Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/7a5e5517-6a41-3a0c-bdd0-88475ec9f6f5.roa
File: 7a5e5517-6a41-3a0c-bdd0-88475ec9f6f5.roa (raw, json)
Hash identifier: NE1G+lW11l1pPw9z0oenMKe0dgDuqhWm70tNjnySW/M=
Subject key identifier: FF:0B:EC:58:58:31:23:B0:21:70:85:D1:AA:CE:93:F3:76:16:B6:BF
Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
Certificate serial: 010D0C9F4328584937D932D63D3164FF005C26A0
Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/7a5e5517-6a41-3a0c-bdd0-88475ec9f6f5.roa
Signing time: Mon 17 Mar 2025 13:00:52 +0000
ROA not before: Mon 17 Mar 2025 13:00:52 +0000
ROA not after: Sun 15 Jun 2025 13:00:52 +0000
asID: 36511
IP address blocks: 137.83.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:37:d9:32:d6:3d:31:64:ff:00:5c:26:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
Validity
Not Before: Mar 17 13:00:52 2025 GMT
Not After : Jun 15 13:00:52 2025 GMT
Subject: CN=dc341800-40d9-4c08-ad25-e9922b38d250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:81:aa:dc:0a:b3:18:c8:96:71:ce:3f:f2:fa:
6e:ff:f4:82:90:77:bc:d9:14:7c:f5:e8:b2:b5:50:
ee:48:bc:c4:7a:76:a7:ee:15:11:1c:1b:c3:a9:78:
d5:c1:49:e3:9b:74:2e:33:3a:38:0b:51:31:3e:fe:
5c:b4:ea:95:44:d1:a9:aa:88:3a:da:50:c6:d5:82:
56:78:44:db:0c:97:27:7a:a5:ac:33:53:57:64:b5:
52:84:c7:e0:ec:fe:a4:58:87:f7:4b:fc:c4:38:12:
e7:cb:09:0e:17:70:ff:24:1a:2b:bb:07:52:a8:6c:
e1:f2:0c:b4:ca:f2:47:e7:2b:62:19:d8:64:58:86:
59:b0:52:0a:28:f5:cb:5b:f8:da:85:ad:21:35:65:
5e:92:2b:22:e8:29:5f:62:46:ea:88:8f:f5:b8:65:
37:3a:ef:77:ed:9e:7d:54:a9:ba:78:ee:c0:c3:5d:
5f:71:5e:82:d8:cf:b7:14:0f:e0:5b:3f:31:76:c2:
3e:61:fb:34:3b:27:fb:60:8e:5d:3b:9b:1f:cf:25:
48:5d:10:30:4c:6e:92:da:e2:59:86:e7:9e:42:fe:
0d:09:3f:02:2b:54:cd:d1:3d:89:b5:5d:dc:59:2c:
2b:3e:1c:09:59:84:83:38:64:52:80:75:9a:c4:9b:
87:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:0B:EC:58:58:31:23:B0:21:70:85:D1:AA:CE:93:F3:76:16:B6:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/7a5e5517-6a41-3a0c-bdd0-88475ec9f6f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl
X509v3 Authority Key Identifier:
keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
sbgp-ipAddrBlock: critical
IPv4:
137.83.102.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:c7:7f:ae:85:c9:8a:26:ae:f4:6c:9e:ca:77:e8:62:ea:3b:
a0:4b:37:65:c7:e2:4b:3b:3e:b6:34:8a:16:20:8f:03:0e:d8:
db:66:78:5e:f2:67:1a:7d:56:70:e4:02:7b:d2:81:12:ef:69:
1b:8f:66:ef:51:a5:4a:90:6b:56:6a:83:d9:c9:98:75:3e:14:
bd:6c:07:5b:62:0c:ec:e0:5c:20:7f:00:bd:d4:88:ff:d4:56:
f5:d3:47:ae:65:0b:f1:12:db:48:69:ab:61:88:53:8e:9f:01:
8c:31:31:05:4c:7c:19:17:88:79:53:84:93:61:2d:b9:bd:7a:
4b:80:4a:e8:66:6f:6c:40:81:3c:d5:e2:12:1f:59:90:a4:2f:
5b:18:8f:1a:c9:5a:fe:bf:84:46:3d:2d:bd:17:c3:19:73:8c:
26:70:e0:a7:03:df:dc:74:3f:aa:d1:0c:fc:fd:6d:e9:0b:bb:
ba:2a:38:d6:51:56:44:70:57:bb:3c:f3:38:bd:bb:e4:c1:47:
c5:93:b8:1c:2c:b1:2b:bb:72:b1:f2:4e:61:dd:bc:c1:18:58:
8d:91:2f:42:17:68:b4:75:2f:f4:92:e3:c6:34:82:fb:ea:5f:
a6:2b:99:68:5c:b4:4f:7b:2d:f4:82:7a:fe:42:38:e4:4b:82:
1c:c5:58:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:47:19 2025 by rpki-client