Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/493b6a29-354a-3d5c-9e76-86357ec364ec.roa
File: 493b6a29-354a-3d5c-9e76-86357ec364ec.roa (raw, json)
Hash identifier: Id/BV7Rzj8/0gaylHaeNaRhnsVdQ59CqhgaKizXcdI0=
Subject key identifier: 88:6A:89:5C:7B:90:91:A5:C0:48:4C:97:43:18:95:A7:B7:0F:42:46
Certificate issuer: /CN=4c5f6fb8-1f68-4792-8def-a616a53280be
Certificate serial: 010D0C9F43285848EF613F5FCC874895A5B658C0
Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/493b6a29-354a-3d5c-9e76-86357ec364ec.roa
Signing time: Wed 19 Feb 2025 14:00:52 +0000
ROA not before: Wed 19 Feb 2025 14:00:52 +0000
ROA not after: Tue 20 May 2025 13:00:52 +0000
asID: 18593
IP address blocks: 138.8.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ef:61:3f:5f:cc:87:48:95:a5:b6:58:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be
Validity
Not Before: Feb 19 14:00:52 2025 GMT
Not After : May 20 13:00:52 2025 GMT
Subject: CN=ee320a0a-c0f2-4927-93f6-c1a57c9c75aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d4:bd:2a:80:f7:d5:3c:0c:cd:9e:cc:88:54:
b5:af:01:a6:ec:0f:1c:63:2f:6e:a5:76:2c:40:3e:
8b:14:a8:a4:6b:ea:4f:14:4c:4f:0b:cc:a5:c7:83:
69:73:42:45:9b:a2:cd:b4:73:71:98:a5:cc:b6:53:
83:3f:bf:ca:af:c8:d0:f6:60:22:c4:11:ee:1d:b8:
6e:4a:b2:da:96:89:a6:39:14:ac:17:bd:22:92:b3:
0d:29:4e:87:86:5b:84:60:92:a8:7a:b7:15:f9:e6:
3c:1f:1e:d2:0e:d2:71:01:7f:26:e2:01:fd:c8:2f:
95:17:39:92:97:cd:92:06:7d:61:f4:13:87:9a:af:
fb:b9:3b:b0:6f:a2:c2:de:93:ba:c0:74:03:aa:e6:
1c:2e:67:47:ac:fa:b2:54:54:b9:6d:f7:73:7d:3a:
3c:37:ba:f0:86:81:62:4b:74:1f:d4:63:ed:71:2d:
8e:c0:b2:19:89:cc:61:2f:c1:80:8e:80:0d:d3:b5:
f9:a4:8c:a8:8f:da:09:04:89:ea:d6:25:e6:8e:b2:
e4:f4:02:76:48:45:cb:05:8a:fd:22:41:a3:8a:62:
02:fe:dc:3c:97:ff:e0:85:da:e7:f4:1d:1d:d3:a5:
e0:bb:dc:c1:22:5a:2b:20:a1:a0:45:5a:7b:a4:f2:
5c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:6A:89:5C:7B:90:91:A5:C0:48:4C:97:43:18:95:A7:B7:0F:42:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/493b6a29-354a-3d5c-9e76-86357ec364ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl
X509v3 Authority Key Identifier:
keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer
sbgp-ipAddrBlock: critical
IPv4:
138.8.117.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:9f:6c:a2:e2:ef:d0:ef:2e:09:a1:6a:3a:20:74:07:1e:40:
13:40:2f:09:6c:7b:ea:61:b6:c0:9b:82:3a:26:c0:b2:d4:5f:
e0:3e:f6:14:ad:af:f4:b2:a6:7e:bf:76:4b:70:b1:0a:f5:2a:
f4:d2:3d:5e:f9:35:68:95:9c:1a:8c:0a:c5:fd:1e:9f:6e:9d:
46:31:07:39:7c:28:d7:54:48:03:fe:9d:0b:93:37:de:f3:4b:
4c:3b:53:f3:40:d9:6f:82:03:de:e2:f5:44:9d:33:6c:9a:65:
25:c7:cd:33:f3:0f:25:ae:b6:0e:28:95:20:4a:62:5f:b7:91:
a0:d8:6d:3a:33:3e:e5:fd:1b:cb:ca:ef:c8:06:2b:cf:9e:4e:
21:b9:9e:99:77:7e:a7:82:60:b4:5b:b8:82:b2:cc:88:e0:3e:
88:f7:6d:e9:b3:4b:1f:37:87:72:bc:22:07:65:37:9b:29:fa:
d9:f5:ff:20:f2:d2:19:c5:44:4f:21:0f:c6:b3:7d:16:68:3d:
ea:5d:fe:d4:29:e4:b0:43:c7:82:6b:52:33:64:8d:3b:99:8b:
20:33:d3:a3:48:b7:d8:e0:0a:94:14:f4:75:64:9b:e2:08:f0:
5b:b1:2f:0b:ab:27:d3:9c:a5:73:06:3a:b2:67:83:4b:52:2c:
19:cc:90:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:36:36 2025 by rpki-client