Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/37629db3-f942-34cd-bffc-f6eb585e68eb.roa
File: 37629db3-f942-34cd-bffc-f6eb585e68eb.roa (raw, json)
Hash identifier: HbhLG2wKTqUO/4Rfjt9YWXLqKQT32wra0k1VyCnas70=
Subject key identifier: 89:F6:9B:01:6F:00:94:C0:76:EB:74:0E:18:50:C2:47:D9:66:A4:8C
Certificate issuer: /CN=ffc39f64-f356-459c-8bf7-d142a7a166f3
Certificate serial: 010D0C9F432858493243DEFE19C369A353E05300
Authority key identifier: 4D:52:88:03:05:6C:F7:2A:7F:D0:E7:BC:30:7E:24:98:8D:2D:20:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/37629db3-f942-34cd-bffc-f6eb585e68eb.roa
Signing time: Sat 15 Mar 2025 13:00:52 +0000
ROA not before: Sat 15 Mar 2025 13:00:52 +0000
ROA not after: Fri 13 Jun 2025 13:00:52 +0000
asID: 8075
IP address blocks: 138.32.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:32:43:de:fe:19:c3:69:a3:53:e0:53:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffc39f64-f356-459c-8bf7-d142a7a166f3
Validity
Not Before: Mar 15 13:00:52 2025 GMT
Not After : Jun 13 13:00:52 2025 GMT
Subject: CN=ee68b77a-6137-42cf-b0b0-2c52e272a7c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:63:89:78:4b:17:17:a5:e2:37:c5:c6:05:1e:
4e:0d:ba:d8:16:59:60:fc:a3:67:58:c7:c0:75:5b:
10:aa:d4:c9:cb:e3:cb:19:27:4c:a1:38:66:e3:c6:
5f:fe:1c:8c:64:e5:75:9e:c8:1a:d3:ad:f7:68:93:
3b:86:cf:27:75:3e:c3:9d:7d:40:5b:56:c0:8c:50:
35:2e:cf:00:b6:84:2e:a1:09:96:e4:f7:b4:6b:4e:
97:56:d3:6c:69:2c:a8:d6:ba:cb:5b:89:48:54:74:
d1:13:17:48:ff:7a:38:cb:1a:48:26:9a:bf:f8:58:
c5:1f:b6:17:1c:db:36:3a:38:92:c0:d5:c8:b9:e1:
78:43:34:af:a4:84:9c:d4:8b:00:fa:5b:98:23:4f:
e1:ab:89:24:3b:29:83:27:12:22:0a:ef:87:e6:5f:
ce:05:99:1a:03:8c:0b:8d:91:24:69:9f:a5:62:ad:
18:21:1c:7e:4e:d3:b6:2c:11:91:95:a4:9c:3b:af:
9a:6b:d5:57:6f:13:50:13:84:4b:c8:6e:4b:de:15:
1b:1c:a7:a7:fe:76:31:58:ca:17:72:5d:04:3d:ed:
85:8b:5c:cf:f2:b8:5a:41:81:ac:6f:29:fc:75:ee:
f3:9e:d9:26:19:a2:c2:7f:ac:ca:da:2e:c4:6f:ca:
86:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:F6:9B:01:6F:00:94:C0:76:EB:74:0E:18:50:C2:47:D9:66:A4:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/37629db3-f942-34cd-bffc-f6eb585e68eb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.crl
X509v3 Authority Key Identifier:
keyid:4D:52:88:03:05:6C:F7:2A:7F:D0:E7:BC:30:7E:24:98:8D:2D:20:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer
sbgp-ipAddrBlock: critical
IPv4:
138.32.108.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:dd:ab:e2:b0:8f:6b:a6:0e:9a:84:22:f2:e1:3e:2d:cf:a3:
ac:f0:c9:a6:9e:21:f7:3d:54:9c:35:93:9f:75:50:10:79:77:
97:be:f0:2c:5d:85:c8:2b:cd:51:e9:91:69:95:c2:88:20:34:
b0:8e:4f:b5:ab:52:29:9d:28:0f:7c:fc:94:d0:01:2b:f4:fe:
dd:a8:30:ce:8e:37:f3:2f:9b:af:af:9d:29:fc:67:2a:82:c1:
76:93:90:e0:94:fe:52:e1:7e:06:29:c1:d3:bb:17:4e:a3:b0:
e8:27:7f:70:97:51:b5:1f:d0:84:24:20:6c:b0:54:35:5c:d2:
e2:45:21:d3:d9:b6:a9:24:36:b7:27:1a:16:90:f4:6a:47:6c:
98:5a:64:11:08:ab:a0:cb:f7:3e:aa:b9:7a:1a:62:49:48:27:
b7:06:f3:b0:d8:7c:88:1d:de:49:ee:32:19:e9:3f:a6:d6:80:
2c:a5:6b:ed:25:8e:07:7c:08:cc:58:30:02:5b:90:33:8e:db:
12:9b:72:6f:3e:ba:37:cd:46:b4:26:0a:56:c9:63:85:0f:7c:
85:47:1e:b9:be:07:92:84:32:c4:94:5d:fc:c3:0b:e3:e5:2e:
15:79:0c:85:f6:f8:49:14:d6:08:9c:ef:48:92:83:86:84:1a:
31:23:4a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:28:03 2025 by rpki-client