Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/6cf2c805-2a89-392d-9045-0492053626d7.roa
File: 6cf2c805-2a89-392d-9045-0492053626d7.roa (raw, json)
Hash identifier: tdt+SM5+KH1mXzYLVP+4ttyP8g4tXS9uYpxu6L1Rimc=
Subject key identifier: 7A:30:1C:5C:3A:7F:9B:DC:8C:11:42:F9:AC:4C:3D:E6:2B:3E:5E:AD
Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Certificate serial: 010D0C9F432858487A208543AEC0381A67C480D0
Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/6cf2c805-2a89-392d-9045-0492053626d7.roa
Signing time: Wed 08 Jan 2025 14:00:51 +0000
ROA not before: Wed 08 Jan 2025 14:00:51 +0000
ROA not after: Tue 08 Apr 2025 13:00:51 +0000
asID: 54994
IP address blocks: 138.113.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7a:20:85:43:ae:c0:38:1a:67:c4:80:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Validity
Not Before: Jan 8 14:00:51 2025 GMT
Not After : Apr 8 13:00:51 2025 GMT
Subject: CN=07165db1-19cf-451c-826f-e6170197ce4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:11:03:46:6f:df:82:4f:2b:9a:fb:04:56:27:
e9:bc:62:38:c8:45:f2:00:76:34:73:a7:87:89:ad:
f9:0e:b6:24:f6:f2:69:cc:70:07:0f:22:0f:17:69:
d3:72:91:73:47:8d:6d:f5:85:06:2f:49:2d:b3:49:
2e:7a:59:77:49:85:58:91:e2:6b:d2:51:93:83:23:
3c:02:6f:45:75:94:e4:7f:4d:27:6a:37:27:5a:aa:
bb:e1:5d:ea:35:36:ea:44:a5:a7:58:c8:c9:50:1d:
51:29:6b:89:7a:25:c1:02:b0:cb:85:c8:b2:30:2b:
ad:9a:01:dc:1f:de:03:a9:38:bd:16:4d:a2:92:96:
a4:b6:a2:f2:6e:14:c3:c3:92:11:a2:d1:fa:91:87:
39:08:f9:83:cf:f0:87:7d:ec:bf:39:b0:31:69:93:
7a:3c:38:57:71:31:ac:34:b6:ee:ec:b2:15:8f:f8:
e8:ea:24:b6:3e:fb:7c:90:2c:92:80:0c:d8:2b:e5:
4f:b5:8e:78:45:71:a7:55:bb:50:43:21:6f:37:6f:
53:de:56:80:a6:f3:50:e1:2b:bf:2e:07:57:71:c2:
46:b9:51:f4:46:13:9e:79:1f:b1:d4:55:ab:0e:f3:
69:6f:41:e4:2c:79:4b:02:86:c8:0a:7b:c9:c9:1d:
c0:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:30:1C:5C:3A:7F:9B:DC:8C:11:42:F9:AC:4C:3D:E6:2B:3E:5E:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/6cf2c805-2a89-392d-9045-0492053626d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl
X509v3 Authority Key Identifier:
keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
sbgp-ipAddrBlock: critical
IPv4:
138.113.220.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:4c:86:0b:a2:9a:0c:a0:0f:c0:62:91:9e:fb:f1:cf:3c:83:
17:fb:1f:9e:a3:d2:3e:ac:a5:8b:bf:50:f2:19:88:4b:39:77:
aa:ed:14:06:2d:60:46:bb:0c:71:cf:69:1a:54:88:26:ce:d8:
83:a4:89:f5:19:23:af:ab:5b:db:0a:2d:52:06:56:65:e4:ba:
0f:ef:b2:da:ca:0f:67:56:53:33:d7:d8:08:6c:4d:49:98:e8:
63:8f:86:51:7a:4a:15:45:88:5c:6d:61:5d:8b:76:b3:cd:3c:
2b:71:23:38:bc:d2:23:18:2c:65:76:98:40:00:15:77:fd:7f:
1b:ee:ad:d9:a9:b7:71:f9:cd:0e:e1:5b:1f:22:12:74:95:3e:
90:d5:47:92:7d:98:bc:5a:96:68:50:7a:85:50:b1:36:a3:08:
68:e8:0d:f6:85:f6:1b:7f:ae:cb:ff:03:a2:45:f4:97:a4:c7:
06:81:94:ae:b0:a3:af:01:08:27:c2:f2:47:14:bc:66:ab:48:
3f:2c:c7:3f:cd:85:01:e0:7e:f5:d4:4a:5e:56:da:dd:7a:ca:
30:7c:4a:af:b4:3c:0a:de:73:b9:d6:9a:9a:89:0b:07:30:93:
6f:e9:b0:3f:73:67:ad:e3:4d:26:9f:19:2f:2b:6f:58:3d:5f:
2e:f3:d7:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:11:04 2025 by rpki-client