Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/674b559a-b866-3bcd-84f6-457b70f279d7.roa
File: 674b559a-b866-3bcd-84f6-457b70f279d7.roa (raw, json)
Hash identifier: gZ0ZArFaaUhLpg17dwGL3/LtpWuS4oc8nmUiv8rg9bc=
Subject key identifier: E4:FC:9E:8A:42:89:B3:78:3B:B9:64:6C:F3:CE:95:F6:DA:26:37:F8
Certificate issuer: /CN=4c5f6fb8-1f68-4792-8def-a616a53280be
Certificate serial: 010D0C9F43285848231051362D919E2075447680
Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/674b559a-b866-3bcd-84f6-457b70f279d7.roa
Signing time: Sun 08 Dec 2024 09:33:03 +0000
ROA not before: Sun 08 Dec 2024 09:33:03 +0000
ROA not after: Sat 08 Mar 2025 09:33:03 +0000
asID: 33598
IP address blocks: 138.8.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:23:10:51:36:2d:91:9e:20:75:44:76:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be
Validity
Not Before: Dec 8 09:33:03 2024 GMT
Not After : Mar 8 09:33:03 2025 GMT
Subject: CN=1ee1c27f-c89f-48ef-9899-3bf8be7dca12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:df:10:6e:6a:fb:e5:da:19:d7:4c:70:00:f2:
cf:7e:17:0c:62:1f:33:7d:44:18:86:55:7e:61:06:
2c:6e:fa:14:51:23:0a:2f:d6:1e:bd:42:c7:dc:a4:
5a:b0:7a:43:05:f2:9b:9f:44:73:1e:8e:91:c0:6d:
ee:cd:be:63:07:e6:03:ba:13:8a:c7:a0:a3:92:6a:
90:47:50:ee:ae:e6:ac:73:39:40:73:1c:86:9f:2e:
93:36:7b:6b:ac:96:12:77:fb:06:8e:05:5f:b1:22:
31:94:b2:ce:1d:b0:18:16:c6:c2:46:52:f3:a9:21:
6e:cb:85:5c:78:fc:f1:e2:2d:30:67:75:77:bc:de:
2c:d4:b2:8b:b7:43:78:9b:c5:2f:70:d1:ef:f5:8b:
e9:b8:73:f6:a3:c5:29:7f:ce:79:d0:0b:e3:75:12:
e0:51:ae:3a:d5:30:0d:1d:2b:4f:c0:16:4b:48:dd:
e8:12:e9:3b:34:b9:eb:cb:90:3a:fe:53:c8:74:e2:
b5:fe:dd:b7:5c:70:52:d1:37:0d:18:22:37:66:f8:
03:b3:bb:f0:dc:15:0d:2e:46:42:bc:0b:e2:9a:fc:
b9:3f:d8:cf:5b:71:fa:32:e5:18:a2:26:90:e1:8a:
7b:9d:52:4b:34:ad:67:cc:f9:aa:32:e1:c7:a5:1e:
b2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:FC:9E:8A:42:89:B3:78:3B:B9:64:6C:F3:CE:95:F6:DA:26:37:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/674b559a-b866-3bcd-84f6-457b70f279d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl
X509v3 Authority Key Identifier:
keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer
sbgp-ipAddrBlock: critical
IPv4:
138.8.120.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:b9:0a:22:ac:e5:ad:65:c5:81:e1:3a:97:66:89:c0:ad:ac:
2f:11:dc:5d:d2:c8:83:f8:4c:30:ea:e3:9a:dc:3c:3c:a5:43:
72:01:ba:f4:b8:cc:b2:57:31:f5:fa:6c:b5:e8:bd:20:64:55:
00:0b:7c:b2:4e:02:89:90:03:ef:90:dc:ad:65:9f:0d:f1:6b:
fb:2c:fd:24:46:1a:45:47:cc:d2:10:02:25:ed:38:17:4d:61:
07:67:8d:89:92:02:83:a7:b1:5a:3c:1c:3c:c9:f3:ec:f2:e9:
59:72:50:e6:36:fc:f4:be:01:fa:49:37:3d:08:1c:e7:35:a6:
48:88:72:8f:f0:c3:7b:67:a2:38:55:e2:06:cb:53:ea:0d:58:
f7:e7:8c:7e:7f:10:7a:06:e2:7b:2d:3c:51:ae:d3:64:9d:ab:
9f:aa:07:c3:cd:0a:20:b8:d6:bf:fe:be:74:88:78:23:02:cf:
d8:ad:97:8f:66:c1:80:fb:11:30:91:ef:1c:5b:60:18:d8:f7:
07:ea:1c:19:43:68:73:8e:91:0d:4b:ee:f6:a1:94:14:98:73:
a5:10:0d:79:c9:ae:8a:60:d6:a6:58:b4:fd:7a:1b:bc:09:66:
fc:60:1c:25:df:a4:52:8f:37:54:81:ab:0e:aa:6d:56:be:5a:
f9:7f:c5:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:26:14 2025 by rpki-client