Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/fd0599ac-d71b-3904-86c8-061b2e1b2f7b.roa
File: fd0599ac-d71b-3904-86c8-061b2e1b2f7b.roa (raw, json)
Hash identifier: Y890+fiM81hyGkwyn9ur141QXqFV/8ctgA16QEB98k4=
Subject key identifier: DA:5A:F0:73:AF:2A:87:8A:E6:42:52:62:D3:81:77:69:35:AD:37:0C
Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Certificate serial: 010D0C9F43285848302537C813A51E3C5CA36130
Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/fd0599ac-d71b-3904-86c8-061b2e1b2f7b.roa
Signing time: Fri 13 Dec 2024 02:00:39 +0000
ROA not before: Fri 13 Dec 2024 02:00:39 +0000
ROA not after: Thu 13 Mar 2025 01:00:39 +0000
asID: 398202
IP address blocks: 137.239.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:30:25:37:c8:13:a5:1e:3c:5c:a3:61:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Validity
Not Before: Dec 13 02:00:39 2024 GMT
Not After : Mar 13 01:00:39 2025 GMT
Subject: CN=b256e20c-25ff-4eee-8c55-c38fdc503f24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:43:ef:fe:98:5b:05:62:78:7b:2d:0a:86:0f:
60:35:3f:cd:c2:2a:27:74:17:26:3f:49:24:06:d8:
38:92:f3:b1:3e:47:77:54:96:67:a0:c5:93:ee:22:
00:95:93:b1:40:ef:e5:e3:82:dc:4a:fe:44:06:52:
79:ed:fe:d0:8b:a0:46:44:40:2f:4b:85:fb:06:85:
c1:27:f8:fa:ac:1d:6f:e1:21:52:d0:32:c4:64:34:
ef:33:b5:d1:60:80:ae:c1:71:b0:4f:56:ed:c5:08:
e7:11:93:dc:b9:15:88:36:13:ed:b3:3a:0d:51:68:
aa:c1:ed:ff:b0:b7:7c:d1:25:d0:be:85:e9:ef:d7:
3a:82:5b:a4:d7:38:9e:8b:e7:da:83:4b:da:42:f8:
8f:c6:ba:9d:74:9d:6f:83:27:11:bb:7a:f2:e8:62:
2e:71:52:e8:a7:8d:0a:d2:ba:6e:1a:e1:80:86:e2:
a3:ef:bd:79:4a:71:37:3f:97:a2:58:8d:81:43:47:
61:f6:59:27:59:f5:9f:2e:17:fe:b6:35:89:24:58:
0b:69:c6:30:c9:34:49:53:ab:73:00:05:a1:be:47:
7f:0a:46:ac:50:59:0d:22:d3:41:1b:96:b1:c9:c5:
e3:37:22:90:8a:00:84:da:29:8b:93:2b:5c:44:79:
ee:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:5A:F0:73:AF:2A:87:8A:E6:42:52:62:D3:81:77:69:35:AD:37:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/fd0599ac-d71b-3904-86c8-061b2e1b2f7b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
X509v3 Authority Key Identifier:
keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
sbgp-ipAddrBlock: critical
IPv4:
137.239.214.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:c4:50:69:f3:60:6b:b3:ef:5d:93:fd:77:d6:d7:22:1d:be:
81:d4:cb:17:68:8f:81:59:41:4e:c1:b0:a5:2e:9b:f4:e4:b2:
75:8b:56:09:40:4c:2d:e4:37:28:47:8d:6c:a2:22:12:1c:d6:
95:d2:d5:cf:c5:c8:99:89:2b:5e:7d:56:54:d6:1e:5c:99:78:
4c:bd:19:1b:d1:ab:66:2c:f6:58:7c:02:ba:5a:6b:5d:cc:98:
b3:a3:42:7e:9b:7a:39:f3:ab:5f:4a:c8:28:6b:48:c2:c8:67:
3d:2e:d2:a8:3b:81:b6:08:bb:19:8e:05:b0:1f:a9:bf:dd:a0:
71:5f:a6:bb:5a:7e:3c:a7:2f:e7:10:83:ed:6d:69:ad:52:0e:
54:db:93:40:dd:60:18:50:49:f0:25:23:79:ea:3e:c0:6a:b3:
ce:76:d7:4e:6c:78:a9:9d:f1:6d:7d:c5:d6:05:8a:92:ea:ca:
f0:8a:a7:b8:48:6e:ee:12:e4:8c:63:f8:b4:03:99:09:44:1b:
bc:8a:c8:85:50:38:55:67:27:4a:c0:43:00:83:05:98:19:af:
ee:2d:03:ae:af:9a:f8:1c:ed:06:0f:bb:a4:f3:5f:13:56:66:
90:b3:84:76:5c:43:29:07:8b:64:87:c5:fd:c9:95:c2:21:b9:
34:14:5f:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:36:01 2025 by rpki-client