Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/30b3dfbf-986d-3282-be34-b6747cec19c5.roa
File: 30b3dfbf-986d-3282-be34-b6747cec19c5.roa (raw, json)
Hash identifier: 8j31x/8IGPDkBqtaEA3VrMoSoAz84Pm3bzMTf7PSOnw=
Subject key identifier: 3F:3D:55:6E:93:B1:C9:5D:EC:A1:A0:98:45:A2:22:26:5B:B8:FF:76
Certificate issuer: /CN=4c5f6fb8-1f68-4792-8def-a616a53280be
Certificate serial: 010D0C9F432858480EA506B8A26BC6CC9E6DBF20
Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/30b3dfbf-986d-3282-be34-b6747cec19c5.roa
Signing time: Sun 01 Dec 2024 02:00:39 +0000
ROA not before: Sun 01 Dec 2024 02:00:39 +0000
ROA not after: Sat 01 Mar 2025 02:00:39 +0000
asID: 18593
IP address blocks: 138.8.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0e:a5:06:b8:a2:6b:c6:cc:9e:6d:bf:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be
Validity
Not Before: Dec 1 02:00:39 2024 GMT
Not After : Mar 1 02:00:39 2025 GMT
Subject: CN=45897dcd-15ee-41f8-9d2a-358d5f0a4ca0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a4:02:ac:ba:56:ff:d6:cb:77:1a:a5:03:a2:
a6:e9:60:6f:a2:82:b5:11:b6:26:11:73:e7:18:8a:
33:ca:44:25:86:44:a0:0b:cc:7f:d8:ce:97:72:86:
b2:0e:f0:39:63:8c:02:31:51:af:90:b0:17:52:98:
44:03:9f:b9:67:be:7d:de:5c:6b:42:3a:0b:1a:64:
ca:9e:c9:af:06:3b:ed:0f:ae:5e:7b:aa:aa:3b:c0:
4f:bf:59:13:55:a5:a2:49:f7:34:f5:ff:46:92:07:
72:b7:6e:98:29:04:7a:0a:bc:a0:1b:21:11:3e:d6:
b9:2e:95:24:e7:6b:c2:07:ca:77:52:e9:f1:4a:a3:
d8:d8:8d:07:83:0a:4b:15:9a:03:35:c8:ea:88:71:
11:4b:5b:6b:8c:5e:bc:1a:d6:41:11:d4:29:41:18:
b7:7a:15:52:e6:35:d2:bb:10:7c:68:19:64:24:79:
24:87:04:6d:b4:8c:c9:9a:91:b5:d2:05:d8:89:24:
51:ac:39:49:34:e4:98:3e:c5:ba:e2:f3:d5:f2:6b:
40:12:96:f4:72:a4:31:20:7e:d9:a2:27:5c:b0:2a:
09:8c:4c:95:d7:09:31:0c:d4:f7:d6:8a:e4:93:80:
5d:34:e5:0c:a9:e6:f0:2f:4a:73:f4:0b:f7:9f:f9:
e9:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:3D:55:6E:93:B1:C9:5D:EC:A1:A0:98:45:A2:22:26:5B:B8:FF:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/30b3dfbf-986d-3282-be34-b6747cec19c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl
X509v3 Authority Key Identifier:
keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer
sbgp-ipAddrBlock: critical
IPv4:
138.8.107.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:81:75:e2:7f:72:29:71:88:b4:d8:05:18:f2:ba:48:04:c8:
db:1e:57:e7:7d:28:be:53:26:56:b3:1f:f5:86:b8:bb:c9:66:
5d:f9:62:3b:be:69:01:94:a7:1b:0d:30:e4:b0:a9:d7:84:89:
f1:33:d0:e9:f5:93:75:4b:2a:04:f1:1a:e3:c7:46:dc:a3:de:
52:f6:8e:ab:ba:91:fc:c0:c2:10:bd:34:bd:8b:0d:18:ee:8e:
4c:d3:a3:53:ab:ff:d4:5f:e9:30:f8:24:8d:da:1e:45:9c:2f:
a6:0f:87:49:4e:9f:67:c8:e3:94:34:4f:1d:cb:ce:13:d8:53:
39:fa:00:aa:70:b3:22:e5:92:74:2e:23:58:c2:fa:f0:dd:f6:
9e:15:61:0f:76:dc:75:b0:db:fb:3e:a7:5b:51:64:0f:03:2e:
14:bd:e0:6e:54:07:dc:21:8d:07:b5:1f:29:dc:40:e3:fe:bc:
33:70:a3:73:c9:6e:ae:a9:28:fd:e0:8d:14:58:79:bb:4a:af:
7e:24:6e:ce:ef:37:11:f6:1f:1c:8f:ee:50:6c:1c:65:f9:fb:
0f:d0:65:12:a7:e8:a2:2c:3e:59:d5:db:34:d1:2e:6e:e2:e7:
2d:24:92:18:26:e6:2f:d9:f9:8c:a9:41:12:44:a5:a0:d1:ea:
5c:4f:99:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:26:23 2025 by rpki-client