Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/1c6e5da0-1cd0-34a4-b335-4ca699606908.roa
File: 1c6e5da0-1cd0-34a4-b335-4ca699606908.roa (raw, json)
Hash identifier: m6DwwSDS84B56SD77htRRoR/PDjT+S4isXBjbRWz1V0=
Subject key identifier: A9:E6:19:DB:63:31:2E:7D:62:61:FB:CC:F5:7C:8F:FC:C6:94:48:EF
Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Certificate serial: 010D0C9F432858484C102EF132CAC545B3DAF9A0
Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/1c6e5da0-1cd0-34a4-b335-4ca699606908.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33059
IP address blocks: 137.239.201.0/24 maxlen: 24
137.239.202.0/24 maxlen: 24
137.239.203.0/24 maxlen: 24
137.239.204.0/24 maxlen: 24
137.239.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:2e:f1:32:ca:c5:45:b3:da:f9:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=a217dc30-2685-4311-99e7-6f4f6cd53c87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0f:49:25:72:53:8d:61:4a:60:5b:36:51:6c:
b9:db:46:78:51:5b:41:9f:ce:de:8d:5e:eb:b1:9b:
cd:f4:ec:fd:95:4c:62:2b:74:72:4b:24:91:2b:d4:
aa:d5:1e:45:9f:d2:84:f9:98:55:ac:b3:58:16:82:
8f:aa:f0:f5:5a:36:5c:0a:dc:61:3d:bd:85:a3:c4:
8f:49:4f:4b:75:06:ac:91:a6:dc:a0:67:5f:78:79:
91:e9:4b:a2:d9:c2:e3:39:8d:7c:58:2d:a3:c4:e4:
0e:eb:5f:cf:d8:fe:f5:bb:5e:b9:5f:49:47:ac:55:
13:00:ce:57:59:7a:4f:6f:3c:3b:23:4d:7a:7b:61:
ff:14:b1:49:1b:0b:dd:51:3e:46:e2:aa:ad:d1:27:
1a:94:f5:e0:2d:44:91:c1:57:74:fd:13:4d:a5:2b:
e2:bf:ec:ac:08:82:c6:17:16:06:70:7d:14:a7:55:
d1:8b:5c:72:df:88:a8:a4:74:b9:28:82:0d:c5:ba:
e1:05:e4:c1:71:da:c8:91:3e:9b:29:22:db:81:a7:
ae:c5:7b:57:7b:8e:b4:e9:a8:a7:6e:69:03:60:a4:
1a:29:64:fa:d9:5b:20:80:ef:bd:04:e7:bc:b1:22:
3a:d9:68:93:29:3b:6f:81:03:65:81:a1:62:8b:0d:
9b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:E6:19:DB:63:31:2E:7D:62:61:FB:CC:F5:7C:8F:FC:C6:94:48:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/1c6e5da0-1cd0-34a4-b335-4ca699606908.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
X509v3 Authority Key Identifier:
keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
sbgp-ipAddrBlock: critical
IPv4:
137.239.201.0-137.239.205.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:16:9b:9b:6e:bf:49:4e:f7:d5:67:7b:2b:d8:4d:ee:47:f4:
a7:a1:b7:48:91:33:cb:15:d6:88:58:61:7b:c1:64:e7:e5:a2:
0d:4b:09:2f:d8:99:3a:ee:dc:30:4b:9e:5c:d4:9c:25:36:c7:
c3:61:16:14:52:53:ad:33:6f:c9:80:ac:5b:1f:5d:b7:70:f1:
a0:6c:6f:81:13:ea:8b:df:11:2f:00:ae:b7:8e:f9:29:4f:96:
2f:c1:55:56:57:ca:86:82:68:fc:00:92:24:9b:5b:77:a6:8b:
b8:ae:3b:66:ee:14:f8:cd:71:a3:5f:ca:e4:e0:82:b7:a3:8b:
b0:2e:2b:d2:6e:6f:a0:f0:70:fe:ed:00:79:a8:ac:78:56:4a:
17:8a:ed:b8:3c:24:63:a3:90:b7:c9:8a:6e:79:ab:94:5b:a4:
9c:0a:12:3e:9d:e2:6d:be:2b:89:a9:fa:9b:71:32:3f:bb:3f:
17:e8:1c:dd:2e:5c:b0:56:e2:ed:e0:84:45:a5:d5:9c:70:38:
e6:bb:4d:cb:f7:8f:f7:6b:9e:8a:ab:0f:8c:6b:d8:87:a6:d0:
ba:02:4d:fb:5d:3c:78:ef:f1:bb:66:8b:9e:7e:9a:7c:b9:d5:
c4:82:3b:af:3c:38:30:2f:96:ac:b2:35:97:d9:b1:cd:ad:2c:
f2:be:a2:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:38:31 2025 by rpki-client