Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/919695ea-4fb8-3d6b-a522-e72feddea0c8.roa
File: 919695ea-4fb8-3d6b-a522-e72feddea0c8.roa (raw, json)
Hash identifier: Na2ooKx6zQIKkA4Bp9fOZZm5YMAp9DoOto1ryyEe7MU=
Subject key identifier: DB:CB:CF:73:11:F1:D0:4D:66:7E:1E:CC:19:85:04:55:24:B3:A3:DA
Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Certificate serial: 010D0C9F432858484945601AABB60ED71BC1C760
Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/919695ea-4fb8-3d6b-a522-e72feddea0c8.roa
Signing time: Sun 22 Dec 2024 02:00:39 +0000
ROA not before: Sun 22 Dec 2024 02:00:39 +0000
ROA not after: Sat 22 Mar 2025 01:00:39 +0000
asID: 54994
IP address blocks: 138.113.246.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:49:45:60:1a:ab:b6:0e:d7:1b:c1:c7:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Validity
Not Before: Dec 22 02:00:39 2024 GMT
Not After : Mar 22 01:00:39 2025 GMT
Subject: CN=2702f647-b6e7-4a3b-8567-4c007d921bf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5d:67:6c:bd:81:ae:47:1b:ad:0a:62:fe:eb:
61:22:51:b6:2a:19:e7:b6:0b:c3:28:11:c8:6d:d5:
54:b4:17:89:be:b1:bc:dc:88:44:fa:a8:80:72:1e:
59:d8:3d:d0:d4:75:83:e3:bc:c7:2f:97:c9:f8:01:
16:b3:52:7c:35:16:8b:a6:fc:0d:8b:41:b6:6e:f4:
68:67:85:b7:c7:0c:23:ea:d0:c0:56:98:45:9a:e2:
51:c5:0f:08:78:8d:a7:e4:9a:49:4f:fd:52:2c:19:
d7:e3:27:1a:b3:45:24:a4:72:52:41:04:ee:95:25:
44:5b:90:95:c4:c3:3c:3b:07:f8:8a:f0:7c:49:73:
e4:06:43:fa:a4:74:40:e1:c2:7e:2e:32:fc:bb:44:
4b:95:73:4d:b4:34:bd:d6:df:56:fd:a4:99:52:f1:
2a:74:a2:46:79:dc:ff:ed:c4:c0:3a:84:02:35:be:
1b:35:f3:20:eb:78:da:30:ab:50:fb:e8:f1:76:7c:
f4:47:7e:c4:03:47:0d:94:17:b8:b6:05:d0:28:af:
4f:38:fd:f9:68:eb:5d:6b:4f:2d:ab:0a:6b:d4:07:
b5:0d:dc:e4:13:7d:f4:08:96:28:32:60:9d:58:a4:
d2:ac:fe:de:40:f0:df:c2:b3:29:b8:1e:13:b0:49:
42:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:CB:CF:73:11:F1:D0:4D:66:7E:1E:CC:19:85:04:55:24:B3:A3:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/919695ea-4fb8-3d6b-a522-e72feddea0c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl
X509v3 Authority Key Identifier:
keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
sbgp-ipAddrBlock: critical
IPv4:
138.113.246.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:d9:99:29:af:47:6c:e2:b3:57:1e:75:f4:cc:f6:59:29:d4:
f8:80:3b:02:da:66:28:39:25:73:84:9c:bf:8f:9f:fa:f7:1e:
33:2a:bd:40:b8:2f:13:75:d3:91:5a:35:d8:c8:43:33:5a:76:
f2:43:62:ff:6f:ff:84:22:6a:59:8d:28:aa:df:10:b0:34:d0:
7e:52:65:ca:ce:86:e3:c1:e2:80:8a:0e:48:ae:f9:79:18:8a:
ac:79:41:35:30:7a:b4:88:ad:9e:49:76:59:f5:02:eb:a2:66:
f7:96:90:0b:54:93:64:18:27:bb:83:0e:a1:89:e9:e2:5f:dd:
1e:6b:20:b2:31:15:47:5b:da:f4:5c:0a:28:42:bb:15:77:94:
69:a9:6f:dc:47:4b:43:78:33:16:9f:f2:ad:d0:59:78:1e:a8:
51:c4:04:a1:a1:ce:00:48:8c:78:8b:86:ff:e1:0f:82:c9:e3:
6e:ac:0f:84:9b:02:4b:61:71:aa:5b:bb:eb:ef:5b:3c:51:49:
98:67:bc:53:08:57:f0:02:d4:4c:18:14:15:eb:12:a2:50:49:
d3:4b:38:f9:d7:5a:86:b4:1d:22:32:f7:cc:62:c2:4d:81:65:
9f:05:09:b0:fb:7c:cb:11:06:a6:85:e2:e3:70:64:44:48:fe:
aa:5d:33:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:05:05 2025 by rpki-client