Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/28735348-6cda-374a-978a-a2aabf659d86.roa
File: 28735348-6cda-374a-978a-a2aabf659d86.roa (raw, json)
Hash identifier: Vl/GZIrMjKs3sKdNQwbiXeWOn2xnE7BJ7kXag7rzPpY=
Subject key identifier: A4:A0:DC:A5:0C:1A:93:BF:DD:76:46:F7:30:51:D0:48:89:F5:6B:14
Certificate issuer: /CN=ffc39f64-f356-459c-8bf7-d142a7a166f3
Certificate serial: 010D0C9F43285848530AEDCA6DA0B7A120735300
Authority key identifier: 4D:52:88:03:05:6C:F7:2A:7F:D0:E7:BC:30:7E:24:98:8D:2D:20:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/28735348-6cda-374a-978a-a2aabf659d86.roa
Signing time: Wed 25 Dec 2024 14:00:52 +0000
ROA not before: Wed 25 Dec 2024 14:00:52 +0000
ROA not after: Tue 25 Mar 2025 13:00:52 +0000
asID: 8075
IP address blocks: 138.32.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:53:0a:ed:ca:6d:a0:b7:a1:20:73:53:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffc39f64-f356-459c-8bf7-d142a7a166f3
Validity
Not Before: Dec 25 14:00:52 2024 GMT
Not After : Mar 25 13:00:52 2025 GMT
Subject: CN=a300dda1-4627-41ca-80f7-4fb80ac087c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:15:ac:ae:8f:33:a7:3c:e3:e6:4b:20:5f:55:
86:54:bf:85:5b:b1:e9:26:ea:c9:98:34:de:f6:5d:
5f:77:80:af:4f:f6:57:14:88:a7:9e:a7:1e:52:3e:
32:70:42:7e:4f:58:25:c6:cd:ee:6f:3a:d1:fa:5c:
b1:a4:94:0e:fe:61:32:49:6b:f0:8c:c5:41:46:72:
18:10:b3:b4:fa:63:12:34:28:e4:1c:4c:df:2c:b7:
25:7d:11:49:3a:c0:49:0d:04:b6:37:59:ad:ca:bb:
0c:ff:52:84:d6:8e:a5:96:0b:38:d6:f7:54:00:08:
46:74:9e:f1:f6:be:8d:a9:eb:e1:8e:cc:7c:50:18:
9c:3c:7a:8f:07:fc:1a:e4:8d:b0:34:74:34:66:65:
e7:c4:e1:50:55:c5:76:9c:90:9a:9a:70:2d:29:2f:
3c:4b:a4:a3:df:ab:47:af:ce:a8:c8:b4:b8:4d:29:
2c:fc:ad:0d:d1:23:11:de:48:ae:c6:fd:07:3d:f8:
4b:b5:86:8f:7e:f3:00:14:fb:71:fa:27:0c:89:30:
85:05:b7:8e:dd:c5:2b:3f:c3:4e:1c:6f:ce:86:88:
32:2c:4b:b1:8d:13:88:5e:85:b3:58:df:45:b6:83:
ad:d0:82:9f:ba:a9:64:d9:66:8e:2a:f4:f2:ce:83:
4b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:A0:DC:A5:0C:1A:93:BF:DD:76:46:F7:30:51:D0:48:89:F5:6B:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/28735348-6cda-374a-978a-a2aabf659d86.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.crl
X509v3 Authority Key Identifier:
keyid:4D:52:88:03:05:6C:F7:2A:7F:D0:E7:BC:30:7E:24:98:8D:2D:20:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer
sbgp-ipAddrBlock: critical
IPv4:
138.32.109.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:61:5e:4e:b0:e9:27:eb:35:92:d5:0a:4f:92:26:16:38:58:
51:de:ee:cb:24:fa:f8:3d:30:7a:bc:47:5d:55:23:73:62:82:
f4:0f:3e:f7:82:3d:a4:5a:eb:04:d1:76:39:a2:f0:ce:9c:22:
c6:53:fb:c9:e0:d6:19:ef:87:33:9d:40:ec:75:78:5e:b2:fe:
3e:2e:44:dd:b1:6f:88:d2:fa:1e:8c:57:a5:90:9b:fb:93:9b:
34:de:d2:cd:b1:17:8f:74:a0:b0:d5:da:e3:37:4d:f9:f3:49:
2c:5f:09:19:d5:93:30:cf:42:f4:fe:76:41:82:09:f8:33:f9:
e5:9b:00:c9:cf:7f:cb:39:a9:f6:34:2d:fb:57:77:ed:c5:59:
cd:23:be:79:e9:64:f9:78:e6:1c:69:6d:35:83:70:fa:31:e4:
20:3d:98:2f:5a:59:30:36:12:dc:50:45:94:1a:20:0b:d6:4d:
98:29:ab:75:c7:1a:49:b5:13:6f:9a:5d:0b:a3:27:9e:60:1a:
e0:c7:39:10:a3:c3:af:85:79:78:da:45:97:86:c3:4b:8e:99:
02:e0:9c:8c:78:88:d4:00:e5:72:20:dd:df:57:82:d4:61:c3:
20:35:2c:9f:be:ac:cb:96:70:51:05:73:8c:c0:92:c6:55:7d:
75:ea:58:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:35:33 2025 by rpki-client