Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/36a9cd18-11cd-33f0-b63e-80f65125eefb.roa
File: 36a9cd18-11cd-33f0-b63e-80f65125eefb.roa (raw, json)
Hash identifier: sYZIAOVWEX7QIuxanP8FFasLHM5LDGguuMPjiQPYGxI=
Subject key identifier: CC:C0:1A:A0:D3:95:CA:60:6B:28:61:65:DB:A9:F2:73:95:4F:79:65
Certificate issuer: /CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
Certificate serial: 010D0C9F4328584957F40BD76721941E5E54F280
Authority key identifier: 42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/36a9cd18-11cd-33f0-b63e-80f65125eefb.roa
Signing time: Sat 29 Mar 2025 01:00:39 +0000
ROA not before: Sat 29 Mar 2025 01:00:39 +0000
ROA not after: Fri 27 Jun 2025 01:00:39 +0000
asID: 397050
IP address blocks: 137.118.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:57:f4:0b:d7:67:21:94:1e:5e:54:f2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
Validity
Not Before: Mar 29 01:00:39 2025 GMT
Not After : Jun 27 01:00:39 2025 GMT
Subject: CN=6efc0744-d35b-4e79-80f3-81f01e1f3216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:aa:8d:a7:aa:ed:aa:40:06:ef:94:e6:71:5f:
f4:c2:f5:1b:1f:ce:3d:39:06:27:cc:09:fa:f9:8d:
38:27:a7:8e:27:ff:79:af:d4:71:0b:c9:dd:83:b4:
18:22:83:ab:0d:71:f1:a3:27:29:2b:59:36:fe:82:
92:8c:96:d1:f1:29:74:8f:d2:99:87:ee:55:46:43:
6a:66:1f:29:a1:ae:3c:da:d7:f6:f3:33:c4:88:f7:
f9:e7:38:fc:5d:4e:f9:72:f8:4c:4e:56:d2:e6:fc:
32:a0:fb:e4:ab:a4:0c:21:84:98:c8:ad:65:bb:a1:
54:d2:7e:63:b4:d1:0e:d3:ed:66:36:85:dd:31:bf:
5d:97:6f:67:49:1a:f5:7b:bf:a9:12:0f:3d:f4:bb:
a6:fe:bf:f8:e8:a8:84:10:73:0e:d0:d5:26:4d:60:
11:d8:d0:ac:04:a4:34:a9:2e:e3:8b:c7:d3:6f:7f:
d4:85:43:b5:a8:be:be:9b:aa:ea:2b:d9:4d:04:54:
3c:55:05:af:d2:24:0d:06:b6:48:79:e0:0a:56:12:
22:0b:b6:7f:d9:bb:33:74:5a:d6:72:bd:0c:70:b0:
98:34:14:45:9a:95:c1:34:4d:23:ae:30:d5:ca:fe:
d5:59:eb:df:49:4d:1a:94:6c:87:3b:5f:0c:b9:63:
ca:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:C0:1A:A0:D3:95:CA:60:6B:28:61:65:DB:A9:F2:73:95:4F:79:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/36a9cd18-11cd-33f0-b63e-80f65125eefb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl
X509v3 Authority Key Identifier:
keyid:42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
sbgp-ipAddrBlock: critical
IPv4:
137.118.129.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:e2:53:a5:3a:48:66:d3:84:a6:e4:c7:0d:1b:f1:90:83:45:
c7:9f:38:9a:60:2b:89:45:4a:7b:bd:46:98:0a:c8:e9:e8:8a:
b2:f1:f2:49:3b:b1:3d:00:ba:9c:fa:bd:0c:28:f6:91:0b:d1:
a2:3b:12:51:32:85:b9:f9:10:d6:90:e1:03:fc:8e:24:e7:2c:
c6:59:56:5d:7b:8a:50:63:88:fc:de:cc:50:57:77:7b:f0:a6:
9d:11:6e:8a:bd:f2:29:19:91:94:fe:a3:69:96:6a:3d:da:0e:
4b:27:72:39:00:4e:0f:29:9b:e8:9f:c6:a6:d1:95:1a:c2:d7:
67:17:00:74:fb:92:f7:aa:9e:4d:f3:26:1e:b5:64:5a:02:c8:
e0:4f:71:37:fb:ba:4d:44:03:fe:75:05:3b:3c:e6:15:6f:d0:
27:58:f8:f4:af:4b:ac:dd:9c:64:e1:57:27:07:13:b6:c8:a7:
89:53:4b:53:db:56:1d:fd:59:2b:11:e8:3e:2b:60:d3:71:a5:
9f:e4:41:32:95:9e:47:7b:87:58:3e:77:9d:ed:55:24:ca:63:
d6:c1:9c:c5:07:72:d6:a9:7b:8c:2b:5c:9e:bf:e2:ce:fa:be:
f5:56:f4:2b:09:64:c1:99:89:ac:3d:61:03:c0:3b:b3:2f:c5:
ff:86:1b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:33:01 2025 by rpki-client