Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/cd8f6919-ba8f-322c-8505-c9f2add8eab6.roa
File: cd8f6919-ba8f-322c-8505-c9f2add8eab6.roa (raw, json)
Hash identifier: mz6ifdAgJMdMrFrJX3nhY7A1xDVNg4+tiDnF2+E9Dsw=
Subject key identifier: 65:7D:BB:1F:D3:2D:4C:64:E8:2F:E3:4D:42:3D:FE:FC:60:2B:FB:C9
Certificate issuer: /CN=4c5f6fb8-1f68-4792-8def-a616a53280be
Certificate serial: 010D0C9F4328584902EC221273C6E425BAA69000
Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/cd8f6919-ba8f-322c-8505-c9f2add8eab6.roa
Signing time: Wed 26 Feb 2025 14:00:51 +0000
ROA not before: Wed 26 Feb 2025 14:00:51 +0000
ROA not after: Tue 27 May 2025 13:00:51 +0000
asID: 6195
IP address blocks: 138.8.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:02:ec:22:12:73:c6:e4:25:ba:a6:90:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be
Validity
Not Before: Feb 26 14:00:51 2025 GMT
Not After : May 27 13:00:51 2025 GMT
Subject: CN=7a601862-fe48-47b5-bca1-8f6047632862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:82:ad:60:a1:57:c9:9a:56:ee:22:d0:60:93:
d0:89:73:5a:f3:53:7d:83:58:dc:89:6b:ac:1a:b6:
42:4a:ac:38:b7:61:dd:54:37:d2:52:3d:ce:e9:f7:
80:df:12:31:04:fd:cd:08:57:84:88:da:bd:d5:2c:
58:f8:9e:cb:8d:86:78:bb:b6:26:7a:58:6b:3c:30:
c1:1c:32:df:3d:6f:60:78:35:5b:11:e7:53:3c:65:
c4:a4:be:1e:d9:62:f5:74:27:75:cc:65:d4:03:fd:
45:56:c4:dc:6d:4e:fd:ad:92:aa:c6:dd:d5:02:e5:
3e:13:ad:e5:3a:32:21:00:9d:d8:39:4e:46:2f:82:
85:9c:71:71:40:7c:30:8f:f8:46:f9:a0:d5:92:e2:
c1:36:81:d7:bc:e3:06:ec:02:bc:c8:ba:dd:47:95:
7a:65:96:c6:ae:8d:e8:c1:dd:8f:9e:02:34:8a:66:
39:20:2d:cc:ea:17:d7:1c:b7:90:5c:32:d0:61:f6:
a6:75:f5:2d:c0:c1:c2:13:1a:4d:1b:46:39:b1:d1:
c4:40:01:91:6d:dd:d2:1e:2d:e6:cd:31:d9:16:7a:
25:3d:2e:b9:6e:60:5a:8b:53:c2:c7:b8:d9:9b:f6:
a5:24:a9:83:3c:ad:7b:89:00:03:13:d4:a9:4e:ed:
db:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:7D:BB:1F:D3:2D:4C:64:E8:2F:E3:4D:42:3D:FE:FC:60:2B:FB:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/cd8f6919-ba8f-322c-8505-c9f2add8eab6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl
X509v3 Authority Key Identifier:
keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer
sbgp-ipAddrBlock: critical
IPv4:
138.8.16.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:c2:77:f0:6d:d7:de:e6:88:6d:c3:67:5d:a0:47:b1:74:06:
a4:f5:c5:f8:00:7c:8a:a0:4a:8f:fd:51:e5:0e:5f:6f:1e:41:
f9:9e:84:3c:3a:57:74:f8:88:76:ed:8c:6c:d5:95:11:46:b0:
a8:74:0e:37:80:a4:7e:03:2a:c1:05:95:7f:3f:38:99:4a:28:
a5:af:67:a7:6a:dc:fd:e4:fa:d3:f0:99:af:b0:ff:5d:a7:25:
a3:30:fa:3f:be:40:17:3e:9f:7c:39:b9:d1:e8:af:08:d7:d4:
35:bd:a6:cf:7b:0c:df:f2:13:1a:3a:e4:30:35:a8:8f:11:8d:
a4:fc:08:8c:56:da:fe:01:1c:69:92:31:90:78:56:c9:fa:9d:
a3:12:e5:b4:be:52:e4:96:a8:1f:36:f9:aa:6d:d1:0f:3f:ef:
f1:71:54:cb:7b:14:9a:e7:7a:52:01:f6:5e:d3:28:2c:19:0a:
12:8b:22:1e:0f:f8:c3:cd:d6:68:36:a0:33:64:2f:b9:e8:07:
fe:5f:65:98:1a:1f:25:dd:7a:15:a0:39:47:97:bd:df:58:77:
91:74:98:0e:8e:1b:91:3f:d0:00:28:9c:4a:6b:af:2a:8e:fe:
bc:c6:b6:b0:61:81:6a:3b:51:c8:df:c5:7e:56:f3:f0:30:ba:
5e:a0:e8:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:34:23 2025 by rpki-client