Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/a7b9924a-f9a3-3083-aa6f-38d6855acc36.roa
File: a7b9924a-f9a3-3083-aa6f-38d6855acc36.roa (raw, json)
Hash identifier: OJtfotA3rz0/8XXka5Ty+eDdTGm1zvXfoZW4R4z5BCM=
Subject key identifier: A6:E4:20:B3:A7:EB:C7:96:96:02:57:F9:7F:7B:8A:51:77:A3:05:BE
Certificate issuer: /CN=3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4
Certificate serial: 010D0C9F432858488AE0A5FB744370B002F278C0
Authority key identifier: F1:27:EF:6B:A2:30:AA:C8:5F:54:C2:04:B3:11:6C:AD:BD:AF:B2:F8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/a7b9924a-f9a3-3083-aa6f-38d6855acc36.roa
Signing time: Tue 14 Jan 2025 14:00:51 +0000
ROA not before: Tue 14 Jan 2025 14:00:51 +0000
ROA not after: Mon 14 Apr 2025 13:00:51 +0000
asID: 8075
IP address blocks: 137.70.152.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8a:e0:a5:fb:74:43:70:b0:02:f2:78:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4
Validity
Not Before: Jan 14 14:00:51 2025 GMT
Not After : Apr 14 13:00:51 2025 GMT
Subject: CN=9f5b7a1b-2063-4db1-9ea8-d7020204161d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b4:7a:67:47:ca:46:03:02:cf:88:69:cc:86:
54:cf:10:c2:12:3d:ca:48:74:a8:b8:e1:d9:d4:84:
72:32:42:95:cb:e8:15:c0:81:14:b1:6a:d1:09:44:
e1:f6:e3:80:4f:ac:2a:a0:ce:89:8c:54:e1:ca:01:
a2:8c:5d:f5:a1:2d:e5:e8:8b:a3:77:13:67:e9:8c:
0a:18:b1:71:77:42:9f:94:f7:d7:e1:f4:7e:c4:4b:
c5:67:1d:a9:98:e0:a1:29:04:7c:e3:75:56:b8:19:
2c:f1:b7:e6:66:85:96:7b:cb:7b:48:7d:84:7a:63:
4d:96:6a:88:d0:b8:2a:91:3b:d7:6c:4b:1f:03:57:
d2:94:07:4b:b1:fc:1f:78:bd:45:cc:72:ab:5b:66:
05:cd:07:40:25:75:18:b0:cc:ac:48:95:10:99:68:
97:9b:c0:e6:a9:50:dd:f4:34:f8:4d:74:17:8b:e5:
ad:20:80:7d:21:39:85:29:1c:7a:16:da:35:71:a4:
31:c5:71:79:e9:83:e7:de:15:1d:21:a6:37:bc:ca:
8c:21:28:ad:50:cd:30:f2:2d:29:9b:5b:db:ce:0e:
5c:25:00:c6:32:55:0d:8e:bd:7a:56:a6:1d:9d:09:
81:3f:25:1a:c0:84:ae:1e:2a:9e:fa:27:30:cb:be:
fb:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:E4:20:B3:A7:EB:C7:96:96:02:57:F9:7F:7B:8A:51:77:A3:05:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/a7b9924a-f9a3-3083-aa6f-38d6855acc36.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.crl
X509v3 Authority Key Identifier:
keyid:F1:27:EF:6B:A2:30:AA:C8:5F:54:C2:04:B3:11:6C:AD:BD:AF:B2:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.cer
sbgp-ipAddrBlock: critical
IPv4:
137.70.152.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:33:eb:4a:57:e2:4b:c3:1d:97:67:cf:c4:b4:cc:42:11:b5:
c3:ce:44:cc:5a:53:26:35:9d:5e:02:22:89:4c:dc:39:da:45:
2b:8f:76:98:5c:67:d7:f4:df:ed:a1:5a:a0:b4:2c:76:aa:76:
7c:89:2b:7a:71:51:0b:14:63:e4:e1:a2:c0:ef:f6:ea:11:09:
51:65:89:f9:94:3a:ae:66:13:04:b5:80:28:21:71:af:57:54:
04:e3:50:95:ef:7f:6c:ac:b9:17:8a:3d:64:f8:96:12:07:66:
d1:8c:23:a0:e0:69:0a:b4:e8:aa:c8:3c:8d:a6:a7:ba:d0:05:
98:1a:9c:c2:59:51:81:0a:35:68:6c:d4:85:a4:04:7b:50:ee:
b1:0b:56:54:55:43:74:e3:04:af:20:e2:8a:f0:0c:4a:98:8f:
ae:2b:81:eb:6f:9a:39:62:9b:9e:80:3b:cd:b7:cd:35:02:76:
48:4e:70:4a:ce:f4:f8:8e:06:01:2a:8a:53:2d:e4:89:ee:db:
c6:f0:d3:8f:97:19:84:40:e3:0c:92:d6:a2:fb:0c:8b:5e:7a:
2c:23:ba:a5:38:c6:82:f1:33:ef:5b:02:e5:fe:58:2b:aa:ce:
71:d7:a5:69:bc:80:8f:d1:96:76:0b:09:fc:a5:aa:43:fd:42:
2b:dc:bd:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 11:38:33 2025 by rpki-client