Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/2509d60e-c681-37b3-adcf-bad08087cd10.roa
File: 2509d60e-c681-37b3-adcf-bad08087cd10.roa (raw, json)
Hash identifier: AhKmgD933RuHtwhbKIxglaIUz/N46ngIhyhpHgpaa+Y=
Subject key identifier: 2D:0A:4C:35:1D:85:74:D9:28:59:04:CC:2B:7E:C1:66:05:AB:BC:7B
Certificate issuer: /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial: 010D0C9F43285849002155633A885C53C122D9C0
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/2509d60e-c681-37b3-adcf-bad08087cd10.roa
Signing time: Tue 25 Feb 2025 14:00:52 +0000
ROA not before: Tue 25 Feb 2025 14:00:52 +0000
ROA not after: Mon 26 May 2025 13:00:52 +0000
asID: 53640
IP address blocks: 24.38.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:00:21:55:63:3a:88:5c:53:c1:22:d9:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Validity
Not Before: Feb 25 14:00:52 2025 GMT
Not After : May 26 13:00:52 2025 GMT
Subject: CN=3bcf81ec-947c-40f1-bb97-33d3730dc410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f8:e0:16:ff:89:68:93:b8:93:bc:19:92:83:
26:ca:64:03:3a:07:d1:24:52:ff:da:03:de:3c:ef:
ac:90:79:84:81:a5:10:fb:7e:9b:63:0b:7d:9b:3c:
89:f4:c5:4d:b8:f5:70:38:09:c9:44:91:25:be:17:
d8:39:b6:11:c0:d0:64:8a:1e:17:61:12:dc:5c:8a:
e6:81:a0:a9:2e:1a:09:1f:aa:25:9a:06:6c:e1:b6:
ca:5c:92:aa:c7:c9:24:c4:de:ea:ff:af:b9:e8:ef:
42:a9:b6:c1:fe:01:05:18:77:e3:3b:11:c1:3f:70:
27:a4:55:2a:6c:b7:db:0f:b8:38:05:d9:d5:08:19:
e2:98:9a:31:e2:3c:16:ce:b7:43:01:8a:d4:fa:ce:
47:1d:80:1f:79:b2:2c:ad:44:a3:f4:3b:61:e3:21:
ae:f8:d3:d3:3f:b7:3a:76:62:bc:ac:52:3b:b6:f4:
cd:46:9b:8d:85:f0:41:f9:7d:5c:a6:69:c0:74:8b:
ae:8a:69:ad:88:e9:3f:57:70:23:c7:28:61:89:5e:
8e:83:2b:33:7d:bb:42:cd:fb:82:ac:db:12:76:ba:
99:8f:e6:4c:28:93:cc:4d:d7:43:ea:7d:68:3e:e5:
00:87:3e:92:3c:9a:7f:35:b3:18:b2:28:3d:70:ce:
e2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:0A:4C:35:1D:85:74:D9:28:59:04:CC:2B:7E:C1:66:05:AB:BC:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/2509d60e-c681-37b3-adcf-bad08087cd10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
X509v3 Authority Key Identifier:
keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
sbgp-ipAddrBlock: critical
IPv4:
24.38.114.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
e2:de:94:fb:78:96:11:a4:a0:d0:94:be:f0:53:9f:0f:45:b7:
7a:57:9d:0d:70:fa:45:0f:a5:5f:22:38:62:62:c3:00:39:d6:
a5:16:d9:71:7c:d0:05:63:b1:89:d2:45:a6:59:72:21:c6:90:
73:b5:cc:29:13:7e:35:d7:fa:29:ca:bb:3f:0a:f7:f6:f1:a8:
85:c7:95:93:bc:e4:cc:4d:92:b3:4b:36:27:1c:69:56:11:85:
08:3b:67:50:a1:34:c8:43:24:6c:c8:26:a5:a6:68:1c:4c:34:
56:d6:cc:de:44:82:84:37:cd:a4:08:db:0c:69:a5:70:18:ac:
ba:59:50:d4:4a:64:94:68:56:19:34:c0:3d:cc:0a:77:14:97:
aa:e3:c8:c3:d7:ba:4d:32:e4:39:18:05:24:c5:66:7a:38:4d:
b3:82:19:49:ed:3e:cc:5d:b6:ca:9b:be:11:3e:c2:26:73:26:
e3:08:5f:eb:3d:38:c6:88:f0:a6:2d:a8:1a:08:7a:13:3f:8b:
ce:25:8a:0b:98:f5:2d:48:cd:a5:08:60:0e:17:32:29:58:dd:
c1:62:2e:46:a8:62:45:b4:97:48:5e:6f:06:aa:85:1e:44:8b:
40:a2:25:22:c6:07:00:f8:2f:29:3d:d4:61:39:40:03:0d:d0:
74:47:e3:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:45:59 2025 by rpki-client