Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/5d64ac03-d88c-3d80-be59-a094457e9fa5.roa
File: 5d64ac03-d88c-3d80-be59-a094457e9fa5.roa (raw, json)
Hash identifier: nFX/RUsKglix35OkfMevNPjQzZ5kKGC6nJZFmxS4qyk=
Subject key identifier: BF:1A:4B:DB:59:A4:08:BF:3A:43:5D:25:C0:53:2B:43:65:2F:49:C1
Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Certificate serial: 010D0C9F4328584905B6B2673657C9E4B25104F0
Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/5d64ac03-d88c-3d80-be59-a094457e9fa5.roa
Signing time: Thu 27 Feb 2025 14:00:51 +0000
ROA not before: Thu 27 Feb 2025 14:00:51 +0000
ROA not after: Wed 28 May 2025 13:00:51 +0000
asID: 54994
IP address blocks: 138.113.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:05:b6:b2:67:36:57:c9:e4:b2:51:04:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Validity
Not Before: Feb 27 14:00:51 2025 GMT
Not After : May 28 13:00:51 2025 GMT
Subject: CN=450b079f-02b6-433e-ab3c-93c03281f598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:94:e4:9c:d3:ba:d4:f2:a3:16:33:60:39:de:
d6:4b:12:53:52:de:2d:60:26:ed:4f:c0:71:41:25:
ae:f1:40:23:bc:28:70:a9:9e:b3:dd:10:49:2e:7c:
ef:bd:99:c8:d4:f3:5d:4f:c2:95:c2:1f:2a:e3:b3:
9c:eb:9c:4c:06:d1:ca:cc:02:38:39:9d:65:2b:20:
ab:24:ba:72:53:e9:86:26:2d:b5:2c:2e:84:09:a5:
65:98:b0:a8:30:d7:03:39:9b:af:d4:73:cc:65:98:
c3:8f:28:a2:78:70:c6:5d:28:3b:63:a3:b3:82:b6:
b1:88:4a:1e:a0:00:41:0e:8a:43:ea:2f:7d:9d:df:
02:ed:e9:05:01:ab:16:c8:10:22:e8:cc:3c:44:f2:
c2:c6:74:df:e6:71:f7:5a:73:af:ed:11:7a:1d:f1:
61:91:0e:f8:d2:93:1b:aa:ea:35:63:27:77:d4:13:
8a:6e:81:85:5d:09:fb:f2:07:22:8c:dc:c0:b8:ec:
ac:1b:56:2c:07:71:c1:33:21:c6:6b:ec:f1:da:66:
ef:cc:3f:f2:ef:96:91:49:f5:3e:e5:23:50:4d:da:
0b:bb:90:56:49:34:37:3b:bb:f0:8e:86:40:1e:8e:
93:c2:a8:19:4d:ac:98:6c:d8:3e:a5:01:0d:5b:c1:
9a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:1A:4B:DB:59:A4:08:BF:3A:43:5D:25:C0:53:2B:43:65:2F:49:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/5d64ac03-d88c-3d80-be59-a094457e9fa5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl
X509v3 Authority Key Identifier:
keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
sbgp-ipAddrBlock: critical
IPv4:
138.113.128.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:a1:19:d4:1a:f0:5e:15:4f:26:63:9a:ef:59:48:e6:5a:8e:
95:2a:24:3a:c1:98:24:bd:42:69:69:6f:1e:27:cd:ff:cd:d4:
45:b7:00:d2:fb:11:23:3b:de:33:6c:a5:be:78:38:ae:0f:19:
a9:69:b7:77:73:c5:07:90:c5:01:9f:a5:5c:56:10:24:30:16:
a4:44:1d:ec:58:6f:5c:c0:ed:11:92:b2:8b:52:bc:d9:c9:93:
e7:94:28:78:89:d9:ef:18:9c:2e:e0:28:1f:aa:e7:c8:11:84:
78:e4:e1:0d:29:f9:4b:0c:73:fb:f8:3d:74:f4:26:6b:b8:fd:
4b:56:b0:dc:c2:a7:3f:9a:85:b6:11:ce:55:5e:b2:73:ac:63:
ee:d1:ec:b0:9c:72:12:84:50:92:e3:fb:81:87:01:a6:1d:70:
b6:6b:02:0a:ec:81:62:1c:e0:d0:d3:64:2a:57:5e:9a:e1:b4:
d0:cc:ae:e9:e2:da:80:d9:b8:4d:dc:fc:ba:4b:1d:04:f7:45:
01:27:44:cc:ed:65:a7:c7:4b:72:0c:11:e4:c0:56:ef:d7:57:
95:4e:7e:bb:71:39:63:91:8c:22:af:46:d5:dc:fb:e3:4e:8f:
34:0d:a9:19:d7:32:28:bd:c5:92:e3:da:b2:61:c7:f5:01:4a:
51:e6:62:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:26:21 2025 by rpki-client