Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/13b9dc64-fcd6-3168-bb8f-5aa2826d1526.roa
File: 13b9dc64-fcd6-3168-bb8f-5aa2826d1526.roa (raw, json)
Hash identifier: IOBU5tAAMlS/z+YsllUAbzW85/b3QglSyJU19Ce4rv0=
Subject key identifier: C4:3E:E6:F7:45:B3:F1:D2:F4:44:59:F3:A5:1D:A2:EA:A3:7B:46:8C
Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial: 010D0C9F432858481C9A9643D797F61E4EBF7B10
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/13b9dc64-fcd6-3168-bb8f-5aa2826d1526.roa
Signing time: Fri 06 Dec 2024 02:00:39 +0000
ROA not before: Fri 06 Dec 2024 02:00:39 +0000
ROA not after: Thu 06 Mar 2025 02:00:39 +0000
asID: 16696
IP address blocks: 137.220.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1c:9a:96:43:d7:97:f6:1e:4e:bf:7b:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Validity
Not Before: Dec 6 02:00:39 2024 GMT
Not After : Mar 6 02:00:39 2025 GMT
Subject: CN=f6239510-3454-4eb9-9fe3-502a6d6c01a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:dc:06:43:e4:ad:9f:07:70:c8:25:c9:28:59:
a6:16:02:7d:0a:a0:0e:81:66:c9:b6:a3:6b:31:f4:
f3:d3:77:58:06:b5:9b:fd:98:c3:dd:82:5e:86:86:
90:54:f5:49:f1:a8:5c:fc:c6:18:27:c9:98:79:c1:
3b:ba:a6:e0:be:84:65:b5:7d:aa:93:a1:77:32:0e:
57:4a:4e:76:b5:b3:a3:4c:2a:65:b0:03:1a:49:e7:
9b:b1:92:59:5f:27:6e:13:3b:4b:3c:8e:e5:b3:99:
57:d9:ca:c7:31:c3:35:12:e9:77:54:cd:40:f5:c9:
8e:52:fb:0a:d0:f4:10:42:9a:01:16:7c:e1:87:3b:
de:25:8f:e7:ab:32:73:2a:78:d8:a4:00:56:c2:5e:
13:f3:24:f3:cf:98:cd:55:65:11:48:fd:e9:6f:4d:
6a:24:99:be:87:d7:42:dd:97:91:31:46:d0:90:8a:
29:64:eb:aa:b0:7b:23:33:bf:7e:c3:b3:46:51:44:
82:5f:00:80:19:19:86:0b:a0:24:2b:d9:17:d2:f1:
bd:a0:e2:5b:1f:c7:9a:a3:1e:15:7a:5b:ad:89:4a:
1a:34:7f:3c:f7:c7:4e:86:6f:ac:e9:8f:ae:90:db:
95:45:c1:8c:94:cf:94:db:de:6c:c3:49:63:52:4c:
15:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:3E:E6:F7:45:B3:F1:D2:F4:44:59:F3:A5:1D:A2:EA:A3:7B:46:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/13b9dc64-fcd6-3168-bb8f-5aa2826d1526.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
X509v3 Authority Key Identifier:
keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
sbgp-ipAddrBlock: critical
IPv4:
137.220.4.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:97:ca:55:67:c4:e4:fa:58:79:82:3d:e4:0a:7c:ec:ec:2f:
86:8f:b1:bf:ad:40:66:37:dc:47:30:d3:c9:38:2a:7e:27:19:
b7:26:36:b6:9a:5e:1f:c4:66:83:82:ff:f1:2e:c8:2e:0a:4c:
46:22:8d:bb:0d:56:88:71:0c:82:24:43:e3:1d:40:37:50:cc:
91:bd:38:f6:44:ec:7f:41:52:b5:91:7b:d2:dd:65:34:24:70:
f8:a1:90:b6:9b:d2:20:0c:e0:b1:82:7e:2d:c0:77:d4:c7:34:
ae:3e:38:02:16:8d:20:c4:72:79:96:22:c7:19:af:ae:94:c9:
3c:c3:d7:3c:25:bb:e6:39:a3:0b:b5:c0:db:39:96:c2:19:78:
d5:a5:56:8e:1c:92:d4:19:dd:b9:a5:2c:42:f0:86:60:89:77:
25:b5:b3:7e:26:c9:e2:ff:d7:f9:64:ef:4b:57:99:c1:2d:1b:
14:e3:fb:7e:4f:aa:72:8f:78:06:0d:13:62:ea:a0:99:f4:e3:
0f:7f:06:86:a0:22:ce:41:b4:b2:c9:d2:2a:65:07:95:e0:4a:
1c:a3:02:92:9d:7f:64:ca:30:0e:15:53:ea:c6:15:00:98:cf:
d7:6a:36:2a:51:e8:93:a4:09:eb:af:3d:3c:d3:62:72:ce:e9:
62:35:b1:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:52:19 2025 by rpki-client