Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/14e815f8-9bf5-3679-b99c-adfb53e03dab.roa
File: 14e815f8-9bf5-3679-b99c-adfb53e03dab.roa (raw, json)
Hash identifier: O4O4eSEot/tShKBVg+2lQdcUqqczkL/nARx8ybHiZac=
Subject key identifier: 51:C7:8B:8C:3E:35:6F:46:41:2A:78:74:CF:61:61:ED:BE:87:B2:7A
Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Certificate serial: 010D0C9F43285848A830A85E659CA1F56FE0A000
Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/14e815f8-9bf5-3679-b99c-adfb53e03dab.roa
Signing time: Sat 25 Jan 2025 02:00:39 +0000
ROA not before: Sat 25 Jan 2025 02:00:39 +0000
ROA not after: Fri 25 Apr 2025 01:00:39 +0000
asID: 396253
IP address blocks: 138.43.98.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a8:30:a8:5e:65:9c:a1:f5:6f:e0:a0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Validity
Not Before: Jan 25 02:00:39 2025 GMT
Not After : Apr 25 01:00:39 2025 GMT
Subject: CN=2aad918a-015b-46c9-a53d-a4d2318efc02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:97:4a:a6:e7:b4:cf:41:30:dd:09:90:00:1c:
eb:24:92:70:9f:2c:91:95:6d:fe:ba:1a:15:4b:13:
1b:cd:b0:38:46:04:80:39:b7:71:97:3c:bd:38:7e:
d9:96:ba:32:d9:36:95:d4:29:62:0c:e8:49:d2:8f:
2a:00:88:23:80:69:3e:fd:22:da:58:f7:1f:f5:ef:
0b:7b:83:aa:85:bc:20:ae:5d:f8:fc:cf:56:63:a9:
6e:54:4b:6d:03:20:05:c5:9f:5f:be:06:2c:7b:bb:
eb:08:1e:df:d5:ba:b0:16:be:56:e5:1f:0c:e2:d7:
84:4a:e7:4d:61:23:8a:96:ae:56:70:ea:30:cc:da:
9d:a3:91:4d:a1:c7:0e:79:4d:37:84:65:4c:8c:1b:
74:15:d8:1e:93:2a:d9:d8:97:36:9f:fb:81:52:c8:
d0:c5:6a:19:95:ed:81:da:41:da:76:11:be:8f:c8:
52:37:33:75:3d:2f:55:57:e6:5d:7f:12:79:7c:28:
83:dd:90:10:80:9d:64:52:f8:b7:05:ad:25:c4:1f:
43:9e:11:97:52:ae:9e:86:07:a0:c2:43:15:64:7e:
9f:0b:6d:14:71:f1:93:18:b1:61:fa:e0:8d:b4:aa:
1b:09:a8:1f:0e:4f:23:34:5b:da:e3:80:2f:bd:19:
f1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:C7:8B:8C:3E:35:6F:46:41:2A:78:74:CF:61:61:ED:BE:87:B2:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/14e815f8-9bf5-3679-b99c-adfb53e03dab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl
X509v3 Authority Key Identifier:
keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
sbgp-ipAddrBlock: critical
IPv4:
138.43.98.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:96:79:9b:a6:b6:01:f9:53:22:5c:8a:ce:59:1e:66:79:15:
05:8c:92:d2:24:93:ad:12:4e:b5:6f:b5:b6:13:12:39:e7:42:
c1:21:f1:4d:8e:e1:aa:b1:24:71:94:85:6b:ab:9d:8f:27:89:
fc:00:87:4e:62:46:78:d3:bf:a8:f3:07:3e:af:7d:81:57:0a:
d4:ab:3b:b1:9e:41:ce:b3:a4:45:0c:98:87:f4:88:19:4d:d9:
6f:12:8d:96:d9:ef:fb:ec:06:b6:46:5a:c9:af:42:2d:48:0f:
96:70:b9:b5:1c:dc:c4:9a:51:06:cd:0c:44:7b:13:84:57:b2:
c3:d3:d7:63:23:06:65:15:3f:cc:24:7a:ea:64:f8:a1:b2:d4:
84:5a:29:b5:10:07:d6:da:93:b9:16:30:20:cd:a2:e7:de:f7:
7a:3d:0b:86:3e:fe:ce:b5:48:3d:6e:14:c7:16:dc:1c:f6:4e:
6c:f8:01:fe:a0:dc:3e:7e:a3:2b:46:7a:0b:26:b5:0c:90:ce:
ce:b3:eb:c4:ee:0e:be:5d:5c:70:79:8f:a6:9a:3b:84:f0:18:
02:11:ad:98:76:f0:cd:a2:46:5d:97:69:d8:53:5b:bc:c0:59:
92:f8:aa:20:d7:f3:f4:57:e9:a9:5a:e3:9f:5e:23:6c:27:7b:
24:12:a0:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:29:40 2025 by rpki-client