Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/bae50a1c-fecd-326d-9f0b-53457c90dc28.roa
File: bae50a1c-fecd-326d-9f0b-53457c90dc28.roa (raw, json)
Hash identifier: GWgHIiE41vacLCWV2NZHES10//5/OX43EGZdczuzx+Y=
Subject key identifier: FD:DB:0F:31:2C:2B:60:F7:02:A7:27:C2:8D:28:40:ED:1A:83:8B:77
Certificate issuer: /CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
Certificate serial: 010D0C9F43285848100A78A5434966D74B2F4880
Authority key identifier: 42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/bae50a1c-fecd-326d-9f0b-53457c90dc28.roa
Signing time: Sun 01 Dec 2024 14:00:51 +0000
ROA not before: Sun 01 Dec 2024 14:00:51 +0000
ROA not after: Sat 01 Mar 2025 14:00:51 +0000
asID: 21891
IP address blocks: 137.118.128.0/24 maxlen: 24
137.118.236.0/22 maxlen: 24
137.118.240.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:10:0a:78:a5:43:49:66:d7:4b:2f:48:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
Validity
Not Before: Dec 1 14:00:51 2024 GMT
Not After : Mar 1 14:00:51 2025 GMT
Subject: CN=1b0700e9-e3c5-41d2-ac3b-b901caa9ea08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2f:1f:bf:f3:94:36:ae:a3:3a:2b:d4:8b:51:
14:ac:d0:64:e4:73:0f:48:e0:b9:12:e5:16:cd:a7:
43:fe:98:8a:55:a5:59:a6:aa:eb:12:85:ac:40:27:
59:76:27:d6:9c:38:a4:43:cb:34:58:65:8b:55:53:
6f:a0:06:98:57:e7:31:39:8f:00:7e:44:ea:b7:e7:
fb:7d:cf:25:85:72:1c:9b:91:3e:c8:43:e4:1b:25:
b6:ff:87:d1:0e:91:49:8b:b6:e1:99:d4:72:7f:e5:
5f:18:09:4c:77:23:12:a6:33:83:97:65:2f:db:97:
04:b8:8b:8b:1d:14:86:52:53:92:fb:a4:0f:54:6e:
11:59:17:36:d5:78:ac:1f:c0:53:30:52:ae:e3:cc:
c7:2f:de:4f:a8:95:45:25:31:90:ed:56:68:27:b7:
6b:80:57:e7:08:6d:9a:22:07:61:4c:7e:dc:a9:13:
18:d4:31:cc:ef:53:99:e6:10:70:14:41:6d:d3:02:
2f:ed:88:cc:a5:50:4d:e6:0a:26:bb:07:02:94:5a:
95:a7:8f:c8:52:dc:2d:17:e6:77:b1:a6:20:c8:dd:
8e:96:ea:e2:2f:4f:be:d0:4b:83:08:fa:c3:99:f8:
5c:57:19:8f:b9:f7:ab:3a:5d:6f:5a:ce:2c:5a:4f:
c5:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:DB:0F:31:2C:2B:60:F7:02:A7:27:C2:8D:28:40:ED:1A:83:8B:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/bae50a1c-fecd-326d-9f0b-53457c90dc28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl
X509v3 Authority Key Identifier:
keyid:42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
sbgp-ipAddrBlock: critical
IPv4:
137.118.128.0/24
137.118.236.0-137.118.247.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:f9:d7:2b:79:b8:83:27:41:1b:02:44:7c:fb:b3:a0:fd:08:
8e:c8:60:53:a8:2e:82:fa:97:86:a1:df:b7:5a:02:db:d6:4a:
4b:d9:2c:fa:f0:d3:d5:2e:75:64:d9:89:f5:1a:b7:d1:8d:73:
14:04:fc:f3:fe:a7:9f:0f:7f:cc:ae:85:cf:3e:e6:0c:80:fd:
73:0e:44:92:f7:78:bc:fd:06:d8:89:14:6a:94:48:b4:7f:60:
a4:08:e8:11:a6:28:82:02:c2:4f:dc:d9:d8:ab:36:24:e4:54:
01:9b:1d:92:bb:4a:e5:71:84:9f:36:09:c6:71:47:a2:6e:86:
72:a5:00:99:c6:da:42:9c:f7:3d:0b:58:4d:66:22:aa:19:96:
87:a7:3c:4c:4b:d5:55:38:88:9c:72:98:d3:57:59:29:3b:cb:
40:6b:fa:87:77:7e:06:24:34:68:cb:67:cb:91:18:f8:d0:fa:
25:a5:13:7c:79:61:b2:59:f0:9c:60:ad:c4:bd:2f:67:44:96:
a3:bd:c7:9f:e1:20:74:0d:c9:33:0a:70:82:fc:c4:ff:99:7f:
76:cb:39:04:d9:34:e6:66:f8:eb:14:1c:01:f0:d1:e4:bb:77:
0f:f3:50:09:20:d6:f4:54:f9:5b:c7:ab:dc:94:6b:07:4c:53:
b5:5c:a5:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:23:19 2025 by rpki-client