Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d/8cef7c13-67c3-3bb7-9d93-879240a0cfb8.roa
File: 8cef7c13-67c3-3bb7-9d93-879240a0cfb8.roa (raw, json)
Hash identifier: RwZOFhjE9/xJY97Z36GdXPFifckgOLGuXd8txWKJLvw=
Subject key identifier: CB:6F:B6:E6:0B:58:CE:BA:0D:0D:70:0E:94:C7:35:A0:1E:8F:60:53
Certificate issuer: /CN=b7c805d5-58a4-453e-b16e-c677ccb6b46d
Certificate serial: 010D0C9F43285848FD56C4ABC618CB0D7D7FEEA0
Authority key identifier: C1:06:A2:F8:0D:B3:B7:93:4C:72:3B:1F:70:2A:B4:8F:48:52:AF:D0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d/8cef7c13-67c3-3bb7-9d93-879240a0cfb8.roa
Signing time: Mon 24 Feb 2025 14:00:52 +0000
ROA not before: Mon 24 Feb 2025 14:00:52 +0000
ROA not after: Sun 25 May 2025 13:00:52 +0000
asID: 395347
IP address blocks: 138.43.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fd:56:c4:ab:c6:18:cb:0d:7d:7f:ee:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7c805d5-58a4-453e-b16e-c677ccb6b46d
Validity
Not Before: Feb 24 14:00:52 2025 GMT
Not After : May 25 13:00:52 2025 GMT
Subject: CN=32b2f0a3-a127-49f6-85cd-6c60a44f818f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:42:51:db:c4:91:d9:82:df:1e:38:d9:08:36:
2a:42:c4:6b:3f:ac:fd:4b:1f:ec:14:9e:a4:4d:ab:
e7:0b:a1:4a:f6:a5:2e:fb:fc:e9:c9:87:94:f5:99:
04:4e:00:2c:16:ec:73:2f:17:7c:40:b6:27:ce:5a:
c3:5d:30:cd:4d:51:ea:09:3e:2c:9f:3a:ff:30:e7:
49:2f:fc:20:51:4a:73:63:e0:d3:fb:2d:d9:39:11:
73:6a:d7:66:be:74:dd:db:8b:01:37:9c:04:73:33:
b3:8c:ba:64:ad:a9:e7:02:a0:98:24:27:5b:2f:37:
f4:ec:22:cd:ad:14:eb:c5:3c:4c:eb:6a:a8:27:91:
6d:71:b4:c1:67:bf:22:08:d4:3c:78:15:54:bb:05:
3a:90:9b:27:33:d8:b9:91:26:be:65:52:9b:f7:32:
f9:ca:35:fa:58:6a:a5:74:a0:92:d1:19:9d:62:85:
f5:62:2e:04:74:8f:f1:d5:df:79:63:67:36:17:8e:
94:fa:40:d4:d8:57:70:92:55:c3:42:02:47:92:76:
f4:49:03:22:13:c4:a2:8a:53:58:1d:49:63:2e:bc:
bf:5e:7c:c6:d7:44:28:4b:8b:e3:22:da:95:11:64:
84:aa:4f:2b:2f:e2:f7:9f:04:57:51:a1:c9:4b:a2:
f8:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:6F:B6:E6:0B:58:CE:BA:0D:0D:70:0E:94:C7:35:A0:1E:8F:60:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d/8cef7c13-67c3-3bb7-9d93-879240a0cfb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d/b7c805d5-58a4-453e-b16e-c677ccb6b46d.crl
X509v3 Authority Key Identifier:
keyid:C1:06:A2:F8:0D:B3:B7:93:4C:72:3B:1F:70:2A:B4:8F:48:52:AF:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d.cer
sbgp-ipAddrBlock: critical
IPv4:
138.43.242.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:b9:32:dd:36:a2:2b:6a:17:02:66:fd:63:62:ca:2c:2d:9e:
e0:97:8a:19:fc:ef:eb:ee:24:82:e7:bb:12:dc:7f:0b:88:e4:
6b:ca:4d:6d:b4:83:40:00:fc:d6:e9:35:24:0b:79:ca:96:03:
a8:ad:2e:6d:84:73:8d:65:f3:73:16:51:e8:fe:28:25:79:b7:
7d:6c:69:a1:07:ec:1e:c3:d8:b4:0a:2e:c2:88:9e:16:11:cb:
49:e3:ec:cb:a1:55:8e:68:d0:1c:42:8e:26:df:8c:4a:ff:f2:
0d:e4:64:4a:d3:51:df:cc:84:7e:55:4d:e5:48:ec:6b:d7:f0:
3a:10:26:61:05:ff:04:45:7b:89:5e:37:76:c5:1b:7b:53:d9:
19:d4:b7:f0:90:05:b8:9b:eb:80:b3:2e:1a:d3:a5:ab:28:62:
a0:6d:3f:e0:a9:a9:f2:e9:8c:2c:92:cd:f8:ba:85:b3:58:93:
e4:81:af:d6:51:b4:25:06:a8:01:e2:06:ac:5c:75:ea:f7:0a:
27:7e:7e:2e:73:fa:7e:49:63:bf:ef:dd:56:04:62:bb:b8:46:
f9:9c:fe:cd:ba:56:44:37:61:33:2e:1f:71:9a:54:d1:7a:b7:
0b:33:5a:74:17:73:27:34:ee:5d:67:78:e3:41:0b:d1:07:20:
67:2f:08:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:16:10 2025 by rpki-client