Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/b44b5711-0436-3c6d-afd4-086e370fe33b.roa
File: b44b5711-0436-3c6d-afd4-086e370fe33b.roa (raw, json)
Hash identifier: M26WFFBdRdHWWSehVyd2edI7RI+zqjTwnQRP0nIsl2A=
Subject key identifier: D2:B7:6F:8D:54:D0:1E:32:BD:25:FF:8F:5E:A6:6C:D5:D8:EA:CE:34
Certificate issuer: /CN=6eb3f683-5247-4c55-a10b-2184f26c4f84
Certificate serial: 010D0C9F4328584900214E9FC73E5B54C675F600
Authority key identifier: 67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/b44b5711-0436-3c6d-afd4-086e370fe33b.roa
Signing time: Tue 25 Feb 2025 14:00:52 +0000
ROA not before: Tue 25 Feb 2025 14:00:52 +0000
ROA not after: Mon 26 May 2025 13:00:52 +0000
asID: 36445
IP address blocks: 161.38.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:00:21:4e:9f:c7:3e:5b:54:c6:75:f6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eb3f683-5247-4c55-a10b-2184f26c4f84
Validity
Not Before: Feb 25 14:00:52 2025 GMT
Not After : May 26 13:00:52 2025 GMT
Subject: CN=f52bb4c2-eb5d-4f77-921a-ead227f5dd2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:98:7a:60:2e:dd:b3:99:3d:8f:ac:bf:bc:dd:
bc:1d:32:3d:12:85:ca:1b:30:86:d0:48:03:1e:39:
d6:e8:39:cf:31:e5:20:38:ac:f4:0f:3b:e3:74:5b:
fb:20:c1:48:e8:75:d0:27:da:e5:76:c7:d3:ac:61:
2a:20:b3:9a:79:bc:f0:d3:a3:8b:e2:5a:de:e9:57:
21:f3:83:28:be:c5:e0:12:1c:65:27:a6:be:a7:9b:
33:57:da:3f:a3:29:e9:2a:ef:d8:bf:03:b1:46:f0:
33:0c:8b:b6:c3:90:3e:7c:27:29:c8:7f:c5:b9:d4:
55:c8:19:55:51:cb:f7:18:9e:e8:71:43:98:36:a9:
b1:39:67:4d:2b:1e:b5:24:70:8a:81:c9:da:75:3a:
d6:6e:26:8d:a6:b9:87:93:96:db:25:d1:8a:d9:89:
61:d8:2c:bf:90:78:f1:56:31:59:98:07:9f:b2:43:
ba:1f:b9:43:46:0e:39:18:e4:fe:64:06:56:16:e7:
29:f1:02:3a:a3:19:e5:54:fb:7e:74:ed:67:90:98:
22:87:a0:5e:83:b2:eb:7d:bd:ee:b8:76:0b:e1:9c:
5e:fa:6d:f5:41:5b:c5:7e:8e:01:e3:9c:e9:02:13:
92:08:99:31:d8:30:b5:59:f5:14:3e:47:0f:79:75:
d6:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B7:6F:8D:54:D0:1E:32:BD:25:FF:8F:5E:A6:6C:D5:D8:EA:CE:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/b44b5711-0436-3c6d-afd4-086e370fe33b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.crl
X509v3 Authority Key Identifier:
keyid:67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer
sbgp-ipAddrBlock: critical
IPv4:
161.38.21.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:74:c0:37:55:ee:8e:b0:c6:e2:87:f4:e2:29:47:7c:49:f4:
41:a3:37:0e:91:eb:06:6a:0d:9f:b3:d3:de:77:b8:23:f4:66:
4c:ea:3f:d4:b8:60:0b:ae:e3:1b:3d:62:61:a8:45:68:1f:8a:
72:80:c7:e3:5a:62:ad:ba:83:83:dc:42:b5:14:50:79:9b:3a:
01:0c:cf:7c:a3:ba:f1:c2:59:fc:78:9d:dd:f9:89:41:24:5d:
6a:db:b2:be:d4:be:92:26:49:9a:2e:42:d5:cc:e2:83:26:93:
04:0a:b6:3e:f5:cf:d9:d0:09:86:ea:6b:20:75:8d:2d:ed:fd:
a1:df:b5:a0:ab:dd:6c:54:4a:d8:6b:2c:54:5e:13:75:71:e3:
21:02:f3:9a:58:0e:b0:9b:20:66:14:ed:0b:14:46:c8:b4:24:
ab:00:c3:07:2d:5c:dd:80:5c:ce:e0:f6:95:42:85:27:10:8b:
0e:7a:38:23:96:69:d2:e9:e7:6f:cd:66:1d:9e:80:1b:0e:e7:
7e:16:ed:2d:0b:2a:3b:47:bf:5f:a7:1c:96:70:b2:b4:f7:69:
da:4b:ad:53:6f:55:b0:42:87:3c:ac:fa:b2:e8:ef:13:9c:9e:
9e:7e:4d:78:c3:7c:09:a8:c8:79:eb:16:a3:9e:cf:bd:61:55:
96:67:41:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:03:26 2025 by rpki-client