Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/5d64ac03-d88c-3d80-be59-a094457e9fa5.roa
File: 5d64ac03-d88c-3d80-be59-a094457e9fa5.roa (raw, json)
Hash identifier: TI+2NpvAi1vfJFkBMGvsVNerS+eLM7suGiUzESCx28Q=
Subject key identifier: AB:0F:9B:34:B7:50:26:5E:BE:76:89:59:21:F0:33:31:01:38:E6:0F
Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Certificate serial: 010D0C9F4328584824FA7C45BA3621A1B3BA8D00
Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/5d64ac03-d88c-3d80-be59-a094457e9fa5.roa
Signing time: Mon 09 Dec 2024 02:00:40 +0000
ROA not before: Mon 09 Dec 2024 02:00:40 +0000
ROA not after: Sun 09 Mar 2025 02:00:40 +0000
asID: 54994
IP address blocks: 138.113.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:24:fa:7c:45:ba:36:21:a1:b3:ba:8d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Validity
Not Before: Dec 9 02:00:40 2024 GMT
Not After : Mar 9 02:00:40 2025 GMT
Subject: CN=287f2dba-075e-4ae8-a641-da54285363e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4b:b3:6e:f5:0f:d6:95:c7:e5:aa:7e:ae:9d:
29:73:b0:d3:fa:1f:b9:32:95:c0:4c:3c:2c:bc:6a:
74:9c:ef:ce:ca:55:16:b6:cb:be:90:ff:a1:9c:49:
c8:af:0d:2b:af:dc:96:8b:7f:13:0a:5b:16:e1:0d:
99:e4:6b:cb:46:c8:66:bf:7e:e2:aa:21:41:55:4c:
72:f4:5b:16:f6:1a:19:76:74:30:64:fe:1f:d6:86:
ed:a0:2e:3c:5d:a8:db:5a:f9:47:e0:dc:7f:89:d2:
8e:8e:23:42:30:17:bd:1e:af:af:d7:ce:77:21:f0:
7f:12:95:8f:81:ed:e6:d1:a3:cd:32:0d:89:14:3d:
de:f0:63:2b:8e:74:dc:36:e0:ab:88:8e:73:45:60:
0d:40:82:26:98:58:9f:b5:0e:08:5b:e0:08:a7:cc:
cf:03:bc:77:ec:a6:fa:f2:21:55:29:40:f2:2e:16:
74:a1:16:03:d8:1d:14:56:02:16:e8:d6:41:8e:33:
ed:e6:ba:d2:3d:a8:18:e1:f9:dc:65:a1:44:e9:e9:
73:b0:fe:c9:fb:9b:c2:ab:67:7a:56:74:71:03:7a:
a6:e2:46:80:cd:ac:c1:5e:c7:20:16:6d:2d:af:23:
db:df:2a:42:08:bd:77:4e:b5:ba:eb:2b:e1:85:61:
d9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:0F:9B:34:B7:50:26:5E:BE:76:89:59:21:F0:33:31:01:38:E6:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/5d64ac03-d88c-3d80-be59-a094457e9fa5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl
X509v3 Authority Key Identifier:
keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
sbgp-ipAddrBlock: critical
IPv4:
138.113.128.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:65:cd:61:70:17:56:e1:78:6b:3a:74:ad:98:d9:c9:a9:58:
ca:a2:e1:90:af:49:b4:d8:b9:85:38:4a:f9:16:80:4b:69:45:
23:3d:f0:c8:1b:30:0c:ab:c9:f1:9b:db:fa:17:5c:53:e8:b0:
d0:ae:7d:b0:57:05:a5:57:c6:c1:c9:f1:ae:c9:79:e3:4a:f5:
a1:8c:4f:65:15:d5:73:b0:6c:98:10:c6:a3:e8:ca:2a:6b:24:
36:b6:77:b6:e4:b0:1d:4e:d6:53:52:0f:d9:d3:20:ef:d9:f4:
59:a1:22:4c:9b:39:a2:87:40:ad:cf:ea:89:7b:d2:75:19:c1:
a6:0f:c6:d5:c1:48:8e:72:f5:5c:22:f5:b5:0b:28:1f:4d:8c:
ae:46:48:68:26:07:df:ee:1a:18:44:bf:3c:58:e2:65:e6:56:
68:91:64:26:e3:aa:cc:0d:5e:b1:b8:ed:ea:46:68:12:29:74:
9d:62:af:19:2c:87:b0:d6:f7:00:eb:ce:d8:80:b5:da:0b:bb:
99:36:5c:89:2b:17:91:92:62:29:82:b9:5e:99:ef:ac:93:ff:
9a:c3:f5:d9:81:cc:f5:42:15:fd:f9:d5:46:93:fc:8c:e8:61:
05:49:a2:f1:6e:ac:8f:44:40:81:96:df:6a:af:db:c1:2d:82:
97:c7:74:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:02:34 2025 by rpki-client