Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/ff19e3ea-96bb-3d31-86a9-e712cd2c37f6.roa
File: ff19e3ea-96bb-3d31-86a9-e712cd2c37f6.roa (raw, json)
Hash identifier: 7hV+A+BqnQTpAJxLincDCf+t90muq6iXw3rT4KM7LtU=
Subject key identifier: F6:33:56:A5:BC:B0:45:08:22:EB:55:D3:09:38:08:E8:D4:70:30:FF
Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial: 010D0C9F43285848FD56BCFAE4FD74730A8D4E00
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/ff19e3ea-96bb-3d31-86a9-e712cd2c37f6.roa
Signing time: Mon 24 Feb 2025 14:00:52 +0000
ROA not before: Mon 24 Feb 2025 14:00:52 +0000
ROA not after: Sun 25 May 2025 13:00:52 +0000
asID: 16696
IP address blocks: 161.38.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fd:56:bc:fa:e4:fd:74:73:0a:8d:4e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Validity
Not Before: Feb 24 14:00:52 2025 GMT
Not After : May 25 13:00:52 2025 GMT
Subject: CN=ea7b8ced-8d35-42de-b58b-8a8d29e3bb40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d3:8d:6b:e6:36:e3:03:ce:94:16:4c:eb:5d:
e5:f9:23:07:c7:90:da:c7:2f:33:f3:2e:83:30:87:
de:8e:95:79:0d:2a:5a:79:8e:19:68:aa:9c:e6:90:
ab:44:58:6a:b2:96:5a:d7:93:db:31:2f:4e:df:bf:
39:2f:14:f7:4b:7e:93:ee:a0:c8:77:e2:16:c8:00:
da:3c:af:d0:d3:38:45:3c:37:e7:f0:a4:11:5b:9c:
d3:76:e5:00:ac:fd:20:af:50:2a:12:58:4f:c2:28:
cf:c8:0d:2e:f0:66:32:d1:16:25:a5:e9:71:9e:e4:
48:98:2d:e0:2d:2b:d9:05:1f:6b:f7:0b:ca:71:83:
9c:cc:d0:5a:7d:b4:43:ba:81:f8:0f:7f:a1:26:4d:
ff:c9:af:79:dd:8d:7a:fc:95:43:cb:a8:72:a1:a1:
1a:73:f7:09:19:a0:57:4e:26:96:20:1d:34:55:d6:
15:93:12:ec:28:c2:ad:7f:bb:84:3b:3c:18:39:66:
de:e3:3e:a7:22:0e:df:72:13:be:34:aa:4f:01:b2:
72:13:25:29:32:9d:99:ef:5b:f8:85:99:48:f5:47:
7c:7c:10:3e:85:60:59:43:f1:a3:ef:f7:85:28:57:
5a:d3:bd:d3:1d:66:ca:11:15:42:98:17:c9:a3:94:
0b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:33:56:A5:BC:B0:45:08:22:EB:55:D3:09:38:08:E8:D4:70:30:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/ff19e3ea-96bb-3d31-86a9-e712cd2c37f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
X509v3 Authority Key Identifier:
keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
sbgp-ipAddrBlock: critical
IPv4:
161.38.24.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:f6:bb:04:51:07:c7:bc:1e:93:4a:fe:5a:6e:43:27:c7:4e:
06:f7:9e:77:48:36:70:ce:9f:60:fa:c3:ce:31:6a:45:9a:f0:
f1:5f:c8:db:e7:09:72:5a:a0:64:da:34:6c:f1:c5:c2:0e:b4:
7e:df:75:c0:ad:52:47:c8:5a:01:e0:84:23:b8:5f:c6:9f:6b:
c0:a0:1c:8a:36:95:d1:f2:f3:cc:58:dd:05:5f:e7:f5:74:8e:
7d:f3:e6:27:a6:9c:50:62:e3:1a:21:20:a0:e0:03:2b:97:b4:
99:96:6e:c8:f5:15:a6:ff:98:ca:04:78:47:4b:59:2f:98:42:
24:91:7f:c2:5a:14:c3:9a:17:85:6b:dd:a8:bb:8e:fe:e7:af:
7d:5c:fa:27:59:40:b2:ea:b8:61:9b:c5:84:b9:36:c2:91:37:
fb:fe:91:9d:2b:4d:7f:41:6e:2e:bc:54:d2:e7:15:73:bc:ec:
49:6b:36:57:74:8f:2d:a8:a9:1a:d3:8f:0e:a4:75:5a:cd:ea:
36:05:4e:3c:0b:40:98:d8:7d:98:e8:a3:86:38:ea:5f:9b:97:
54:61:61:f4:0b:e4:ed:aa:3e:ba:42:c8:00:40:50:60:67:95:
d0:3b:cb:11:df:e8:3e:9d:2c:33:41:4d:7c:e4:77:3c:ce:ac:
09:98:73:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:37:42 2025 by rpki-client