Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4147787a-80c2-3b8a-9ca5-49984c967201.roa
File: 4147787a-80c2-3b8a-9ca5-49984c967201.roa (raw, json)
Hash identifier: M6cSKP5PwEkXoqDS/KHdP+kVRwMogZmvt/db71VWzDc=
Subject key identifier: E3:57:78:8C:DF:1F:B9:95:96:B5:04:34:49:E2:5B:FB:8C:D7:AD:11
Certificate issuer: /CN=4c5f6fb8-1f68-4792-8def-a616a53280be
Certificate serial: 010D0C9F432858480EA507073E4832645C46A8C0
Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4147787a-80c2-3b8a-9ca5-49984c967201.roa
Signing time: Sun 01 Dec 2024 02:00:39 +0000
ROA not before: Sun 01 Dec 2024 02:00:39 +0000
ROA not after: Sat 01 Mar 2025 02:00:39 +0000
asID: 18593
IP address blocks: 138.8.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0e:a5:07:07:3e:48:32:64:5c:46:a8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be
Validity
Not Before: Dec 1 02:00:39 2024 GMT
Not After : Mar 1 02:00:39 2025 GMT
Subject: CN=565f193c-5284-4d6a-a74d-17dd5cef29f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:62:54:aa:d9:e5:87:21:e5:e7:3c:85:c9:ee:
d1:0e:ff:0b:1b:94:c7:47:a0:10:90:27:f4:ee:42:
82:d8:2f:e7:36:da:e5:36:df:97:d5:10:7c:01:98:
1b:24:69:e2:b7:60:76:5a:92:2a:0d:cf:e2:97:94:
6f:37:68:8b:a1:f6:6e:57:6f:fe:c1:96:93:6f:cf:
2f:fd:90:20:40:bb:29:63:63:ca:0f:7b:f2:ff:43:
31:f4:66:3d:94:94:2e:63:c8:63:80:73:4c:26:5e:
f7:23:8b:f5:4c:06:b9:fb:cb:73:7f:e0:63:62:5d:
d8:b4:33:8e:c4:25:21:9f:29:76:65:e4:18:7f:9d:
ea:9c:cc:14:d5:f8:1d:69:54:2c:d1:8f:bb:d2:25:
0d:ba:56:d3:29:a1:e6:57:bd:a3:3f:72:e6:11:49:
7d:fe:4f:27:82:2d:71:df:ea:0c:77:fc:aa:45:08:
a7:59:a5:4d:00:1b:8a:e7:38:d7:3e:ac:b1:68:77:
e9:2d:e8:38:1f:19:b1:d6:21:66:d1:46:19:1f:b2:
37:c2:44:af:58:82:64:8a:ba:3d:3f:ff:45:dc:77:
3b:45:70:3b:52:4c:c1:18:4f:89:fe:f1:09:b3:07:
dd:b0:83:ef:ca:d7:1f:e2:77:f1:7f:73:5a:4c:e5:
91:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:57:78:8C:DF:1F:B9:95:96:B5:04:34:49:E2:5B:FB:8C:D7:AD:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4147787a-80c2-3b8a-9ca5-49984c967201.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl
X509v3 Authority Key Identifier:
keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer
sbgp-ipAddrBlock: critical
IPv4:
138.8.123.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:bd:c8:a9:f9:24:c1:a3:34:86:81:1f:de:77:60:9e:9f:cc:
ff:d8:42:0c:07:6e:22:02:7b:1f:cf:77:18:e5:36:4a:6e:94:
92:b9:c0:b8:80:c1:1b:0a:2f:f8:f0:3b:ff:29:0d:36:30:9f:
61:3d:cf:8d:7f:9a:5c:16:fd:55:0f:87:f3:93:18:05:37:19:
16:eb:77:31:7c:fc:2c:f2:15:9b:bd:95:11:e8:f7:c8:10:7d:
37:70:8b:b6:d4:c8:0f:96:52:7b:f7:10:35:35:3a:83:c3:da:
c3:6a:b6:07:c9:f4:0f:a8:9a:68:31:ec:fa:21:8a:de:27:f1:
bd:b4:f5:8d:12:76:6a:4b:20:3d:dd:00:2f:8b:63:e2:2b:4e:
90:b9:7b:51:cc:92:8e:59:ea:bc:cb:e3:1a:19:1a:ab:f7:86:
c5:af:0f:b6:b3:fa:66:71:f5:19:d8:26:80:54:50:5f:10:b8:
12:53:62:b2:c8:fe:e2:98:4b:f5:20:1f:18:9a:78:bd:de:87:
32:f7:35:31:f3:d7:25:88:53:0b:7f:d6:8b:fe:ba:bc:e4:ef:
b0:77:96:3a:11:b5:97:96:4f:e4:bd:06:e7:d9:55:14:01:53:
82:67:69:e1:7f:cf:1f:b2:5e:53:16:94:aa:19:29:ce:58:de:
69:0e:f2:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:28:36 2025 by rpki-client