Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/bb7fb158-cc7e-3f64-812a-6488d3fb6c13.roa
File: bb7fb158-cc7e-3f64-812a-6488d3fb6c13.roa (raw, json)
Hash identifier: MpnRcliQT8xMrjoBbUH06zkJ0OHvvztfQlQZa83MkXg=
Subject key identifier: D6:D5:17:55:69:CE:69:8A:D4:EB:B0:5B:CD:19:BD:1A:EB:F2:28:5B
Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
Certificate serial: 010D0C9F43285848573AD6492E255575A63A0080
Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/bb7fb158-cc7e-3f64-812a-6488d3fb6c13.roa
Signing time: Fri 27 Dec 2024 02:00:40 +0000
ROA not before: Fri 27 Dec 2024 02:00:40 +0000
ROA not after: Thu 27 Mar 2025 01:00:40 +0000
asID: 36511
IP address blocks: 137.83.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:57:3a:d6:49:2e:25:55:75:a6:3a:00:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
Validity
Not Before: Dec 27 02:00:40 2024 GMT
Not After : Mar 27 01:00:40 2025 GMT
Subject: CN=5fef58cd-e252-4529-a0e4-8648429d8fcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:bf:15:06:2d:7e:fb:91:18:53:34:23:e3:13:
19:7d:a2:d8:3f:13:bb:f9:f0:a9:c3:54:5b:f1:2b:
18:fc:bb:e6:b2:e1:d2:ee:c3:6e:40:45:9f:b1:aa:
ac:21:af:e3:76:60:fb:da:d4:35:80:cf:78:70:43:
3b:df:d3:be:62:a9:93:a9:74:c5:10:4c:b1:e0:68:
f7:4d:a5:b6:c6:e1:2b:16:70:5d:20:41:ec:e1:63:
f4:8f:ee:df:8e:84:76:48:05:a1:ca:1a:50:c8:d4:
bf:8e:0f:ff:65:1d:96:5d:e3:36:f7:a6:16:c6:6e:
d1:44:95:35:c7:55:be:92:82:8e:9e:e9:41:2d:96:
84:79:3a:5e:83:bd:99:50:51:86:42:25:22:6f:cf:
eb:be:d2:62:af:d0:c6:ae:c4:a1:6f:14:ae:6a:52:
b1:b3:fb:5c:1c:16:2f:41:c0:0d:58:e3:fd:f6:d9:
0e:ad:ec:c5:cf:b0:82:1f:31:74:7d:5f:93:ab:fe:
d9:cc:80:47:8f:7e:03:72:45:0c:db:cc:39:36:be:
c3:a5:47:b8:07:15:6e:30:ea:2a:43:89:53:85:35:
8a:9e:b1:10:e5:5b:26:6b:3b:47:c9:de:1b:4f:6d:
1f:72:a5:04:d7:25:a2:5c:11:ae:87:46:71:7d:f0:
f9:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:D5:17:55:69:CE:69:8A:D4:EB:B0:5B:CD:19:BD:1A:EB:F2:28:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/bb7fb158-cc7e-3f64-812a-6488d3fb6c13.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl
X509v3 Authority Key Identifier:
keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
sbgp-ipAddrBlock: critical
IPv4:
137.83.76.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:b0:72:29:60:38:70:e6:b3:bc:79:51:77:32:73:6d:6d:79:
f6:19:79:b4:d8:9f:b8:37:30:0a:2e:c2:d9:7e:7c:46:ee:56:
0f:53:4f:ac:30:24:ad:56:a1:88:f1:b1:fd:5d:34:d7:91:c5:
b2:0d:10:14:f4:88:1a:26:97:1e:4d:79:ea:66:c1:11:d4:fe:
45:a0:b5:40:f7:38:c4:da:cc:52:91:dd:9e:72:32:df:a3:66:
e4:d2:7e:64:db:e9:39:e2:d5:ce:89:a3:32:69:e5:95:af:c0:
0e:05:70:a7:71:cd:fa:eb:1e:7f:3d:e6:a4:d6:c8:d6:34:98:
b4:a8:1e:06:e0:6f:c4:61:3c:0e:70:4d:e0:fa:ae:af:bc:cf:
0f:d2:f0:1e:27:12:9b:fa:bc:83:8d:d4:ad:6d:bd:ec:2c:2b:
be:87:dc:68:22:05:5f:06:45:36:83:6e:74:85:5d:5b:2c:e3:
47:ab:1c:a9:9d:b4:eb:53:1b:f6:f0:f1:3e:b2:85:5c:be:c9:
be:56:d8:60:c7:0d:1c:d0:88:88:f8:5d:d3:b3:98:8f:99:fc:
d3:58:d7:d4:35:19:70:36:f7:58:bb:24:fa:32:18:87:03:7c:
f6:9f:1c:e9:ab:08:65:a4:42:9b:67:3e:15:d0:e8:19:2e:dc:
c3:bb:2e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:26:11 2025 by rpki-client