Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/08bf3928-b054-3129-9d08-db2f618766b2.roa
File: 08bf3928-b054-3129-9d08-db2f618766b2.roa (raw, json)
Hash identifier: wjbWHHwPKrFNKw/JVP9ARGtuAH/nthsMQ2Yu3Ym95qU=
Subject key identifier: 98:C9:1D:DD:F3:C5:C8:A9:25:E2:8C:4D:40:91:E2:4F:24:01:20:9E
Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial: 010D0C9F432858489E6B69E3EF66D6EAC6D7D1B0
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/08bf3928-b054-3129-9d08-db2f618766b2.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 14061
IP address blocks: 138.68.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6b:69:e3:ef:66:d6:ea:c6:d7:d1:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=faf4017a-951e-43da-b894-837082a4d12d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:96:e4:5c:37:ba:2c:ad:7b:9c:a6:b5:a4:f2:
cf:f8:c9:11:cd:e0:2c:9c:82:9e:7b:11:20:59:e2:
4c:9c:8b:b4:19:72:82:72:68:ff:73:0e:f2:92:3e:
0a:d9:7a:41:60:bb:9c:8b:97:c3:31:50:20:d9:79:
16:f6:bf:35:04:e7:28:08:1f:ca:6e:c7:9b:8f:85:
67:ae:7d:0b:d2:ab:ea:a7:d8:04:8e:8f:91:75:1a:
48:22:89:b3:87:fb:92:30:19:9d:ad:ba:db:a2:82:
af:cf:78:34:7e:94:ce:7f:80:8a:e0:23:e3:e0:8a:
34:22:b2:b4:54:79:59:a0:ca:35:fe:6a:88:2d:c8:
ad:55:d2:df:7c:52:3e:ee:c8:01:08:b4:b9:32:05:
59:17:e7:b3:26:42:eb:66:96:43:2e:7b:88:db:b3:
2e:8b:2e:8f:63:0d:ef:9e:47:4b:e1:e9:24:0f:9b:
5d:0d:56:bf:cb:99:94:36:05:fb:c7:a2:a8:3d:82:
f4:25:08:40:01:79:97:f0:e7:31:60:1f:77:45:69:
5c:66:87:83:3e:23:08:da:26:d4:3b:30:f6:46:52:
83:23:1a:bf:fc:79:a6:dd:c8:24:9c:b0:f9:71:c0:
9a:fc:04:ae:d7:43:90:d9:98:46:ca:cc:f2:67:fa:
bb:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:C9:1D:DD:F3:C5:C8:A9:25:E2:8C:4D:40:91:E2:4F:24:01:20:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/08bf3928-b054-3129-9d08-db2f618766b2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
X509v3 Authority Key Identifier:
keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
sbgp-ipAddrBlock: critical
IPv4:
138.68.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:00:ec:6d:a8:88:ce:a1:51:6c:3e:08:76:02:ae:6c:33:94:
cf:c7:c2:d1:76:ae:29:27:ff:5a:33:59:b7:6c:d5:c9:95:b2:
99:fc:a3:0c:a1:14:8c:ec:9b:3f:4a:41:8a:83:ff:28:3f:d6:
03:6f:45:ff:dd:a9:4d:2b:7a:3f:e9:5f:53:1d:37:51:78:0e:
cf:aa:87:e1:47:bb:5a:60:d7:c0:dc:c7:ff:4c:e2:49:2a:d8:
0f:15:c3:91:59:33:f4:a8:d9:11:7e:00:b6:6c:5b:ac:b4:3e:
c3:b8:03:cb:50:7e:46:be:b9:3e:06:89:1f:a9:6b:a5:b8:54:
75:a6:f1:a9:60:02:4a:c2:f1:f2:17:d1:d3:ec:be:5b:94:6e:
e6:b1:32:92:95:9d:3a:4d:3a:ee:9c:0a:04:96:7c:70:1e:ef:
e9:85:f9:36:0e:ce:d7:a3:32:5d:2c:61:f7:84:ae:50:e7:32:
c4:0f:97:1e:aa:a2:fc:a7:b6:86:dd:c5:74:c0:bb:d7:4e:e6:
e5:74:a7:60:15:ff:3f:59:be:e5:06:f3:d5:b5:a2:e1:d3:4c:
2a:3e:51:76:59:d3:a6:3b:46:8d:31:b8:58:97:b3:32:b5:8d:
19:e3:67:52:0b:65:a2:f2:56:9d:32:e8:7e:9a:4f:ff:ee:4e:
7d:8c:af:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:31:34 2025 by rpki-client