Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/6acea789-1a07-36ae-952f-17d3be706048.roa
File: 6acea789-1a07-36ae-952f-17d3be706048.roa (raw, json)
Hash identifier: PtiQUKbvCapX7ay/r87m1+M35eFeYmuUA8Wotwhvhuo=
Subject key identifier: 93:4F:5D:D1:AB:CF:D1:DD:71:2B:CC:D8:37:90:4B:59:A8:3E:77:FA
Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial: 010D0C9F4328584819CFD0322D361AC97EF707C0
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/6acea789-1a07-36ae-952f-17d3be706048.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 64267
IP address blocks: 138.229.96.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:cf:d0:32:2d:36:1a:c9:7e:f7:07:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=7e90008c-1cd0-4bdf-b120-1a6b95688810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:63:f7:8a:78:95:f9:8e:51:34:fa:65:84:ed:
bc:7e:22:2d:4a:ca:bc:73:a8:92:ea:d4:d4:0c:3c:
e9:43:fb:cb:ca:80:7a:85:62:e2:4f:67:d7:ae:1d:
77:80:14:9b:4c:b2:88:43:76:59:57:3a:cd:ec:b5:
49:b1:fe:0d:20:32:6a:0e:4a:e3:4f:41:a3:2c:44:
45:d6:0f:92:b8:94:72:60:ca:df:3d:7d:bd:78:2b:
90:e3:32:2d:97:72:ba:e5:7f:c4:8b:5f:d5:9d:13:
40:ad:6c:14:89:e9:12:29:9e:fd:5d:3e:f2:f8:f1:
7c:bf:cb:d2:61:14:4b:ee:9d:88:28:5a:7f:68:24:
40:d7:75:5f:11:e5:2c:99:4a:8f:f0:c4:6c:d1:90:
40:0d:fe:96:d7:61:03:57:f7:f2:6b:d6:a1:e7:47:
fc:06:be:16:13:a7:44:ed:aa:32:57:60:40:db:f6:
c7:6c:42:92:41:49:0e:5b:56:e2:fd:7b:4a:2f:bf:
15:f2:c0:11:08:f6:08:23:14:3c:ba:84:ee:59:6b:
4b:f9:33:56:db:b8:7f:72:4f:cb:92:84:17:f5:ce:
83:a6:e7:b8:84:36:a9:e6:0c:f0:a0:f3:e4:93:0e:
41:9d:6c:43:02:bb:57:d8:93:5f:59:3d:bb:f4:65:
e2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:4F:5D:D1:AB:CF:D1:DD:71:2B:CC:D8:37:90:4B:59:A8:3E:77:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/6acea789-1a07-36ae-952f-17d3be706048.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
X509v3 Authority Key Identifier:
keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
sbgp-ipAddrBlock: critical
IPv4:
138.229.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
df:b7:88:64:2c:2d:5c:3c:3e:a8:e8:63:3f:57:cc:a8:78:b2:
1f:bf:52:a8:d9:c9:0b:b0:38:15:6e:b9:f2:80:d2:6c:b7:0f:
6b:97:59:6a:fb:76:7a:50:0c:79:bc:49:eb:5b:ba:86:cc:d2:
bd:c8:67:60:14:6a:fc:c0:3a:c1:29:43:11:5e:9e:c3:b7:30:
6c:c0:5a:f9:6d:1b:5a:3b:91:2f:1d:f0:6c:99:9c:6b:df:66:
58:42:27:f5:c6:10:a8:1d:14:c4:01:44:a8:ad:d8:3d:1e:60:
64:ea:98:fb:c9:fb:ab:dc:17:fa:25:0d:3b:9c:0a:98:13:53:
88:96:b5:3f:de:bb:b9:55:1e:47:3a:da:66:5f:86:3a:b4:e8:
6d:64:9e:57:a4:37:9d:2a:cb:8b:f8:d8:97:53:a4:71:76:71:
a2:c5:73:16:d5:4d:92:d6:4d:e8:8c:09:d6:f7:e1:00:fe:7f:
ad:de:8f:47:5e:0d:8a:40:ec:33:bb:4f:f0:fd:af:06:96:ed:
fa:21:25:09:82:24:35:c0:bd:fc:71:c0:a0:87:cc:cc:e8:de:
f4:d0:05:4d:e9:6f:a2:12:1e:52:f9:40:ba:11:e6:7f:7a:37:
1f:f3:3d:ee:93:ed:f0:32:69:9c:ed:af:7b:b5:88:36:a8:d7:
92:9a:aa:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:07:03 2025 by rpki-client