Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/53a74fb3-8b3d-3ffa-9e6e-0fd7ddb1461c.roa
File: 53a74fb3-8b3d-3ffa-9e6e-0fd7ddb1461c.roa (raw, json)
Hash identifier: olUm46wE2JiKxAq1TRnKy32fArClJnjYeECbdXOf42I=
Subject key identifier: C4:04:4B:60:9F:F3:8C:A7:DD:0E:1F:3D:A5:ED:19:2F:4F:F2:8D:7D
Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Certificate serial: 010D0C9F43285848318AAB067651819961725500
Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/53a74fb3-8b3d-3ffa-9e6e-0fd7ddb1461c.roa
Signing time: Fri 13 Dec 2024 14:00:50 +0000
ROA not before: Fri 13 Dec 2024 14:00:50 +0000
ROA not after: Thu 13 Mar 2025 13:00:50 +0000
asID: 54994
IP address blocks: 138.113.15.0/24 maxlen: 24
138.113.74.0/24 maxlen: 24
138.113.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:31:8a:ab:06:76:51:81:99:61:72:55:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Validity
Not Before: Dec 13 14:00:50 2024 GMT
Not After : Mar 13 13:00:50 2025 GMT
Subject: CN=14db47ce-c22e-40c9-a9f2-27618793e565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6d:5f:d3:18:13:a8:ef:4f:36:34:fd:8d:3a:
c1:ff:22:90:9a:db:1d:77:b5:82:f9:de:b7:4e:23:
3c:a1:25:8b:73:ef:e2:c2:92:71:d0:c7:39:a4:d9:
12:50:99:94:15:eb:6c:22:5f:1c:cc:86:5c:f6:1c:
04:da:d3:9e:d1:b5:f4:93:ab:5b:f8:48:19:80:46:
03:b3:a4:9a:f2:0d:a5:88:af:e3:ef:41:6f:e5:c3:
ee:d6:30:02:59:d0:4f:42:97:c5:eb:c3:95:7c:f2:
58:61:ba:0b:cc:99:0e:e4:45:a8:eb:53:d9:55:9d:
96:8a:9d:57:77:ef:fd:2a:43:55:b5:2b:6c:e0:ec:
dd:5e:99:1a:2e:3f:1b:69:6d:72:e5:04:71:f0:a2:
a1:3e:4b:ca:ec:1b:67:e7:db:4b:ec:cb:23:f8:9b:
f4:84:7a:ae:d2:64:66:1f:13:80:0a:85:87:55:8f:
c1:0f:8a:63:b5:8f:5b:d4:ae:3e:5d:3b:17:ad:e6:
5c:d0:7b:ee:b6:4d:1c:1c:0e:9b:60:69:2f:49:1d:
3d:24:5c:53:61:56:f4:13:3d:b1:e7:0e:b3:93:41:
96:03:5c:1c:f0:4f:6c:04:29:22:68:8a:58:4d:01:
96:f9:26:f8:02:09:ee:68:47:2a:63:09:1e:3e:4b:
a6:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:04:4B:60:9F:F3:8C:A7:DD:0E:1F:3D:A5:ED:19:2F:4F:F2:8D:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/53a74fb3-8b3d-3ffa-9e6e-0fd7ddb1461c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl
X509v3 Authority Key Identifier:
keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
sbgp-ipAddrBlock: critical
IPv4:
138.113.15.0/24
138.113.74.0/24
138.113.86.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:3e:58:39:58:12:75:ea:a2:2b:46:94:78:7a:03:aa:0f:c4:
4e:86:36:f2:23:30:14:af:b3:7c:74:c1:f4:64:fd:1f:f0:b5:
31:98:71:d0:83:7b:8c:12:64:2c:56:ea:21:c0:8a:6c:77:74:
bc:6e:7b:31:73:d7:a0:48:ed:6c:d3:d3:b9:e1:86:d7:f4:ff:
be:40:59:9e:a0:b6:2a:3b:96:2e:1d:6c:98:19:fc:5f:51:3f:
1c:9a:0e:d0:6f:70:fc:a1:b0:2e:71:22:5e:15:2d:d8:3d:48:
0d:cf:1b:04:63:5a:7b:98:79:d8:d8:4d:10:6a:89:b0:66:c4:
0f:d3:51:b2:00:02:8b:a5:fc:d1:e3:b9:18:e5:3a:8f:21:fd:
a6:64:88:e7:f4:d5:b4:ba:09:16:94:b8:b4:30:51:83:22:3b:
95:08:6e:ce:f7:83:f2:88:a0:b0:74:25:79:90:a7:42:4f:12:
54:15:70:09:ed:a0:98:dd:85:62:0d:0b:c1:7c:95:7f:41:d7:
d3:c8:dc:27:68:cd:bd:20:9e:45:4e:c5:0c:c2:e8:8d:dc:c7:
70:da:5c:be:6e:f6:85:f6:ff:a6:24:01:86:7d:4b:3a:1c:fe:
c8:15:26:2b:97:76:8a:13:45:58:ec:1e:76:db:80:96:5b:d2:
fd:2a:f7:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:43:44 2025 by rpki-client