:43:15:
97:60:2a:d1:b6:a5:42:db:f1:be:a9:bf:b1:72:05:56:54:64:
2d:23:14:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:59:06 2025 by rpki-client