Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/21cae0da-b7d2-376a-b30e-1ce5df63fd40.roa
File: 21cae0da-b7d2-376a-b30e-1ce5df63fd40.roa (raw, json)
Hash identifier: X1hZ/7a12aYewo7YPr0zKL9awk9B0t5GZLzkc9gXEZ0=
Subject key identifier: 40:52:E9:CF:9F:91:BB:BF:71:99:DC:77:2E:AE:5B:21:72:E1:A8:B7
Certificate issuer: /CN=2fd92816-1579-4d40-9111-f86331c3fd8f
Certificate serial: 010D0C9F43285847FF4A4BDEC9950592C57D3440
Authority key identifier: B7:AA:88:F5:F2:0A:B8:14:18:D2:77:D3:A3:51:A5:EF:FE:48:97:FE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/21cae0da-b7d2-376a-b30e-1ce5df63fd40.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 14977
IP address blocks: 137.87.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:4b:de:c9:95:05:92:c5:7d:34:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fd92816-1579-4d40-9111-f86331c3fd8f
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=ff69dba1-cb19-4235-96fd-0e1cbe932b26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ae:3d:19:e3:75:26:4c:98:37:97:4b:77:2a:
48:f2:4c:11:54:3d:5f:43:37:4d:06:3e:2f:21:db:
d8:47:ac:b5:0a:66:ff:1d:c2:29:c0:05:d3:0d:40:
f7:3f:34:3a:78:da:39:5a:32:0b:19:41:98:2f:03:
81:ee:85:87:ae:f0:78:86:c6:7b:07:0c:1f:cf:7a:
e2:91:51:da:40:23:39:53:7d:4a:0c:77:1f:68:48:
c7:fe:dc:6e:f4:97:1c:d6:b1:e4:d9:39:f9:a6:19:
65:cd:9f:5c:af:93:2a:0e:e5:8a:80:eb:2a:36:92:
b0:62:78:e2:29:52:55:b7:27:ca:40:fa:31:23:ec:
4a:06:83:41:96:80:69:c1:d2:96:a2:c9:e2:b0:88:
ea:e3:2c:4d:21:5e:ca:d2:ab:47:a4:11:17:e6:0a:
66:59:82:ba:9b:af:f6:57:9a:78:ea:3d:62:6a:45:
2a:1d:12:0f:06:5a:29:49:73:e1:71:32:5f:b6:38:
e4:ca:37:b0:f0:07:35:cc:87:46:68:4e:4b:1f:d6:
9b:2e:c9:83:80:a2:84:df:74:e5:4f:05:14:9c:f8:
3c:1d:9b:4f:70:45:a7:cc:b7:c3:90:6a:8b:3c:30:
9b:3b:08:ac:b7:c7:7c:f2:b3:9f:4b:77:54:5f:92:
f5:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:52:E9:CF:9F:91:BB:BF:71:99:DC:77:2E:AE:5B:21:72:E1:A8:B7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/21cae0da-b7d2-376a-b30e-1ce5df63fd40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/2fd92816-1579-4d40-9111-f86331c3fd8f.crl
X509v3 Authority Key Identifier:
keyid:B7:AA:88:F5:F2:0A:B8:14:18:D2:77:D3:A3:51:A5:EF:FE:48:97:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f.cer
sbgp-ipAddrBlock: critical
IPv4:
137.87.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9e:b9:d3:e9:7a:7d:b1:e7:31:c2:f3:bb:bf:ba:6f:71:42:2c:
c7:d3:43:98:27:3b:15:7c:2c:83:30:68:1c:92:bf:c3:a0:09:
77:20:f2:9d:5e:f9:46:b0:18:c2:90:0a:37:8e:c7:3a:eb:55:
4f:62:b4:d4:e7:6a:f0:06:21:c4:a5:19:62:25:9e:b2:a4:d6:
ea:e0:ec:82:5b:91:72:a4:6a:cb:68:f8:f9:06:52:b7:d3:f0:
30:4c:02:dc:d8:20:6e:10:8f:35:f1:07:70:e4:e1:2d:29:28:
57:2d:da:b7:b9:b5:76:76:51:da:c7:6e:a3:e2:f7:00:12:52:
d4:34:8c:a0:8b:e6:e6:b0:63:a8:72:c7:05:bf:45:cd:30:d7:
b2:6f:d6:77:c5:66:fc:51:9a:ab:4e:2f:9a:c8:51:69:80:ef:
ff:3a:9d:39:64:1f:70:11:ed:b1:8d:0b:94:ca:70:41:f2:06:
08:7e:8c:44:5d:7c:11:3a:7e:ad:c7:88:0e:13:df:a0:0e:01:
00:f4:b7:5a:3a:14:f1:42:37:36:ad:97:86:55:30:87:30:f2:
70:0b:ab:96:16:66:64:95:06:fe:35:33:62:f6:a2:8d:85:a3:
e4:24:53:6e:90:7f:7c:bd:8b:1e:ef:72:a6:b0:50:d6:39:7a:
c3:a9:37:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:53:35 2025 by rpki-client