Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3c7d502a-cf13-4ee0-bdb1-d8fd0afc6ceb/1cd2ae84-266a-3017-bcaa-4c3494a17476.roa
File: 1cd2ae84-266a-3017-bcaa-4c3494a17476.roa (raw, json)
Hash identifier: TvjrlTEm4ugnnKI49bWkwRd9DEZRonxuh5MkMGhJgqw=
Subject key identifier: 2E:04:75:CA:F4:96:13:C0:9A:7E:45:97:AB:5E:70:03:35:66:45:02
Certificate issuer: /CN=3c7d502a-cf13-4ee0-bdb1-d8fd0afc6ceb
Certificate serial: 010D0C9F432858480EA504F51689E809722B8C00
Authority key identifier: 8D:C5:0D:DB:AC:9F:FD:0A:83:61:55:C8:DB:3B:59:5A:D7:3A:03:CE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3c7d502a-cf13-4ee0-bdb1-d8fd0afc6ceb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3c7d502a-cf13-4ee0-bdb1-d8fd0afc6ceb/1cd2ae84-266a-3017-bcaa-4c3494a17476.roa
Signing time: Sun 01 Dec 2024 02:00:39 +0000
ROA not before: Sun 01 Dec 2024 02:00:39 +0000
ROA not after: Sat 01 Mar 2025 02:00:39 +0000
asID: 46626
IP address blocks: 137.83.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0e:a5:04:f5:16:89:e8:09:72:2b:8c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c7d502a-cf13-4ee0-bdb1-d8fd0afc6ceb
Validity
Not Before: Dec 1 02:00:39 2024 GMT
Not After : Mar 1 02:00:39 2025 GMT
Subject: CN=7ca5e2c2-dfe7-4465-b785-7f3eb1c8e4dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c4:2b:9f:b8:a2:8c:e4:fd:c2:91:38:eb:88:
a1:42:31:50:25:4b:a5:fe:60:8f:bd:05:ab:f7:aa:
6b:e3:0f:17:55:59:3c:59:bd:e5:eb:3f:e6:44:18:
9f:de:58:da:4f:b4:6d:c8:4e:09:ce:d6:45:8b:e5:
ea:a2:4a:e7:5e:08:36:80:5a:03:2e:6c:78:ae:60:
0b:a8:1f:f8:4e:9b:2e:06:bc:2a:ac:2f:e2:9f:3d:
e0:43:f1:7d:54:62:11:62:ce:59:4a:0f:3d:96:8d:
2f:33:e8:19:24:f3:73:1f:39:6f:3f:d7:ad:0a:4b:
ec:44:65:ee:e3:20:94:6f:e5:08:21:7a:40:30:91:
c5:ff:6e:2e:24:d5:5f:c7:7c:25:a3:a5:fe:4b:b7:
2a:c7:e3:93:34:9b:43:ab:62:8f:9b:b5:15:f8:64:
89:aa:0f:a7:5d:f4:fd:46:f4:44:91:3e:af:3e:d0:
68:ad:79:d8:36:72:b2:2f:b9:bf:e9:a7:52:f2:de:
1d:9c:27:45:86:cf:81:bd:c0:58:27:4b:af:c8:8d:
ab:a0:8d:4b:83:f2:c3:23:23:fa:8f:9a:8e:e1:c5:
b7:7d:8c:71:65:26:3d:52:65:d6:fd:67:a2:59:9a:
8c:8a:a9:d0:73:9d:e5:c6:cf:d7:12:52:84:55:0d:
5e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:04:75:CA:F4:96:13:C0:9A:7E:45:97:AB:5E:70:03:35:66:45:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3c7d502a-cf13-4ee0-bdb1-d8fd0afc6ceb/1cd2ae84-266a-3017-bcaa-4c3494a17476.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3c7d502a-cf13-4ee0-bdb1-d8fd0afc6ceb/3c7d502a-cf13-4ee0-bdb1-d8fd0afc6ceb.crl
X509v3 Authority Key Identifier:
keyid:8D:C5:0D:DB:AC:9F:FD:0A:83:61:55:C8:DB:3B:59:5A:D7:3A:03:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3c7d502a-cf13-4ee0-bdb1-d8fd0afc6ceb.cer
sbgp-ipAddrBlock: critical
IPv4:
137.83.57.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:46:a2:26:7d:6f:c2:bf:f4:2c:d0:4c:7a:71:52:10:e8:5b:
06:8e:a0:2a:21:f9:fb:c8:39:c4:33:46:d0:2e:96:62:6c:06:
04:18:0a:a3:f3:f8:4f:d5:4b:d9:46:2f:2b:79:0d:35:07:27:
27:d2:2c:61:11:c8:b0:6c:b7:bd:29:14:42:ed:bb:09:a1:53:
24:02:b2:d8:fe:77:95:95:9c:a9:7e:66:c0:e2:c2:06:6e:6c:
8b:29:c0:11:3c:dd:53:3b:11:6d:b0:62:d3:b4:09:c1:17:2a:
f0:89:8b:2d:29:77:14:47:27:03:a0:11:72:f6:a3:7c:e6:9e:
16:46:f4:96:72:97:66:e6:50:06:d1:c1:13:e9:1e:55:54:55:
9d:c3:2a:42:64:6c:54:16:5d:fc:36:bb:02:44:3b:34:a3:0e:
e4:f3:cd:71:7b:cf:a9:3a:d6:eb:47:83:4f:dc:4f:0b:92:01:
49:49:31:3f:21:b9:41:75:18:de:79:97:85:b1:9f:5d:1d:b1:
48:47:7c:93:89:b1:e0:e0:9b:5b:30:58:0c:e4:87:55:5c:c7:
b3:31:91:ea:a9:e8:e3:5f:05:ca:9c:83:f8:8e:32:97:4a:14:
d6:df:09:61:61:61:38:92:9f:54:7f:b8:7f:74:6f:dd:4d:36:
8a:d2:5d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 09:37:10 2025 by rpki-client