Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/43f90493-d8a1-3901-918e-9cb84795016c.roa
File: 43f90493-d8a1-3901-918e-9cb84795016c.roa (raw, json)
Hash identifier: A9cdkRfdlWd6uC/jr6F9aba3bEGOsArf7p0Ep2wYT1c=
Subject key identifier: 59:FD:3A:85:FF:2B:78:60:1A:50:FE:61:97:14:3F:EE:97:B3:C2:21
Certificate issuer: /CN=ffc39f64-f356-459c-8bf7-d142a7a166f3
Certificate serial: 010D0C9F43285848AAFB65CE7820F30BDBDC2E00
Authority key identifier: 4D:52:88:03:05:6C:F7:2A:7F:D0:E7:BC:30:7E:24:98:8D:2D:20:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/43f90493-d8a1-3901-918e-9cb84795016c.roa
Signing time: Sun 26 Jan 2025 02:00:38 +0000
ROA not before: Sun 26 Jan 2025 02:00:38 +0000
ROA not after: Sat 26 Apr 2025 01:00:38 +0000
asID: 8075
IP address blocks: 138.32.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:aa:fb:65:ce:78:20:f3:0b:db:dc:2e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffc39f64-f356-459c-8bf7-d142a7a166f3
Validity
Not Before: Jan 26 02:00:38 2025 GMT
Not After : Apr 26 01:00:38 2025 GMT
Subject: CN=2b80ca1c-b2c1-493d-8819-670d1f295043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a3:ff:04:31:72:4f:95:9a:66:e7:c3:c3:42:
2a:d3:98:22:56:55:27:e4:6e:e4:92:49:16:80:3c:
04:08:98:f6:33:5a:a5:b6:52:88:aa:f1:e5:9e:03:
a9:e0:fe:a2:ea:71:89:a9:4c:ab:06:92:48:b5:cc:
9e:50:ed:0d:61:d0:60:ce:d6:b3:f6:3e:24:73:03:
3e:6d:93:93:c3:98:ff:03:9d:d7:6c:cb:17:78:65:
06:f4:1c:9f:51:ff:ec:b3:79:20:8b:81:0d:7a:b5:
88:10:90:29:a9:3f:3f:04:d9:78:f8:c2:45:e0:4d:
bc:6b:9a:7f:8b:24:bf:50:52:5c:46:6a:39:c6:38:
00:72:b9:b8:73:1a:04:d3:f7:e8:e4:81:08:9f:8e:
36:cd:fc:9c:e8:ba:92:be:1b:06:54:77:ab:15:9d:
fe:78:73:04:ce:5b:d2:a5:35:e5:fc:6c:63:ac:78:
1e:5b:75:4a:1d:0d:91:ed:0c:59:9c:15:cd:39:54:
e5:b0:4f:53:69:83:fd:2e:f8:e4:7c:be:10:e1:80:
86:2a:ff:9b:b2:f0:65:74:27:02:17:4d:52:7a:92:
b1:80:53:f7:cb:95:c3:70:31:94:10:e5:41:bb:65:
76:fd:79:78:73:17:04:c8:c4:a1:fa:4c:70:b0:0a:
7a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:FD:3A:85:FF:2B:78:60:1A:50:FE:61:97:14:3F:EE:97:B3:C2:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/43f90493-d8a1-3901-918e-9cb84795016c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.crl
X509v3 Authority Key Identifier:
keyid:4D:52:88:03:05:6C:F7:2A:7F:D0:E7:BC:30:7E:24:98:8D:2D:20:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer
sbgp-ipAddrBlock: critical
IPv4:
138.32.112.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:b5:2c:0d:18:f3:11:e4:15:61:cb:f9:3c:21:84:3e:a5:ad:
ec:9a:61:d6:9d:b6:1f:ba:be:0a:60:9e:4f:6f:ac:ab:96:32:
e8:d9:6d:54:d4:f6:a8:6a:3b:18:ac:ec:81:ce:9f:cd:f8:d3:
f1:57:46:14:4b:54:a0:f4:36:e2:75:95:34:ee:f8:c4:27:1b:
ec:5f:f6:b2:00:1f:da:d4:46:52:f1:11:90:2b:80:1f:ef:df:
ea:ec:02:f8:1a:ff:7f:ac:f4:12:d3:db:95:14:cb:da:8b:9d:
32:82:a2:1f:a6:cf:2b:82:e3:59:b3:ca:25:05:d2:fe:c5:10:
aa:a8:73:44:e4:ac:01:80:44:37:c4:5f:87:f4:17:22:8b:c6:
af:00:77:88:97:b3:f4:23:bb:68:3e:df:eb:29:73:0c:eb:bb:
62:a4:58:f7:33:d9:19:6a:77:40:db:02:dd:c6:af:0d:4d:8a:
1d:6b:e2:4a:9d:cb:66:04:d5:79:48:5b:9f:e3:bb:e6:19:36:
9c:8f:51:ec:77:1c:5a:61:29:24:24:1c:2c:be:40:cb:5b:46:
7f:44:8b:79:e6:0a:93:90:52:d4:c8:a2:8c:39:27:64:85:c9:
5d:58:4e:1f:dd:2e:a1:e4:0c:58:d3:82:e5:f5:1b:51:75:5e:
23:bb:70:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:31:14 2025 by rpki-client