Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/96a7d5f8-e293-37e1-9694-e0d0a7da47b9.roa
File: 96a7d5f8-e293-37e1-9694-e0d0a7da47b9.roa (raw, json)
Hash identifier: zC0UvOM01DRkqEiPQ6yJBxGPLydC4UYL0TGWM0CSMss=
Subject key identifier: 87:F2:D6:C7:68:BE:51:7F:19:24:84:01:23:0C:6F:49:71:11:1F:B4
Certificate issuer: /CN=3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc
Certificate serial: 010D0C9F432858487B26B5515559FA1B2C180E40
Authority key identifier: 56:34:70:D9:2B:60:85:B1:A7:7C:A0:97:7D:A5:7A:1D:B8:27:54:05
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/96a7d5f8-e293-37e1-9694-e0d0a7da47b9.roa
Signing time: Wed 08 Jan 2025 22:49:18 +0000
ROA not before: Wed 08 Jan 2025 22:49:18 +0000
ROA not after: Tue 08 Apr 2025 21:49:18 +0000
asID: 10497
IP address blocks: 138.220.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7b:26:b5:51:55:59:fa:1b:2c:18:0e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc
Validity
Not Before: Jan 8 22:49:18 2025 GMT
Not After : Apr 8 21:49:18 2025 GMT
Subject: CN=fcb955d2-f9ec-4491-b392-efbe9b3ca222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c8:07:72:88:30:3e:a8:0b:c3:b6:3e:c9:92:
92:a6:5d:50:4d:40:16:0d:a6:07:05:d4:64:5e:79:
74:b3:ce:88:30:f6:ec:78:58:41:e7:18:d2:f7:e8:
0d:c0:82:b7:bd:6b:1c:96:d1:63:4b:1a:13:3a:a3:
38:2a:64:ad:ab:05:e9:3b:74:49:60:65:ea:81:d6:
24:53:c8:78:a7:7f:ff:16:89:4f:8e:5f:13:fe:86:
dc:71:29:7e:2d:07:26:fe:52:69:91:78:e8:1a:71:
89:cb:16:25:25:e0:06:fa:37:9f:04:44:ee:af:c1:
49:f3:07:94:10:55:40:f8:a5:2d:8d:50:06:49:7b:
85:3e:7f:82:d9:ef:1f:0a:cb:1a:24:a6:c4:e6:11:
0d:88:51:f1:bd:cf:dc:fc:73:15:0f:f5:05:c1:a9:
fa:67:4c:99:e8:df:b4:c7:9d:c6:b3:fc:71:84:58:
e4:c4:f3:6d:c7:bc:a7:cd:37:11:f4:21:71:ca:84:
8c:44:6b:3d:5e:ea:59:18:cc:11:bf:c4:92:d3:12:
62:ed:d3:45:f8:52:d8:18:f9:6d:3e:8a:93:3f:67:
9a:96:21:5a:b2:93:9e:16:ff:11:fc:08:bd:1f:9c:
ca:10:5a:5c:21:c4:7d:7b:fc:4c:cf:46:23:38:6a:
db:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:F2:D6:C7:68:BE:51:7F:19:24:84:01:23:0C:6F:49:71:11:1F:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/96a7d5f8-e293-37e1-9694-e0d0a7da47b9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.crl
X509v3 Authority Key Identifier:
keyid:56:34:70:D9:2B:60:85:B1:A7:7C:A0:97:7D:A5:7A:1D:B8:27:54:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.cer
sbgp-ipAddrBlock: critical
IPv4:
138.220.5.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:b3:93:5b:26:4c:f0:6a:76:ca:bd:86:d5:21:b2:49:df:50:
e9:75:ad:85:2e:22:d6:11:8c:b6:5c:db:cb:98:be:b0:2e:27:
58:05:85:70:24:06:0f:9a:5e:d1:67:16:16:8d:5f:e2:01:3e:
67:49:fc:79:a3:43:e1:d4:41:1d:81:62:cb:e5:1e:41:a5:91:
1c:25:78:e4:8f:70:e3:4f:4a:13:b1:c3:bb:89:02:18:48:4f:
52:d5:9a:e6:94:eb:7c:df:23:5b:02:b0:c3:ee:16:e7:fd:f5:
2c:f2:35:95:17:9d:78:61:44:37:e3:0f:21:c7:60:55:dc:9c:
b6:82:91:ff:1c:b5:e1:10:52:ce:6e:c0:60:6b:72:4f:05:47:
4c:28:a8:eb:22:50:fc:d7:96:4e:84:f0:5d:0a:71:cd:f0:ce:
2f:6d:6a:ff:e1:45:0e:f1:3a:a9:d5:d3:f4:39:9e:92:d9:da:
f8:4e:d7:bf:52:e1:02:0d:15:ff:4b:98:d2:2f:f3:be:7a:0d:
74:ac:d8:e8:e7:2f:35:62:1c:27:d3:d1:4e:6e:74:da:b0:d3:
6d:23:d5:c0:6e:a0:4e:9e:48:a8:64:c3:29:29:74:7c:ac:19:
bb:1c:68:00:66:52:a8:2d:8d:ea:eb:e5:be:9c:c6:bd:c5:f9:
a5:25:85:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:05:06 2025 by rpki-client