Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175/458a3099-c1e2-3fdf-b420-80c8fd5c5339.roa
File: 458a3099-c1e2-3fdf-b420-80c8fd5c5339.roa (raw, json)
Hash identifier: 3rGSWSzRjIQqmyt6hHiAqb2dgFz2IFoV6Xi7UtYBdhA=
Subject key identifier: E2:2A:6C:17:A3:A9:D6:F3:F4:C4:02:8C:83:0D:EF:48:14:CD:DF:E3
Certificate issuer: /CN=8ea106b1-df5e-4fb4-bd65-5167ff6dc175
Certificate serial: 010D0C9F43285848696066B79DAC4C00C4F30200
Authority key identifier: D5:18:DE:17:15:7D:9E:BA:F0:5E:D6:1B:20:AD:7D:CD:A3:98:45:0D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175/458a3099-c1e2-3fdf-b420-80c8fd5c5339.roa
Signing time: Thu 02 Jan 2025 14:00:52 +0000
ROA not before: Thu 02 Jan 2025 14:00:52 +0000
ROA not after: Wed 02 Apr 2025 13:00:52 +0000
asID: 23122
IP address blocks: 138.247.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:69:60:66:b7:9d:ac:4c:00:c4:f3:02:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ea106b1-df5e-4fb4-bd65-5167ff6dc175
Validity
Not Before: Jan 2 14:00:52 2025 GMT
Not After : Apr 2 13:00:52 2025 GMT
Subject: CN=81d0a0e1-0720-499d-99ac-abbdbfa3a6b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:aa:a5:47:e6:3b:d2:0a:19:55:67:ff:2e:be:
7f:66:40:ff:cb:bb:1b:4e:f2:c0:af:9c:21:a5:b7:
61:6d:39:4b:72:12:05:c8:44:3f:83:17:83:ba:19:
91:8a:e8:00:e1:80:53:58:9c:e5:5b:f2:f4:e7:25:
c1:ea:99:a7:09:c3:94:bf:ef:8d:f5:4e:f0:2d:21:
ac:55:9c:a6:61:72:fe:26:d9:89:8d:1b:b6:a9:9d:
34:67:c2:12:fd:ef:35:5d:48:a7:de:90:16:0f:65:
8b:af:31:8a:7b:fc:a6:9d:f9:22:85:d9:39:66:f7:
8f:f2:e7:14:a9:0b:d1:f6:07:f3:16:93:f9:bf:4a:
81:10:b5:af:c4:ae:0c:2c:6a:9f:f5:ae:f0:24:3c:
f7:88:0b:6a:ec:f3:51:17:af:23:e4:6c:2e:e4:53:
ae:27:7e:94:56:d5:1f:6e:f7:09:38:f1:9e:ce:5b:
ad:c2:fb:0c:05:20:40:cf:67:f6:d7:82:14:6a:3e:
8f:2e:04:6f:88:9d:77:32:e9:9d:6d:05:42:35:74:
26:f4:dc:93:35:13:7a:d5:22:e8:1d:d6:6c:4f:58:
6d:12:b1:63:b8:05:71:fe:c2:84:13:3d:9a:d5:7b:
20:a7:95:5c:60:f2:d9:32:59:53:43:c4:92:68:3f:
39:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:2A:6C:17:A3:A9:D6:F3:F4:C4:02:8C:83:0D:EF:48:14:CD:DF:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175/458a3099-c1e2-3fdf-b420-80c8fd5c5339.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175/8ea106b1-df5e-4fb4-bd65-5167ff6dc175.crl
X509v3 Authority Key Identifier:
keyid:D5:18:DE:17:15:7D:9E:BA:F0:5E:D6:1B:20:AD:7D:CD:A3:98:45:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175.cer
sbgp-ipAddrBlock: critical
IPv4:
138.247.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:a5:39:bb:3a:da:21:0f:bb:fd:c8:a4:fd:27:12:ee:c4:bf:
96:03:11:87:1c:d5:ff:dd:6d:16:44:8d:b5:b8:c8:ce:53:ba:
8c:e9:31:e6:81:6a:8e:dd:38:50:67:dc:09:0e:c7:dc:00:3d:
98:ee:8c:b7:25:ce:a5:01:24:67:20:c2:b6:a0:54:17:e0:6b:
0b:7e:19:9f:13:65:e6:52:8c:42:f9:bc:12:1f:4d:9d:44:c0:
f1:c6:35:47:4a:b9:71:d8:ff:35:2c:51:90:e8:c9:89:d3:1b:
ab:3d:c4:2d:1a:90:af:4d:61:81:13:b3:85:aa:b0:95:0d:f5:
0a:49:21:73:89:93:fa:1d:59:09:1a:24:bf:f5:4e:54:00:d3:
04:e4:18:f3:41:d1:db:da:f5:1f:3e:04:66:9a:4b:eb:ef:ae:
23:12:7c:28:7d:08:55:bf:df:0b:ee:a5:47:4e:b0:96:bc:e7:
98:24:1a:d7:b3:73:51:e8:f8:22:4d:5e:c5:32:95:98:6e:50:
72:44:97:86:79:c0:5a:be:8b:55:6b:82:12:b1:a8:c0:9e:12:
0f:7b:c5:3b:b0:eb:fd:6b:fc:6d:a2:b4:d9:38:76:08:4f:51:
3a:7c:bb:da:a0:1c:69:1f:4c:c4:76:29:50:10:84:c3:33:3a:
8f:83:5c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:45:41 2025 by rpki-client