Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/d8086889-6f1b-352b-8d9e-4174cd5980da.roa
File: d8086889-6f1b-352b-8d9e-4174cd5980da.roa (raw, json)
Hash identifier: IRnGIa+BEwOjuDrszaqs2fTan5NraXD8yHd6y2Uqw4A=
Subject key identifier: 85:26:C0:82:68:DD:B1:51:2D:EC:2E:30:76:E6:B5:B8:8C:AE:E4:B7
Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Certificate serial: 010D0C9F432858485F9AE5616E68A37C02F77E00
Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/d8086889-6f1b-352b-8d9e-4174cd5980da.roa
Signing time: Mon 30 Dec 2024 02:00:39 +0000
ROA not before: Mon 30 Dec 2024 02:00:39 +0000
ROA not after: Sun 30 Mar 2025 01:00:39 +0000
asID: 25645
IP address blocks: 137.239.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5f:9a:e5:61:6e:68:a3:7c:02:f7:7e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Validity
Not Before: Dec 30 02:00:39 2024 GMT
Not After : Mar 30 01:00:39 2025 GMT
Subject: CN=854583bb-2195-4002-be6d-1f353c7a5f0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:65:35:17:9d:ab:69:10:f0:4d:67:5d:af:be:
e5:d5:75:27:e3:a9:ed:1e:23:e7:8a:dd:a3:22:c1:
2b:b8:57:35:66:8c:25:d7:c8:11:1a:06:da:48:f4:
8d:f3:58:12:8f:b0:18:50:3c:21:1f:73:e6:70:44:
e1:4a:78:cb:48:d5:06:95:00:d5:9f:25:fe:c5:c0:
a6:dc:d1:a8:08:9c:d4:34:99:32:0a:92:43:7f:bd:
47:7b:54:05:f3:a7:8f:99:a5:97:ec:5b:f0:a4:d3:
d0:45:9f:bd:1c:63:ee:a0:d6:7b:28:20:5e:83:38:
a3:03:d0:4a:b3:9d:5c:72:98:00:12:02:2b:d3:eb:
41:1f:48:91:13:bd:af:50:ac:dc:82:a8:f4:76:76:
cb:cd:a8:65:5d:a1:1a:59:1a:1f:6a:bb:6b:88:17:
ad:27:12:29:01:08:6a:29:3f:78:69:20:a5:89:b3:
0c:e3:3b:76:e3:a8:c8:68:bd:47:02:c0:fa:ba:11:
f9:72:14:09:38:58:8d:f9:f8:ce:c0:cc:89:e0:5b:
d5:8e:2c:c5:58:61:55:8e:94:a6:50:10:6c:df:83:
f5:c3:86:57:b6:6a:56:25:09:ce:ac:b3:27:ea:b1:
d4:18:0c:34:9e:fb:ff:9e:fc:ac:01:b9:db:42:43:
bf:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:26:C0:82:68:DD:B1:51:2D:EC:2E:30:76:E6:B5:B8:8C:AE:E4:B7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/d8086889-6f1b-352b-8d9e-4174cd5980da.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
X509v3 Authority Key Identifier:
keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
sbgp-ipAddrBlock: critical
IPv4:
137.239.200.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:06:87:0d:65:5e:11:88:9e:72:43:ef:ac:b9:10:63:4e:bc:
d1:df:48:19:42:89:77:5a:38:da:a5:5c:83:aa:77:ff:08:42:
93:fd:9d:2b:9b:41:16:97:0f:f8:3e:b4:d6:3d:75:76:f0:fb:
e7:83:38:c9:e0:c5:f2:b1:50:c6:f5:2d:82:23:12:65:dd:d6:
88:8e:b3:da:df:ae:89:1b:5f:a4:67:79:6a:a5:8e:61:4c:8c:
88:75:9c:ca:37:08:98:8e:96:f4:6e:f3:44:c8:da:7a:51:3a:
91:47:49:88:f3:cc:27:40:44:1d:48:66:41:d9:72:b9:24:fb:
1b:fc:bd:24:57:91:19:07:0e:61:d8:a2:c3:ac:93:48:88:28:
e4:b0:3d:a6:b4:7e:87:42:b4:3b:0b:ec:04:7e:8d:7d:53:81:
b0:ca:15:ff:9d:f6:33:c3:82:03:d0:18:08:2b:60:48:d7:1c:
2a:7a:cd:25:75:59:17:b2:66:69:25:e9:dd:9c:ef:a2:54:3c:
b1:e1:21:d4:31:d4:ab:32:6e:68:ad:83:06:37:d8:e2:10:0e:
6f:a9:ea:11:91:a2:11:4c:a3:5c:57:46:f0:bd:63:c7:59:8b:
ee:e7:8c:6a:09:0a:ba:2e:42:60:3c:f1:4a:df:50:83:03:6d:
8f:fd:0f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:35:11 2025 by rpki-client