Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/51022801-32c2-341d-ac1c-1c40087ca9b6.roa
File: 51022801-32c2-341d-ac1c-1c40087ca9b6.roa (raw, json)
Hash identifier: R7s68+fzDdevuucPUqP2hzyA3lOaPP4hxJlX85WuAFI=
Subject key identifier: C0:24:2B:0F:F9:4B:AF:03:70:BA:FD:2C:0A:FE:17:8B:55:C1:3F:29
Certificate issuer: /CN=4c5f6fb8-1f68-4792-8def-a616a53280be
Certificate serial: 010D0C9F43285848230FEAE8C095A445C401DD00
Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/51022801-32c2-341d-ac1c-1c40087ca9b6.roa
Signing time: Sun 08 Dec 2024 09:32:15 +0000
ROA not before: Sun 08 Dec 2024 09:32:15 +0000
ROA not after: Sat 08 Mar 2025 09:32:15 +0000
asID: 33598
IP address blocks: 138.8.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:23:0f:ea:e8:c0:95:a4:45:c4:01:dd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be
Validity
Not Before: Dec 8 09:32:15 2024 GMT
Not After : Mar 8 09:32:15 2025 GMT
Subject: CN=09e585fc-05ee-48a1-9f95-e2db36bd3366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:0f:b6:b7:67:4f:74:47:7f:42:2d:4b:53:38:
4d:38:03:95:3b:61:b5:29:85:34:2f:ba:89:78:ec:
d3:6f:57:c5:34:f2:87:03:40:d0:77:d3:9a:bf:e5:
5a:d2:eb:d3:73:1c:2e:99:3e:24:1c:fb:bb:63:17:
bd:fe:36:ad:84:91:04:3f:5b:77:0b:f1:d5:62:0a:
93:4f:ac:0b:51:00:ca:05:fc:0b:0e:8e:38:37:af:
46:63:c9:65:f5:37:f2:cf:6e:c5:54:eb:68:4b:62:
42:64:a9:07:97:f5:ea:e2:2d:f5:b6:07:02:e5:e6:
c0:03:c2:59:0b:59:cd:8d:d9:3a:63:41:d9:35:f8:
65:10:f8:d7:bb:83:5a:be:5d:c8:d0:8f:66:c0:ad:
d1:b2:74:ed:bd:14:7b:92:39:4d:2e:d9:64:15:cc:
56:5c:fb:56:1e:c1:92:e8:40:e3:98:df:bf:28:f0:
75:18:cb:3a:d5:77:2f:06:e5:57:e5:f8:4b:75:48:
b0:b2:2b:b7:1f:c1:d2:85:43:a7:0d:2e:eb:11:57:
d8:2d:f0:f7:a4:39:e4:08:05:92:94:fe:f2:88:94:
47:fd:3c:0b:bf:1c:23:9f:fc:68:b8:96:90:31:23:
4f:66:de:71:9e:37:39:c1:ef:39:2a:eb:a6:1c:3c:
6d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:24:2B:0F:F9:4B:AF:03:70:BA:FD:2C:0A:FE:17:8B:55:C1:3F:29
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/51022801-32c2-341d-ac1c-1c40087ca9b6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl
X509v3 Authority Key Identifier:
keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer
sbgp-ipAddrBlock: critical
IPv4:
138.8.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:23:21:f4:3c:c9:d0:bc:88:74:af:b9:86:0b:44:76:ee:31:
41:1a:a3:28:20:2b:07:63:84:12:7f:2e:c6:36:98:85:d8:23:
7d:d0:5d:b7:ff:94:83:dc:fe:ed:ed:0d:31:61:27:a8:f5:a4:
d9:67:89:e9:1a:c6:68:01:54:f7:54:ed:c6:91:83:d9:3c:51:
2d:a6:77:5d:70:5f:05:30:32:e2:39:4b:d2:6e:96:9d:df:92:
1b:95:df:8e:06:c3:3b:81:3d:de:e7:16:73:80:e2:45:3d:c9:
0e:58:d1:08:0d:3c:65:8a:41:8b:e9:92:25:80:b9:5a:5e:79:
5e:62:a6:13:75:62:28:12:ff:97:3f:92:63:e0:56:af:94:41:
1a:d7:ec:96:79:98:d6:cd:aa:e8:65:05:9d:11:3d:04:64:d2:
05:51:09:10:7a:3f:88:f9:c6:bc:02:aa:3c:36:21:82:42:d6:
58:e0:91:f2:61:43:06:e8:4d:ff:87:69:2d:ab:bf:2c:03:40:
4f:f8:fb:3e:bc:da:47:29:5b:f3:89:6e:ff:20:3e:6e:f0:34:
31:dd:93:9f:b9:06:d8:c3:6f:e3:53:43:7e:02:b6:5f:b5:70:
7e:e9:02:5e:cd:47:6f:b6:cd:71:0b:af:ea:39:4f:36:84:39:
b0:da:4d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:47:57 2025 by rpki-client