Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/df81f8d2-6da0-3290-b864-c6d6e634429c.roa
File: df81f8d2-6da0-3290-b864-c6d6e634429c.roa (raw, json)
Hash identifier: ktLq56hGGhfqMwuVBbik7fORMxSVq9Fk+PtgLgM+5NM=
Subject key identifier: 9A:7B:04:01:6B:5F:6D:0D:A3:42:34:CF:7E:B5:C3:E1:28:41:27:03
Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial: 010D0C9F43285848FD56BD39349DD15E5F89C0C0
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/df81f8d2-6da0-3290-b864-c6d6e634429c.roa
Signing time: Mon 24 Feb 2025 14:00:52 +0000
ROA not before: Mon 24 Feb 2025 14:00:52 +0000
ROA not after: Sun 25 May 2025 13:00:52 +0000
asID: 16696
IP address blocks: 161.38.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fd:56:bd:39:34:9d:d1:5e:5f:89:c0:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Validity
Not Before: Feb 24 14:00:52 2025 GMT
Not After : May 25 13:00:52 2025 GMT
Subject: CN=f81e57a1-5433-4553-88e8-7ffa9025f3ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:25:fe:5c:78:15:60:2d:6e:4d:5c:93:b5:fd:
0f:c5:d3:90:be:11:84:4e:59:05:6d:ea:a3:f1:e6:
7a:12:a3:49:2b:2c:a1:57:e4:fd:3c:46:fd:2b:b9:
35:78:29:83:7c:c3:b1:7b:38:bc:41:1a:b1:49:cc:
99:c0:b7:50:fc:3c:5a:b9:bb:b1:2b:ec:95:6a:ea:
8b:af:34:77:69:f1:de:81:d7:24:ec:f0:eb:d7:d4:
b7:94:b9:8d:54:c4:55:5e:03:ae:32:ae:c1:89:8f:
ee:07:8d:f6:e6:d6:48:04:91:80:26:f3:48:8d:18:
c1:72:14:e8:57:d3:89:0b:59:d4:6c:ad:ff:fa:83:
ae:4a:59:95:0c:bb:f4:ed:a5:e3:ac:87:04:1f:4f:
fd:9f:29:49:b2:4e:6e:e8:3c:a7:53:dc:a4:6d:0a:
fc:4d:e2:76:a6:e1:ac:5f:20:e1:07:b8:e1:da:24:
73:42:c7:43:01:4e:bb:18:f8:cb:84:6d:91:10:51:
5f:50:3c:60:cf:b8:58:78:b2:19:71:ae:5e:bd:c4:
a4:b3:34:94:32:82:80:81:df:0b:dc:1d:14:ea:e5:
87:fc:4c:46:3d:46:77:cf:92:f3:26:57:c2:06:03:
0b:2b:4f:fc:ca:91:f7:4f:09:84:03:8a:36:2c:8a:
ba:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:7B:04:01:6B:5F:6D:0D:A3:42:34:CF:7E:B5:C3:E1:28:41:27:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/df81f8d2-6da0-3290-b864-c6d6e634429c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
X509v3 Authority Key Identifier:
keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
sbgp-ipAddrBlock: critical
IPv4:
161.38.29.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:7d:30:be:24:02:1e:5e:14:af:84:71:60:f5:3a:36:07:6b:
9b:ab:ea:0a:e7:d2:8c:ae:61:17:5e:96:33:4d:76:f6:a4:56:
8c:b6:1b:7a:a5:a2:90:81:06:8e:34:e9:d5:da:4f:78:df:a9:
69:7f:56:ad:74:6d:11:13:2d:02:b7:4f:89:ef:27:9a:d3:ce:
dd:2c:47:ec:87:74:d8:43:57:16:fe:a3:43:74:c9:1e:f3:a9:
7b:84:e0:e2:e1:8d:c3:48:cd:3d:6e:d2:b5:08:4e:18:b4:fb:
4c:92:fe:8b:68:60:4c:80:80:2c:de:d4:fb:95:d2:07:54:0d:
7f:9d:3b:8e:d0:86:a2:76:63:cd:f1:ac:53:dd:89:51:f0:d3:
c6:d0:9b:78:a0:3e:ff:74:95:b2:11:52:77:ad:0a:87:f4:e5:
be:03:9f:b6:6c:7c:fe:8b:3f:bd:b6:ab:64:34:9e:7f:9b:2a:
3d:53:f6:44:46:e0:75:6a:42:e7:3f:69:90:fb:a3:d6:c8:62:
ce:45:38:97:b9:7b:4d:9e:d1:52:85:0b:5d:54:d2:5d:c1:3b:
66:0f:05:e3:83:7a:3b:7e:00:84:ff:b6:86:91:68:02:9a:28:
8c:a5:77:2a:d9:e5:5d:1b:21:e6:da:03:86:b2:94:7d:fd:b1:
5e:30:ec:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:33:47 2025 by rpki-client