Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/8e420350-e2b0-3816-8128-47e843fb8fae.roa
File: 8e420350-e2b0-3816-8128-47e843fb8fae.roa (raw, json)
Hash identifier: w9oZwR1Dq7lcUoJA3EJy5+uUf6Wm/UQCruCkZ7dZx6U=
Subject key identifier: D6:94:06:34:B4:F1:32:85:98:64:90:FE:97:2C:7E:64:CC:5A:6C:7A
Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Certificate serial: 010D0C9F432858485F9AE5C38A26FB12EA8F3C80
Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/8e420350-e2b0-3816-8128-47e843fb8fae.roa
Signing time: Mon 30 Dec 2024 02:00:39 +0000
ROA not before: Mon 30 Dec 2024 02:00:39 +0000
ROA not after: Sun 30 Mar 2025 01:00:39 +0000
asID: 33059
IP address blocks: 137.239.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5f:9a:e5:c3:8a:26:fb:12:ea:8f:3c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Validity
Not Before: Dec 30 02:00:39 2024 GMT
Not After : Mar 30 01:00:39 2025 GMT
Subject: CN=f7cde16d-3625-4df9-a57e-21675fa390e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4d:e2:d0:f3:49:fb:6c:d2:01:ce:d1:33:07:
af:52:ba:79:0a:a0:a2:3b:32:84:ce:77:d3:c6:0f:
a1:70:be:ad:f6:95:01:bc:ef:5c:8d:b9:58:2d:ec:
f7:26:ae:07:fb:60:8b:bc:d6:d9:ca:e3:40:32:7b:
11:d4:75:4f:36:62:99:02:06:bd:53:a2:89:1a:40:
f6:15:83:82:3b:55:37:2f:4d:80:c0:1c:59:74:b2:
66:4e:b1:41:3c:63:04:16:ab:9d:25:4b:97:a3:e1:
bc:08:65:12:9d:1c:6a:a3:1e:7a:54:61:46:00:3e:
2d:13:ca:ac:67:06:8d:87:7b:88:a5:95:b4:72:47:
50:49:bf:b0:e9:a5:9e:e5:2e:17:e3:63:b5:5f:09:
37:d9:78:4c:a6:fb:34:f0:81:f6:3d:af:58:ff:ce:
26:3c:8b:8f:d1:81:6c:d9:9f:38:a9:f2:bb:f4:68:
7a:63:14:b6:80:69:39:da:8b:91:9c:64:5a:1b:db:
46:da:65:9f:53:3e:0a:67:f9:bd:89:d9:e0:d5:5f:
59:a0:ba:9d:a1:d0:a5:e6:84:91:01:a8:25:4b:1f:
3d:c9:5f:c6:36:61:53:8f:9a:c8:35:92:64:8d:2d:
4d:1f:49:55:fc:d2:51:11:94:25:d8:ce:11:c2:f5:
8a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:94:06:34:B4:F1:32:85:98:64:90:FE:97:2C:7E:64:CC:5A:6C:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/8e420350-e2b0-3816-8128-47e843fb8fae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
X509v3 Authority Key Identifier:
keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
sbgp-ipAddrBlock: critical
IPv4:
137.239.198.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:6b:d3:11:fd:9a:43:1b:7b:a1:08:f1:b9:e8:d2:94:e7:6a:
8b:7b:23:e0:12:bb:4f:d7:fb:1f:a9:d3:8c:fe:58:73:a7:82:
d8:c9:4b:c1:91:fa:fb:2b:c6:ac:9a:66:82:1e:81:7c:31:85:
f9:b2:f4:8e:94:22:d5:f7:63:6b:03:76:52:9c:ce:41:21:3c:
5b:64:af:f1:38:28:d6:22:21:05:37:77:45:2f:e4:85:97:9b:
13:b1:1a:95:e1:ec:b7:de:e8:11:b4:73:a9:4f:28:72:e1:34:
24:b6:3f:65:4d:22:22:72:5d:e1:da:ba:e8:e2:23:7f:fb:36:
93:47:7a:f5:86:f1:49:44:a7:7a:34:17:aa:13:02:64:b0:29:
4e:b1:00:e1:5c:46:58:42:d8:75:a2:69:6f:da:cd:15:01:be:
c7:29:85:7a:07:cf:9d:28:c9:ae:5e:a7:f8:83:56:32:ea:8f:
7a:d1:9d:52:49:78:f3:c4:9d:d0:2f:3e:4b:bd:6c:72:2a:10:
90:04:53:f4:c9:33:5c:f8:49:2c:19:6e:5c:de:0e:fc:ed:5a:
7b:e9:fe:6a:9d:07:0c:34:de:96:55:24:ae:95:bb:c5:4b:3f:
5d:a4:35:d2:5d:f1:3e:bc:de:14:43:c1:26:b4:1d:a5:0a:31:
eb:23:54:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 19:12:16 2025 by rpki-client