Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/77f8794f-1215-36a6-9f30-940affdd6249.roa
File: 77f8794f-1215-36a6-9f30-940affdd6249.roa (raw, json)
Hash identifier: fkX1Tp4nCwAxiBNtqN5BvZePm9FxCqf3+lRZUuA3vPM=
Subject key identifier: D4:AF:D1:E8:D4:7D:AF:18:7F:EF:6F:F2:62:5F:5B:74:F1:D7:DE:C1
Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Certificate serial: 010D0C9F432858485F9AE551B6CF1E60D4C34B00
Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/77f8794f-1215-36a6-9f30-940affdd6249.roa
Signing time: Mon 30 Dec 2024 02:00:39 +0000
ROA not before: Mon 30 Dec 2024 02:00:39 +0000
ROA not after: Sun 30 Mar 2025 01:00:39 +0000
asID: 33698
IP address blocks: 137.239.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5f:9a:e5:51:b6:cf:1e:60:d4:c3:4b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Validity
Not Before: Dec 30 02:00:39 2024 GMT
Not After : Mar 30 01:00:39 2025 GMT
Subject: CN=7f03747b-460e-4ff2-81f7-4c41e0ebdce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a5:37:e7:be:9f:d0:cc:1c:2e:fe:3a:b3:8d:
54:ec:99:a1:5b:7b:fd:98:f7:d7:fa:d9:cf:de:44:
9f:68:ee:90:a6:3c:7b:e3:ee:bb:16:bd:c9:de:c0:
c7:01:ba:58:c9:01:53:59:2b:ce:a7:c8:ab:9d:7c:
d4:d7:ca:77:01:db:8c:bc:d8:b8:ea:7f:75:71:06:
7f:76:6a:5e:bc:94:cf:d6:b4:7c:51:11:44:64:c7:
34:14:e8:96:77:7b:6b:88:b9:a0:ba:ef:63:59:05:
21:e1:0e:78:3b:da:b2:b3:76:88:49:5b:11:cf:01:
54:83:ed:14:ba:3b:7b:37:38:84:3b:aa:86:de:09:
d4:3b:c7:3c:03:8d:4a:54:f3:79:3f:e7:bc:9d:36:
23:0a:24:16:89:8b:24:c5:85:ff:68:06:02:f0:e2:
70:bb:ed:69:58:85:49:22:c4:88:19:76:07:45:fc:
ee:f6:ed:7d:05:d1:41:ae:7d:1e:6a:c5:83:5b:f6:
ac:f8:e6:3d:b5:dc:f5:f6:4e:81:90:fc:f5:52:41:
d9:1f:5b:86:65:45:01:b3:ba:10:2d:92:0c:01:7a:
e3:9f:21:6d:7a:68:16:43:a1:d9:0a:35:18:ce:82:
17:22:c5:58:b2:93:6f:26:30:1c:01:32:44:46:78:
72:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:AF:D1:E8:D4:7D:AF:18:7F:EF:6F:F2:62:5F:5B:74:F1:D7:DE:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/77f8794f-1215-36a6-9f30-940affdd6249.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
X509v3 Authority Key Identifier:
keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
sbgp-ipAddrBlock: critical
IPv4:
137.239.200.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:59:6c:6a:0b:91:3c:a3:e2:0a:aa:45:45:a6:10:a3:18:a5:
7a:63:b1:b7:21:ea:3a:00:0e:91:ea:65:45:96:2b:45:da:6d:
36:94:2f:af:e9:8b:ff:95:d0:bc:02:d9:38:92:4e:c3:d7:1f:
df:50:7b:dc:f4:1c:a6:7c:85:8f:5d:89:80:c8:b1:39:15:a9:
fb:74:7e:64:c9:ca:1f:13:67:0c:e1:03:25:c2:85:68:e1:1f:
6c:0d:42:13:c4:37:df:55:0f:cf:53:ce:90:4f:d7:d7:c1:13:
db:18:1b:97:60:4a:e1:cd:25:82:3b:42:06:e0:15:2f:39:25:
d4:00:40:9e:ea:0a:bd:d2:fa:9b:f1:79:23:e3:9a:31:9a:62:
ab:01:25:1e:28:8c:09:38:57:4c:43:af:11:a6:e4:a2:18:d2:
8c:a1:b8:6d:d5:f1:16:71:a3:60:b8:d5:4a:f2:dc:8f:3a:5f:
be:c2:67:03:6b:ac:6b:d6:7a:4a:54:b4:08:ac:41:62:24:66:
47:44:35:a4:00:f7:91:2a:0b:00:05:55:9a:47:ce:ec:fb:ed:
41:6f:29:13:b7:2f:2c:a6:69:3c:43:d8:02:f6:b6:84:f4:bf:
23:d6:e1:eb:b6:38:a3:92:e2:59:85:a6:21:1c:46:89:ff:8f:
41:7f:00:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 16:50:12 2025 by rpki-client