Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/e9a4e4e7-724c-3ee4-9624-6eb60480e783.roa
File: e9a4e4e7-724c-3ee4-9624-6eb60480e783.roa (raw, json)
Hash identifier: MfODwQRIoeSJg+bopr+UCqgBZA7AOg4QJbd07bN2lIM=
Subject key identifier: 40:92:0E:8B:0F:D1:82:3F:36:A7:2C:12:B1:3F:88:59:30:5A:A3:57
Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Certificate serial: 010D0C9F43285848A830B2A30D42025D9DE38700
Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/e9a4e4e7-724c-3ee4-9624-6eb60480e783.roa
Signing time: Sat 25 Jan 2025 02:00:39 +0000
ROA not before: Sat 25 Jan 2025 02:00:39 +0000
ROA not after: Fri 25 Apr 2025 01:00:39 +0000
asID: 26079
IP address blocks: 137.239.201.0/24 maxlen: 24
137.239.203.0/24 maxlen: 24
137.239.204.0/24 maxlen: 24
137.239.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a8:30:b2:a3:0d:42:02:5d:9d:e3:87:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Validity
Not Before: Jan 25 02:00:39 2025 GMT
Not After : Apr 25 01:00:39 2025 GMT
Subject: CN=924d94b2-7815-41de-a152-f60f435b9843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:68:a6:f0:c2:a0:47:33:2d:a6:b7:28:77:9c:
36:a6:d2:f2:6d:bb:cf:22:11:9a:92:7d:a9:71:63:
7b:35:40:4e:3b:c9:c8:45:81:62:1e:ea:4e:7f:e6:
ca:ab:f4:58:76:da:ae:ea:33:09:3a:d9:33:b3:39:
bc:fb:86:0d:bc:b9:e9:fc:0f:12:39:51:87:21:92:
8b:89:f2:ef:08:bf:34:49:69:9f:a0:6c:8c:54:8a:
ea:ae:4e:b6:aa:a2:18:75:4e:1b:84:7e:41:c3:90:
99:54:e7:61:58:15:21:d5:16:8e:03:d4:2c:e8:07:
6a:b5:bf:1f:53:3a:16:4a:2e:26:6b:2e:6a:67:f8:
f0:24:ad:66:fd:aa:ee:f6:4d:c3:9f:5d:36:3d:9f:
fe:9d:b3:03:dc:17:7f:15:6c:1c:55:a6:dd:74:9f:
c4:87:27:ff:72:e5:d3:34:16:47:ed:0d:59:86:c4:
22:2b:d5:8e:2e:8c:a3:37:68:4a:01:23:a0:f6:1c:
27:03:ce:56:0c:aa:62:7b:53:c7:96:29:cf:38:77:
84:15:1c:21:0f:2a:36:83:aa:03:f2:02:6b:82:67:
80:f9:69:e4:91:e3:db:42:bd:1c:7e:13:c6:62:70:
66:4e:80:69:51:aa:64:25:11:29:40:85:18:1f:c8:
58:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:92:0E:8B:0F:D1:82:3F:36:A7:2C:12:B1:3F:88:59:30:5A:A3:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/e9a4e4e7-724c-3ee4-9624-6eb60480e783.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
X509v3 Authority Key Identifier:
keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
sbgp-ipAddrBlock: critical
IPv4:
137.239.201.0/24
137.239.203.0-137.239.205.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:11:b5:73:c7:95:9c:aa:4b:49:ff:0a:b9:61:17:f7:ea:63:
6b:19:c0:ca:bb:46:f9:63:ef:d4:fe:bb:1e:c0:eb:3b:92:3c:
eb:5c:c1:81:27:b8:ed:cb:48:72:a8:d2:cd:1b:1c:dd:81:36:
8a:99:8a:70:68:81:a2:99:8e:8e:98:55:3f:0d:1a:8d:b1:5f:
83:24:4d:1d:9d:35:42:82:f6:fc:ae:84:54:a3:67:87:ba:29:
2d:72:88:47:e7:3c:cf:49:4d:7a:cd:9b:a5:5c:73:70:e2:f0:
3c:e5:8d:d1:38:94:ed:dd:df:8e:66:26:3d:ab:4d:b7:d6:33:
bb:53:4f:79:6b:c0:12:fc:9a:6e:80:a3:a4:eb:4f:5e:88:94:
e8:0b:8b:83:af:df:ad:1b:c0:19:ea:55:e6:dd:7c:d1:73:67:
5c:25:e2:ca:25:21:7f:44:7b:f0:e5:30:20:c2:65:73:e4:f7:
59:a8:80:73:41:f3:c6:7e:63:7d:03:cb:18:f6:f4:63:a8:eb:
51:5e:93:d4:3f:1b:ef:4f:a2:1d:33:e3:15:6c:49:ee:ef:ea:
59:ba:72:05:d6:3e:eb:6e:1f:70:dc:6e:6c:50:72:36:1f:e9:
2b:fb:2d:59:ef:35:7c:15:a4:09:71:73:4b:e2:d6:a4:e7:02:
5e:32:43:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:43:16 2025 by rpki-client