Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/18c22446-23f2-433c-bff0-b35a75738dd5/f3a095cf-f0ec-3033-be5c-75cfbc5537fe.roa
File: f3a095cf-f0ec-3033-be5c-75cfbc5537fe.roa (raw, json)
Hash identifier: ljd3ZeN1fBkRJ+YnUqXqJgAPf1DSKaRSnN+UPWCDKws=
Subject key identifier: 54:53:A7:AD:02:4D:7B:B5:50:D4:FD:DD:79:2D:35:01:5F:37:9D:60
Certificate issuer: /CN=18c22446-23f2-433c-bff0-b35a75738dd5
Certificate serial: 010D0C9F43285848EF612DD848520F4A08F90E00
Authority key identifier: F1:84:FA:82:AB:89:52:E5:C3:DE:8E:A7:86:B7:2C:C5:48:52:91:D5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/18c22446-23f2-433c-bff0-b35a75738dd5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/18c22446-23f2-433c-bff0-b35a75738dd5/f3a095cf-f0ec-3033-be5c-75cfbc5537fe.roa
Signing time: Wed 19 Feb 2025 14:00:52 +0000
ROA not before: Wed 19 Feb 2025 14:00:52 +0000
ROA not after: Tue 20 May 2025 13:00:52 +0000
asID: 16509
IP address blocks: 138.43.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ef:61:2d:d8:48:52:0f:4a:08:f9:0e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18c22446-23f2-433c-bff0-b35a75738dd5
Validity
Not Before: Feb 19 14:00:52 2025 GMT
Not After : May 20 13:00:52 2025 GMT
Subject: CN=b71deea5-246a-412f-a0ca-da7d647403b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9e:d2:c5:e8:85:21:01:fc:c2:ba:45:10:b1:
0a:a9:ba:b8:8c:4a:f8:31:6f:fe:70:56:fb:74:36:
bb:84:55:d6:da:be:a4:af:21:db:d8:34:bd:1f:4c:
c8:b6:b7:64:60:92:94:42:fe:d6:d4:f5:d6:45:42:
83:e2:33:e9:02:97:12:cd:47:5a:f5:52:98:3b:1d:
c7:80:3f:f4:d3:3f:30:23:96:e5:d8:c4:6a:49:cb:
cb:39:d4:4a:de:39:97:7b:f5:f1:97:a8:db:5b:48:
44:97:d9:0a:95:ff:d0:b5:bc:0a:08:aa:93:e6:2c:
a3:6c:7a:79:c5:73:66:17:16:75:bb:0b:b3:f6:39:
a6:8c:b3:ef:34:35:dc:e0:fd:17:62:af:1c:44:28:
cb:35:b5:ad:47:5b:b9:ab:63:90:cf:67:69:fe:8f:
b9:8b:c8:02:89:d4:59:e8:ab:4a:a8:da:3a:5f:e3:
23:15:b6:de:51:d0:78:04:68:55:f0:1b:9e:06:64:
58:0c:25:5e:62:b6:fe:c0:a6:1c:a8:ed:33:6f:49:
c3:12:16:e2:2d:40:cc:69:4c:b9:27:05:e1:99:ec:
23:61:23:d7:da:2f:7e:a6:d4:bb:9b:43:4c:7a:32:
9b:f7:40:25:cd:ea:3e:c1:70:e8:83:07:ce:f7:56:
c1:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:53:A7:AD:02:4D:7B:B5:50:D4:FD:DD:79:2D:35:01:5F:37:9D:60
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/18c22446-23f2-433c-bff0-b35a75738dd5/f3a095cf-f0ec-3033-be5c-75cfbc5537fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/18c22446-23f2-433c-bff0-b35a75738dd5/18c22446-23f2-433c-bff0-b35a75738dd5.crl
X509v3 Authority Key Identifier:
keyid:F1:84:FA:82:AB:89:52:E5:C3:DE:8E:A7:86:B7:2C:C5:48:52:91:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/18c22446-23f2-433c-bff0-b35a75738dd5.cer
sbgp-ipAddrBlock: critical
IPv4:
138.43.114.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:f1:55:fc:f9:48:1a:07:f9:2b:92:45:5d:2d:56:ec:ed:67:
bf:b3:76:cc:6d:c4:32:a8:d6:c2:46:f8:92:03:aa:50:5d:da:
48:29:2c:d9:ff:8c:8b:9e:20:1f:3b:81:25:49:02:a7:10:d7:
2c:a0:21:ae:bd:6e:a6:1d:cb:49:a3:e9:c1:04:9d:cb:73:e9:
53:da:ce:cf:ef:85:93:a4:b1:f0:9f:40:2d:e4:69:d4:21:bd:
a8:de:73:f1:95:17:7d:65:1f:7c:a9:f4:ec:d9:6a:97:fa:6a:
55:6f:00:64:17:cd:9c:b3:4f:ef:23:3f:b1:15:27:ff:01:e7:
b6:82:04:3c:de:02:b7:ca:7f:81:f5:ad:22:1d:bc:15:03:59:
76:eb:c0:3f:1d:60:fb:b7:35:2d:42:d6:14:6c:76:96:f1:91:
57:12:86:6f:24:0c:22:09:33:1f:74:03:0f:49:55:5f:e6:1c:
8a:b7:3a:7c:ca:31:cc:73:c4:e3:79:c0:ef:25:65:11:9a:6b:
4b:6a:0f:60:c0:c4:77:9f:03:27:bf:b6:91:50:88:82:d9:78:
00:51:e6:b8:02:0f:aa:29:9b:91:70:0f:77:8f:87:f3:2f:3c:
d1:61:4a:63:e7:e5:36:54:42:36:d5:5e:9b:06:55:0b:08:56:
b8:fe:9c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:15:00 2025 by rpki-client