Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/4a1a3d11-26ae-3def-8147-6a22a351bfe7.roa
File: 4a1a3d11-26ae-3def-8147-6a22a351bfe7.roa (raw, json)
Hash identifier: nA+4x+PEr+eF7xw3eMOKmYZetP4Q2Q0Us4wqKZWKDkE=
Subject key identifier: 00:3C:DD:1C:16:FA:FC:3B:25:34:FB:76:D8:00:5B:74:FA:8D:9C:F8
Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Certificate serial: 010D0C9F432858483B4FFF92A309F9B213FE2040
Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/4a1a3d11-26ae-3def-8147-6a22a351bfe7.roa
Signing time: Tue 17 Dec 2024 02:00:38 +0000
ROA not before: Tue 17 Dec 2024 02:00:38 +0000
ROA not after: Mon 17 Mar 2025 01:00:38 +0000
asID: 25645
IP address blocks: 137.239.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3b:4f:ff:92:a3:09:f9:b2:13:fe:20:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Validity
Not Before: Dec 17 02:00:38 2024 GMT
Not After : Mar 17 01:00:38 2025 GMT
Subject: CN=7fdf9de6-f511-470f-b69b-4ec125f8028f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a8:bb:b2:b6:ec:9a:21:2c:e6:c5:42:9d:b9:
1e:3f:f9:69:8f:26:4e:e7:34:d5:2a:9c:24:a7:db:
d7:34:ac:7b:ee:b6:9a:a2:b3:6a:a2:11:d3:61:84:
1d:66:55:c3:8e:be:f6:73:74:54:96:6b:a5:cb:bc:
92:b6:f5:07:7b:10:34:86:5e:ec:c9:bb:3b:6f:82:
68:f9:c9:5c:e5:47:b3:ca:2b:cc:9e:4c:40:81:c9:
98:d2:84:53:7b:33:53:33:dc:41:30:e8:62:71:f3:
70:1f:08:79:38:30:5c:7e:23:e7:f9:6a:aa:db:e1:
a5:4f:dc:d9:10:a2:bd:11:8a:45:0d:2d:79:48:41:
cc:32:cc:79:93:b0:9c:ab:e2:c5:9d:bd:83:fc:64:
f0:27:2e:75:03:55:13:c0:2b:2a:56:41:ee:d7:b0:
05:0c:f3:f3:f8:82:91:00:42:dc:9e:48:70:84:4f:
09:db:d5:7e:e3:61:ea:5a:b2:f6:18:41:ae:b0:aa:
e1:f5:4a:14:86:d1:9d:8a:79:64:48:31:1d:c9:21:
bb:ec:23:02:fb:b8:ca:62:a8:9c:eb:fb:bd:a3:e4:
cc:6e:10:50:75:a8:2a:4f:a4:9b:91:88:12:2b:53:
8a:47:6c:dc:ab:10:88:89:15:7a:a0:2e:3f:3f:97:
4e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:3C:DD:1C:16:FA:FC:3B:25:34:FB:76:D8:00:5B:74:FA:8D:9C:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/4a1a3d11-26ae-3def-8147-6a22a351bfe7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
X509v3 Authority Key Identifier:
keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
sbgp-ipAddrBlock: critical
IPv4:
137.239.207.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:ea:66:c5:61:99:ec:9e:61:98:9e:79:e1:73:e6:79:03:f7:
c6:50:dd:0b:bd:c0:c0:c9:6a:96:88:48:1d:f0:ec:94:4e:0f:
f9:d5:2f:00:c4:f9:db:3f:5d:fe:ce:ae:d9:4a:25:c6:74:e7:
be:b3:16:9e:e2:c4:26:e6:cb:ad:b4:4e:9e:cc:5b:07:af:05:
35:cc:b3:1f:8f:17:cb:11:4c:bc:3b:e0:5c:09:59:cb:69:6b:
f3:60:c7:fe:51:25:0b:e9:cb:98:38:62:1a:5c:7b:6b:7e:ae:
f7:52:6d:f6:b0:51:e5:54:9a:dc:95:a3:c0:e6:28:3c:4f:f4:
df:12:2d:eb:f5:35:d4:44:69:23:89:fc:be:38:cf:65:67:1d:
af:09:2a:7a:32:35:a7:7e:6b:a4:69:c2:94:fb:e2:f6:c6:8f:
f4:30:6f:ae:9d:4d:6a:b4:64:38:69:64:8d:fc:4d:9a:a4:3f:
8d:fb:1c:b6:34:ba:32:52:3b:a9:57:0d:3c:71:7d:82:19:bb:
98:f4:99:75:37:72:6c:70:24:89:ad:57:93:f8:b5:e9:5a:a1:
62:59:ff:13:83:47:7f:d8:b3:5f:57:15:15:9f:13:aa:dc:9e:
ee:5e:80:05:e1:dc:b2:19:39:48:da:96:c7:94:a9:a8:c7:d5:
b8:a4:24:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:58:13 2025 by rpki-client