Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/fd0599ac-d71b-3904-86c8-061b2e1b2f7b.roa
File: fd0599ac-d71b-3904-86c8-061b2e1b2f7b.roa (raw, json)
Hash identifier: SPUW+eoby3OIGv22HKXhZ8ZfyvyIukpRGDiHE2rsqDk=
Subject key identifier: 6E:F7:40:8E:3C:64:4D:93:46:DC:A1:C3:AB:17:44:9E:46:C6:07:69
Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Certificate serial: 010D0C9F432858490F7BFDFC33CDF84F5074BC80
Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/fd0599ac-d71b-3904-86c8-061b2e1b2f7b.roa
Signing time: Mon 03 Mar 2025 02:00:39 +0000
ROA not before: Mon 03 Mar 2025 02:00:39 +0000
ROA not after: Sun 01 Jun 2025 01:00:39 +0000
asID: 398202
IP address blocks: 137.239.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0f:7b:fd:fc:33:cd:f8:4f:50:74:bc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Validity
Not Before: Mar 3 02:00:39 2025 GMT
Not After : Jun 1 01:00:39 2025 GMT
Subject: CN=28938eef-6188-4621-8e36-c16b7d0e129a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:8c:ce:0e:0a:50:da:a1:ef:ac:5e:63:c0:8b:
d7:49:86:ef:9d:25:b9:e0:6f:b8:e8:ed:42:d5:38:
f4:aa:b5:c3:54:0d:70:67:eb:55:6a:c3:09:8c:57:
1b:a0:88:7b:eb:12:f4:ac:3a:d5:f4:57:55:fb:d2:
76:a3:0c:74:90:ee:ce:fb:89:51:77:1e:6a:88:01:
99:a9:51:d5:6e:06:72:68:51:5f:fe:46:7e:5c:12:
56:5f:3c:c7:2a:42:f1:4d:5b:39:4e:0a:6d:22:79:
a1:e6:55:2f:18:41:ee:df:49:57:13:6f:81:a5:b2:
05:e4:b7:c9:6b:7b:7e:24:82:1a:ae:3d:91:d3:15:
22:e0:7f:25:0d:6e:bc:61:f9:ff:b0:65:56:df:0e:
29:47:75:1d:5c:0d:de:16:a2:16:04:e0:77:14:41:
7a:07:c1:43:8e:3b:bd:71:89:64:a1:d6:0f:72:f4:
6e:a6:0b:46:c3:dc:c0:e2:c2:19:c7:7c:10:d7:10:
05:80:89:d6:a1:aa:3d:35:d0:01:ff:9a:c4:8f:a7:
ed:e7:b8:94:2c:50:d5:92:d1:96:15:d4:c4:26:da:
69:64:70:f1:40:58:85:15:71:39:d9:d4:ff:16:56:
92:68:32:9a:69:2b:83:1e:84:19:e1:0a:85:c8:dc:
ad:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:F7:40:8E:3C:64:4D:93:46:DC:A1:C3:AB:17:44:9E:46:C6:07:69
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/fd0599ac-d71b-3904-86c8-061b2e1b2f7b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
X509v3 Authority Key Identifier:
keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
sbgp-ipAddrBlock: critical
IPv4:
137.239.214.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:18:24:f7:d6:18:5a:c2:5a:1f:01:54:a1:9d:3f:ec:00:ab:
39:e6:b9:90:d0:fe:a7:a3:5b:ce:c0:a2:94:7e:d9:8a:6b:11:
ca:79:9e:d2:7e:5f:a4:fb:e9:b4:5c:85:9e:76:66:5b:b6:f6:
e5:8b:8e:8c:1c:11:cb:b5:81:2a:3a:10:9e:08:51:43:91:c1:
e7:8e:22:37:7c:5d:25:9a:b4:66:30:4a:1a:7a:c5:8a:7b:ad:
ca:36:48:cb:26:c4:ad:e7:3d:4f:17:14:eb:86:9e:57:7a:ad:
30:b9:85:5b:02:cc:bf:d7:ad:00:ba:f3:c2:cc:69:7e:db:df:
38:81:aa:33:40:67:03:60:3e:52:ec:14:06:4c:4a:48:6a:a6:
bf:52:4c:c5:59:29:b1:45:07:1b:9f:ff:9f:ad:42:42:88:78:
98:24:39:ff:55:15:fb:20:8b:85:f8:22:86:07:fc:eb:a7:74:
88:e9:97:5e:79:80:b7:e1:08:0c:ce:74:7c:3f:c8:5b:b2:10:
ca:3f:cc:f2:e0:5d:1f:5c:e8:bb:81:a7:83:6d:f1:9e:7d:f5:
e1:57:93:c0:3c:6a:c7:8e:46:31:65:ef:d4:61:10:62:11:a9:
3d:59:e1:77:24:3d:9b:22:d5:72:9b:50:5b:ed:e6:2d:ed:20:
7f:a5:87:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:46:24 2025 by rpki-client