Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/e85fa22c-b7d6-3fa7-9929-d1c2421629dc.roa
File: e85fa22c-b7d6-3fa7-9929-d1c2421629dc.roa (raw, json)
Hash identifier: TIxEdF7ovKPnyOK6ksRcSMDxTQ+Z/qJN8gZ56QnmAOw=
Subject key identifier: 97:D4:A4:3B:C5:3C:5F:92:29:52:AB:C8:44:8E:70:7A:DE:76:E2:BC
Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Certificate serial: 010D0C9F43285849287E6A40E24212B1F34D3480
Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/e85fa22c-b7d6-3fa7-9929-d1c2421629dc.roa
Signing time: Wed 12 Mar 2025 01:00:39 +0000
ROA not before: Wed 12 Mar 2025 01:00:39 +0000
ROA not after: Tue 10 Jun 2025 01:00:39 +0000
asID: 54994
IP address blocks: 138.113.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:28:7e:6a:40:e2:42:12:b1:f3:4d:34:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Validity
Not Before: Mar 12 01:00:39 2025 GMT
Not After : Jun 10 01:00:39 2025 GMT
Subject: CN=67136360-5abd-4a3f-8877-b094da3d1cdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a3:fc:ea:4a:b5:fc:50:e6:1f:d7:0f:77:95:
9e:ea:f0:6d:ab:5e:d2:d4:a8:78:d8:1e:76:5b:1a:
68:e3:0f:39:d3:a7:95:f9:25:92:d9:c4:de:41:22:
47:de:32:67:8e:f6:ac:be:23:c5:fa:fb:46:af:c2:
94:49:f9:56:35:d9:00:f7:ea:0b:d5:a4:49:40:37:
2a:2e:39:79:db:0e:28:43:12:7d:76:5d:cc:df:dd:
f2:fc:ea:23:e8:70:b3:60:c7:c4:10:2d:47:bd:a9:
27:63:21:f9:81:51:5c:84:39:a2:ad:49:3e:7e:f0:
2b:fa:7f:bb:7f:44:0e:b1:93:d7:1c:26:da:ed:d3:
30:8c:51:6f:c2:57:35:e8:e3:10:bf:d9:75:86:a3:
87:dc:8c:b7:1c:85:90:8a:78:d9:bf:31:2c:c6:0b:
fc:65:4d:19:8c:13:e3:e7:59:b2:b2:ef:df:a3:6e:
d0:38:ef:bd:90:55:74:f4:3f:f5:c5:5e:c6:ce:b3:
8f:cd:c9:20:a7:d5:f7:31:9d:8a:1d:5c:c0:93:a7:
1f:67:74:98:34:1b:3d:b7:b8:51:2a:79:a5:89:d4:
2b:b6:ec:ac:50:97:97:6f:b8:ac:18:1d:70:95:84:
df:e6:fe:91:db:9e:8d:72:71:f6:7b:5e:b7:6d:bc:
9a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D4:A4:3B:C5:3C:5F:92:29:52:AB:C8:44:8E:70:7A:DE:76:E2:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/e85fa22c-b7d6-3fa7-9929-d1c2421629dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl
X509v3 Authority Key Identifier:
keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
sbgp-ipAddrBlock: critical
IPv4:
138.113.121.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:3c:c4:56:6d:30:d3:63:9e:4f:7f:0d:9f:87:9c:cc:ce:8b:
9f:67:ba:8c:1b:65:63:23:56:34:51:57:d8:c0:c7:fa:4f:7e:
4d:0a:16:3d:46:c3:b7:01:d2:6d:de:3d:4e:9d:51:85:dd:f7:
a9:dc:92:1e:ed:47:2d:e7:d7:f1:4a:0b:3e:ce:5b:a6:2e:ff:
6c:23:58:24:39:6a:97:86:6f:51:10:c1:9a:f9:94:1d:af:41:
e2:05:48:6f:9e:78:a3:e6:19:69:a1:14:c1:e3:23:b8:8d:b7:
6c:70:67:77:c0:02:5a:6d:03:47:5e:2b:e6:8e:cb:af:97:6a:
f3:86:ae:e4:89:c6:1f:c9:cf:5f:d1:82:dc:af:ab:eb:f2:68:
a3:9c:a6:0f:33:7e:dc:d9:96:72:8e:e7:38:f0:93:7b:a9:ea:
c3:b9:d0:0b:ba:79:cc:5e:c3:d3:80:17:82:25:6f:16:6a:be:
15:c4:31:f6:21:bb:0e:9b:52:20:ca:66:c7:78:d3:61:5b:79:
06:55:9e:da:3f:93:3f:53:ed:77:bb:c0:92:30:77:0d:d6:42:
95:78:af:f8:51:db:39:54:f2:9c:6d:a2:53:84:e8:4a:5a:8d:
af:98:36:b1:04:24:6a:55:c5:c8:65:f1:1f:60:8f:ee:01:96:
82:cd:d9:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:29:06 2025 by rpki-client