Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/45e1e738-fa16-3f13-8cfb-e10efb728f73.roa
File: 45e1e738-fa16-3f13-8cfb-e10efb728f73.roa (raw, json)
Hash identifier: CVIqzZCXbDmxvBT4/nAXBm7rLTEYoDJtgzkurTfAh/g=
Subject key identifier: 35:69:B1:E6:F1:36:D1:85:AF:F5:EE:21:38:4B:81:BB:B1:F0:79:9D
Certificate issuer: /CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
Certificate serial: 010D0C9F432858483B5009D1E6631C8D5D4A6D00
Authority key identifier: 42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/45e1e738-fa16-3f13-8cfb-e10efb728f73.roa
Signing time: Tue 17 Dec 2024 02:00:38 +0000
ROA not before: Tue 17 Dec 2024 02:00:38 +0000
ROA not after: Mon 17 Mar 2025 01:00:38 +0000
asID: 40317
IP address blocks: 137.118.130.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3b:50:09:d1:e6:63:1c:8d:5d:4a:6d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
Validity
Not Before: Dec 17 02:00:38 2024 GMT
Not After : Mar 17 01:00:38 2025 GMT
Subject: CN=267de930-8094-4e7d-af26-1038addeff61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4c:4c:6c:a8:c2:0a:41:56:f4:ee:28:59:40:
98:b4:0e:be:b5:c7:22:29:9d:3b:f8:22:d5:03:32:
02:85:d2:ed:e8:4a:91:a3:57:50:6c:6f:01:76:b7:
c9:af:e9:e0:b4:07:db:14:73:42:98:ba:ab:6b:d8:
04:55:c0:c2:83:de:63:26:42:1e:7a:73:4c:28:d7:
af:da:a9:9d:b5:ca:79:1b:6d:65:02:0f:dd:a1:52:
e7:08:cf:2c:5c:2d:cc:e4:d0:35:e3:72:d9:85:1b:
31:9b:11:dc:3b:11:47:dd:0b:19:4a:82:70:e6:25:
44:0c:53:d1:ab:88:56:91:96:6b:04:5e:ba:16:e9:
67:8b:46:a9:7a:8a:73:06:63:f4:95:6d:18:17:a2:
9d:c6:b7:81:8d:f2:5c:7d:78:04:41:08:de:93:8c:
64:19:83:b0:09:43:d6:f8:ce:47:e3:91:64:a9:3d:
31:50:28:23:06:f8:ee:e5:aa:ac:6d:ac:93:37:fa:
d3:17:87:65:9d:3b:63:f2:34:b8:7d:ca:32:e8:91:
9a:73:4e:30:fc:c2:ee:2f:47:d8:09:5f:6b:89:85:
3f:34:1f:19:fc:74:1a:e6:0a:f6:70:16:b3:a9:f2:
92:e1:3a:b2:1a:33:a5:5a:36:c9:4b:d1:ad:4d:f6:
b9:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:69:B1:E6:F1:36:D1:85:AF:F5:EE:21:38:4B:81:BB:B1:F0:79:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/45e1e738-fa16-3f13-8cfb-e10efb728f73.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl
X509v3 Authority Key Identifier:
keyid:42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
sbgp-ipAddrBlock: critical
IPv4:
137.118.130.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:dc:a5:20:18:d6:e7:23:b3:43:fa:38:e4:df:e0:12:7c:0a:
8c:4d:60:da:7e:cf:70:eb:2a:d9:75:2b:c0:ee:3b:ea:95:e0:
13:24:ae:07:1e:7c:d9:0d:2d:8a:de:ba:22:a9:38:e0:c3:7a:
fb:82:6d:93:5a:fa:d2:96:2a:6c:ad:77:6b:3f:d7:85:ad:19:
3c:c5:be:ad:42:48:e2:b3:e4:d6:00:78:e3:5c:85:47:55:cf:
09:b1:6b:93:9f:26:3d:71:ba:a7:68:aa:48:af:ba:5c:3d:45:
5c:35:78:8f:fa:c8:71:48:0a:60:c5:e7:72:28:77:ec:cf:b6:
8a:6c:44:65:13:1b:64:4c:27:b0:bf:c3:e9:c7:f0:b9:be:f3:
eb:bd:a8:3e:3c:91:d6:9a:64:dc:7b:12:f3:b8:f6:b4:d3:85:
bf:ed:00:e7:81:37:49:6b:48:ee:05:5a:20:f9:37:7d:45:b4:
b5:69:2a:e9:c6:84:0b:dd:95:b4:e3:d1:3e:83:6c:db:1c:c7:
31:20:e8:bc:61:ac:18:82:c8:35:41:fd:21:1f:a1:26:83:cd:
7d:a0:5d:07:e8:0a:91:d8:5e:1e:6c:20:0f:42:07:34:1c:3c:
77:8f:ad:83:b2:d3:b8:41:7f:1c:69:e3:a6:45:17:00:47:09:
9b:63:8d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:02:14 2025 by rpki-client