Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/03cba44f-e4e9-3b5c-b7dd-d1e2e267ae69.roa
File: 03cba44f-e4e9-3b5c-b7dd-d1e2e267ae69.roa (raw, json)
Hash identifier: b2AuGlPB++r7TQp9bQfP4ZU6YD5VF49vqRAvNKPifVs=
Subject key identifier: 7C:4C:A5:16:14:F0:F1:21:94:57:6C:79:98:29:53:5C:B6:C9:9A:09
Certificate issuer: /CN=d21149ca-bfeb-409c-adbb-e86e751b6f22
Certificate serial: 010D0C9F43285848B090B520277CBD6744E78C80
Authority key identifier: 43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/03cba44f-e4e9-3b5c-b7dd-d1e2e267ae69.roa
Signing time: Tue 28 Jan 2025 02:00:39 +0000
ROA not before: Tue 28 Jan 2025 02:00:39 +0000
ROA not after: Mon 28 Apr 2025 01:00:39 +0000
asID: 14618
IP address blocks: 152.38.128.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b0:90:b5:20:27:7c:bd:67:44:e7:8c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d21149ca-bfeb-409c-adbb-e86e751b6f22
Validity
Not Before: Jan 28 02:00:39 2025 GMT
Not After : Apr 28 01:00:39 2025 GMT
Subject: CN=6302ff26-b2e3-45fa-af0d-1cf4093f343c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:15:5e:b7:bc:a9:07:83:57:ec:ba:a8:e3:e6:
a0:6f:c1:c9:a7:01:9f:e0:ee:16:a9:0a:a2:18:ed:
6a:b5:ff:53:e8:99:be:95:1d:51:01:c9:71:de:7b:
2a:47:1f:3d:be:11:74:a0:a6:9e:9b:b9:d5:8e:57:
0e:76:59:7c:81:f3:a5:6f:6c:d7:20:a9:9b:25:b0:
1e:4b:52:e7:65:30:e2:10:62:9e:bf:98:22:c9:de:
b9:bd:8c:ff:e2:60:d6:d8:b5:5c:14:07:2b:ec:a7:
73:e9:1f:cb:47:34:61:b1:88:cb:09:1c:cb:7b:be:
0f:d6:d5:d1:0e:8a:68:1f:93:be:ea:fa:1b:99:87:
c9:88:41:2d:6e:a1:28:49:79:5a:51:c6:45:49:74:
36:e8:75:48:25:9b:4e:de:4a:ff:b7:9f:03:8d:62:
21:a2:d2:c7:17:a7:ea:31:6d:a8:02:52:e1:ca:a8:
82:c5:58:f8:e5:af:f8:cf:7d:cd:1f:2a:53:c6:21:
6f:b0:07:8c:d2:bf:e4:7c:9a:9a:e3:9b:82:7c:72:
33:b9:93:a1:86:04:31:cb:33:f3:4d:5e:02:db:9f:
9e:02:22:bd:3a:83:9c:a2:43:f8:bf:3b:51:0f:4d:
6b:a3:cd:47:e1:ba:2c:5a:f4:be:0b:79:16:40:c8:
fb:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:4C:A5:16:14:F0:F1:21:94:57:6C:79:98:29:53:5C:B6:C9:9A:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/03cba44f-e4e9-3b5c-b7dd-d1e2e267ae69.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl
X509v3 Authority Key Identifier:
keyid:43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer
sbgp-ipAddrBlock: critical
IPv4:
152.38.128.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:aa:5e:1c:39:63:9e:99:db:4b:e0:81:d8:d0:59:3e:13:8a:
66:8d:c8:3b:f1:1e:bc:cc:fb:c8:b4:80:21:57:33:4f:51:ca:
db:42:68:05:90:92:53:f5:7a:9f:88:c7:49:97:8a:8a:2e:3e:
c5:39:08:7b:2d:4a:c7:52:f7:35:56:91:4b:42:79:b9:f6:a6:
dc:fb:47:43:d2:71:86:9c:77:89:94:4d:15:d5:a2:6d:c2:a6:
7b:5e:8d:8c:90:ad:84:be:73:5e:67:3c:43:92:81:2c:52:11:
73:a5:84:f5:ca:a1:cc:11:49:41:6b:8b:d9:eb:94:f3:84:72:
b6:4a:1b:f9:5d:fa:f3:a1:93:5d:38:f8:61:7f:55:ff:18:57:
1c:32:dc:ee:51:99:f2:3a:5b:f5:fe:31:6f:b9:4a:8a:0e:db:
b5:24:bd:85:9b:5c:1b:5b:bc:69:bc:e9:66:af:4a:68:9c:5c:
92:54:ca:84:0f:c7:15:9c:79:b7:d3:43:d7:8d:88:35:ed:ae:
4b:bd:f1:e1:a9:43:6f:89:e1:0e:05:9d:ab:ce:85:f1:4a:5f:
af:83:4c:b9:fe:ed:fb:c1:9d:36:bb:23:8f:89:d1:97:0a:d0:
22:b1:bc:b3:ef:91:12:cf:a9:53:b9:d3:d4:d0:dd:17:17:c1:
e8:5e:95:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:30:16 2025 by rpki-client