Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/f738a3e5-74e9-3e00-9d7e-a122aea05756.roa
File: f738a3e5-74e9-3e00-9d7e-a122aea05756.roa (raw, json)
Hash identifier: e9p1Yc/T+2P+DFvTNCdO7xX8lupgTZzRAAtfMU1rmcQ=
Subject key identifier: 65:1C:0E:E4:38:22:80:8F:6B:F2:A1:83:52:14:1A:7B:76:7F:77:65
Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Certificate serial: 010D0C9F43285847F84F807186E3C42483792100
Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/f738a3e5-74e9-3e00-9d7e-a122aea05756.roa
Signing time: Sat 23 Nov 2024 02:00:28 +0000
ROA not before: Sat 23 Nov 2024 02:00:28 +0000
ROA not after: Fri 21 Feb 2025 02:00:28 +0000
asID: 54994
IP address blocks: 138.113.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f8:4f:80:71:86:e3:c4:24:83:79:21:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Validity
Not Before: Nov 23 02:00:28 2024 GMT
Not After : Feb 21 02:00:28 2025 GMT
Subject: CN=c4d25179-1f61-4cf3-9a6e-a25660c0a836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:6f:87:75:ea:0a:ba:ba:12:d2:35:4e:0f:24:
f4:2f:d6:08:fd:b8:d4:39:14:8d:db:52:21:1b:8c:
38:f9:62:a7:90:63:91:dd:63:fc:71:8e:45:e3:45:
c4:e1:8e:74:14:b9:c8:70:33:52:5b:c2:ef:b2:30:
de:f0:f4:9d:49:6c:77:e8:a8:83:e0:30:e8:15:26:
e7:54:25:14:37:64:c0:c1:a0:da:03:b7:15:b0:d5:
e9:11:5f:bf:e1:a8:93:7b:5a:78:89:11:5c:fe:59:
d2:9e:df:09:dc:96:8e:3f:10:ad:2c:70:e5:40:cf:
be:a2:bb:0a:4c:60:fd:48:32:a0:68:79:03:25:cb:
4b:7b:91:6d:28:7d:9a:03:87:f4:c9:4d:9b:59:b8:
ac:66:e7:d9:f9:c3:d6:19:46:0c:3d:e5:2e:72:c8:
e3:a1:73:16:ff:29:b9:ce:bb:66:08:b5:01:1e:6a:
00:f2:e6:8f:5a:b1:a9:ad:05:fb:b1:96:eb:13:a5:
83:76:97:5c:7f:32:b2:3a:c6:9c:de:77:81:ec:d2:
ff:ca:2a:55:05:f5:ae:63:2d:ae:fe:a4:cc:b0:ab:
22:ae:f2:24:2c:9a:95:fe:17:3e:8e:4c:19:8b:bb:
56:3e:9e:b7:66:7a:ca:79:76:21:28:e6:9e:be:5d:
5f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:1C:0E:E4:38:22:80:8F:6B:F2:A1:83:52:14:1A:7B:76:7F:77:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/f738a3e5-74e9-3e00-9d7e-a122aea05756.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl
X509v3 Authority Key Identifier:
keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
sbgp-ipAddrBlock: critical
IPv4:
138.113.111.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:da:dc:cc:6c:a0:9e:58:c2:f7:1c:55:e8:d6:d2:d8:58:39:
39:8d:18:32:a1:c1:68:b8:8f:42:84:5f:3b:75:71:31:c0:f4:
54:08:dd:f9:85:ab:e3:4b:f2:5c:3c:48:6c:f1:fe:40:7c:a1:
77:4d:bb:9f:b1:65:2a:02:2d:4a:c2:ec:17:91:c2:0d:04:98:
19:f6:a2:fb:27:20:a2:6c:4b:bf:f0:93:f9:b7:33:67:c7:5c:
0f:8e:64:3b:cf:47:ed:82:db:ad:c4:6c:34:5c:64:db:64:eb:
a5:f4:f9:ec:f6:fc:7a:7c:c6:2c:13:fe:e7:12:4b:fa:86:c4:
a7:e3:7f:f8:b5:27:c7:37:42:4d:4b:86:aa:a1:41:7f:67:5d:
d3:81:46:b0:ce:28:e1:71:9b:44:b3:f1:ca:bb:b6:7c:69:e8:
89:dc:fe:62:52:9c:0d:3c:89:99:54:64:3b:0f:a1:ec:e3:c9:
94:1a:97:e0:f3:d9:10:af:43:58:38:70:5c:d2:26:60:b6:31:
f7:25:d5:b5:66:b5:6f:2c:37:e1:3b:86:59:2c:d9:20:80:d2:
a7:77:82:d3:8c:09:c7:e3:2a:ba:8d:0c:e5:c6:6a:97:9a:50:
bb:c6:a1:a6:e8:b5:2c:b6:de:c2:43:f8:d9:fa:58:44:55:12:
a3:60:ca:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:02:22 2025 by rpki-client