Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/e85fa22c-b7d6-3fa7-9929-d1c2421629dc.roa
File: e85fa22c-b7d6-3fa7-9929-d1c2421629dc.roa (raw, json)
Hash identifier: 2FbTS3epglFZIAaq1/xfN6wF7kb+uoqEUQioLUTHvLs=
Subject key identifier: 40:17:08:0D:86:1D:C1:D5:64:13:09:3D:B0:BE:3B:8C:CC:56:23:32
Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Certificate serial: 010D0C9F432858484945602F44F3467FC3D40C50
Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/e85fa22c-b7d6-3fa7-9929-d1c2421629dc.roa
Signing time: Sun 22 Dec 2024 02:00:39 +0000
ROA not before: Sun 22 Dec 2024 02:00:39 +0000
ROA not after: Sat 22 Mar 2025 01:00:39 +0000
asID: 54994
IP address blocks: 138.113.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:49:45:60:2f:44:f3:46:7f:c3:d4:0c:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Validity
Not Before: Dec 22 02:00:39 2024 GMT
Not After : Mar 22 01:00:39 2025 GMT
Subject: CN=4ae4e1c4-d0c4-4d0c-9394-558b849a053a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:aa:41:f8:6c:bd:5f:70:67:f0:b6:d1:98:3d:
47:c0:54:9c:c9:4a:39:8f:5a:6e:3b:57:db:b0:2d:
20:9d:b4:be:c6:89:94:d3:08:11:cb:c9:e2:44:56:
64:b5:9a:c0:c4:80:d5:fc:10:03:be:11:25:9c:23:
67:f7:d4:96:04:e3:ea:23:6d:3c:e3:45:5f:12:73:
29:a7:0a:60:c7:ac:23:25:e3:ea:56:be:57:07:ce:
bb:7e:d4:84:c6:3d:0b:f7:bf:94:28:90:e7:6d:dd:
b0:fa:54:4d:69:92:d4:d7:7f:7d:d7:fa:30:98:c5:
8a:a5:b6:8f:75:3c:e0:ae:1d:ad:d0:be:73:ef:86:
f1:d8:67:cc:ac:e9:43:51:08:30:4e:bd:25:ca:0b:
41:f1:0b:45:26:db:4a:6f:72:57:a7:d4:89:57:59:
cd:b5:70:24:d2:f4:f0:42:e9:6e:44:ee:33:b7:11:
7a:ca:9e:54:85:74:53:b4:9e:14:0d:13:5f:13:40:
c1:9d:96:bb:37:8b:e1:1a:32:90:f5:f3:31:ce:15:
e9:9f:40:4d:3c:4f:87:95:bc:76:67:00:1c:a5:2a:
30:74:92:4e:cd:d4:cd:5c:48:13:c2:25:de:14:cc:
1d:42:cd:c0:7d:6c:d4:6f:41:44:00:3b:17:d6:18:
b8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:17:08:0D:86:1D:C1:D5:64:13:09:3D:B0:BE:3B:8C:CC:56:23:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/e85fa22c-b7d6-3fa7-9929-d1c2421629dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl
X509v3 Authority Key Identifier:
keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
sbgp-ipAddrBlock: critical
IPv4:
138.113.121.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:98:71:16:67:a1:cd:d2:d8:25:2b:ee:90:6b:18:05:55:de:
f0:57:81:6a:b7:9f:e0:dc:7b:b7:66:bb:98:0b:d7:e3:07:de:
49:59:0c:88:a2:8b:00:3a:1b:8c:4e:25:b4:c6:14:84:0a:53:
6c:d6:4a:ba:32:10:33:9e:bc:c0:b8:c3:37:43:9d:7e:fd:0b:
86:90:dc:92:7a:92:d9:54:d5:4d:89:fe:50:bf:1a:10:df:1e:
44:b5:d2:48:e6:93:b0:83:e4:be:bf:49:bd:d6:a8:91:e9:1e:
e6:34:20:2b:66:bb:7c:f9:ed:14:bb:48:73:14:72:87:fb:bc:
25:e6:bd:56:c0:e4:d6:b8:c9:f5:3d:10:6e:9b:78:33:f4:15:
41:49:b5:9d:44:f7:30:8c:e8:e3:90:fb:6f:29:eb:3f:32:4c:
c5:79:e1:21:45:7e:32:4f:a2:58:1e:78:12:f8:e5:4c:ab:5a:
d3:43:7e:ef:47:56:36:7a:ef:55:ac:4c:e0:e2:61:73:4d:d2:
59:46:c4:4e:9a:30:2a:bb:5f:a8:f0:74:e8:6d:d0:76:28:68:
6f:65:76:29:0a:d9:6e:9b:8f:dd:3c:7c:00:76:3a:82:d4:68:
91:13:38:50:04:34:50:9c:d5:a7:01:76:bd:38:ef:24:6d:4b:
c8:94:47:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:17:06 2025 by rpki-client