Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0dcaf072-199d-43a3-8b8a-0a2b28940ac6/e8c8d5c6-32bd-3820-990c-f66f5a163261.roa
File: e8c8d5c6-32bd-3820-990c-f66f5a163261.roa (raw, json)
Hash identifier: Qn0BaYfO1XshKXAgEpz4fQfww6z+1zx+bD1FkHj8aGs=
Subject key identifier: EA:0D:B7:94:71:F2:10:4D:94:3C:23:F3:C4:9C:11:46:1E:C1:50:3B
Certificate issuer: /CN=0dcaf072-199d-43a3-8b8a-0a2b28940ac6
Certificate serial: 010D0C9F432858489340AF98344BE0C1F8F197C0
Authority key identifier: 91:ED:8E:88:B0:FD:91:15:57:AE:29:AA:3B:C4:DE:A4:87:50:3D:9D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0dcaf072-199d-43a3-8b8a-0a2b28940ac6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0dcaf072-199d-43a3-8b8a-0a2b28940ac6/e8c8d5c6-32bd-3820-990c-f66f5a163261.roa
Signing time: Fri 17 Jan 2025 14:00:53 +0000
ROA not before: Fri 17 Jan 2025 14:00:53 +0000
ROA not after: Thu 17 Apr 2025 13:00:53 +0000
asID: 398038
IP address blocks: 161.38.62.0/23 maxlen: 24
192.173.144.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:93:40:af:98:34:4b:e0:c1:f8:f1:97:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dcaf072-199d-43a3-8b8a-0a2b28940ac6
Validity
Not Before: Jan 17 14:00:53 2025 GMT
Not After : Apr 17 13:00:53 2025 GMT
Subject: CN=8e00b902-bc79-4afe-9177-bd047e454754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:66:f2:be:5a:30:b3:e9:bb:fa:31:43:01:b7:
7c:f4:24:55:b6:be:19:cb:13:3d:b6:1f:81:43:19:
a5:d0:71:45:48:ff:c4:c5:e3:d0:8f:41:05:be:b1:
86:3f:bb:88:b0:d8:c9:cc:fe:c3:a8:d8:45:4b:cd:
61:ec:92:dd:59:fc:1b:60:f3:50:94:98:1c:5c:89:
f9:c6:69:8f:93:b5:2f:20:f2:9e:f9:ec:c9:ad:01:
57:60:95:aa:3c:b8:69:d9:bc:81:f7:f6:a5:3d:32:
ed:f0:d7:26:32:cf:20:ee:93:61:71:d0:19:d9:f7:
43:d9:df:f1:66:eb:cd:af:52:b8:73:b9:34:74:13:
dc:f7:26:f6:a9:8a:39:d8:1a:6a:d4:7f:95:12:7b:
fe:56:77:dc:39:a5:8a:8a:46:fe:06:7c:5f:da:cd:
42:5c:37:c5:eb:38:9e:59:c4:dc:d9:9a:4d:16:76:
e9:b6:72:7a:cc:a1:02:4b:61:84:c7:82:61:69:13:
b2:96:a7:d4:05:4e:75:e6:03:94:1d:e6:9b:6d:4b:
3a:8a:ab:ae:a6:78:f2:c1:33:17:e7:78:0d:bc:95:
31:93:75:38:c6:41:14:bc:fd:43:e6:db:1c:23:a4:
55:ef:e3:2b:c1:72:f8:07:f7:21:53:be:0a:20:29:
c3:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:0D:B7:94:71:F2:10:4D:94:3C:23:F3:C4:9C:11:46:1E:C1:50:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0dcaf072-199d-43a3-8b8a-0a2b28940ac6/e8c8d5c6-32bd-3820-990c-f66f5a163261.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0dcaf072-199d-43a3-8b8a-0a2b28940ac6/0dcaf072-199d-43a3-8b8a-0a2b28940ac6.crl
X509v3 Authority Key Identifier:
keyid:91:ED:8E:88:B0:FD:91:15:57:AE:29:AA:3B:C4:DE:A4:87:50:3D:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0dcaf072-199d-43a3-8b8a-0a2b28940ac6.cer
sbgp-ipAddrBlock: critical
IPv4:
161.38.62.0/23
192.173.144.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:8a:32:4d:bf:04:6c:ef:1f:15:59:e8:04:a1:99:46:8a:03:
1b:9a:3c:be:bc:95:11:b7:fe:42:f0:e9:ea:a1:fd:5a:73:1c:
b0:e4:89:aa:50:3c:fb:e4:50:11:d5:24:82:fa:7d:b1:99:7a:
20:32:5b:a9:d8:bf:2a:31:65:db:4c:89:34:b8:03:81:3c:57:
aa:2e:a0:05:1e:a0:93:5c:0b:05:45:1e:1b:b5:c1:8e:f4:e6:
f4:e2:6d:21:c2:f1:ec:b2:62:70:de:87:83:74:44:b2:42:9f:
fb:d4:3c:bb:d3:bc:e8:ce:8b:c7:a6:98:2b:36:b3:95:11:13:
9f:7a:87:a8:70:df:fc:88:ec:bb:f7:d8:9b:71:9e:56:cd:42:
dd:f1:9e:71:a9:a4:a2:00:e0:32:90:36:6a:b5:ea:15:b9:e3:
49:58:63:16:3a:82:0f:15:0b:61:83:87:a8:70:a3:3c:24:6f:
77:3d:65:63:eb:79:e2:5d:dc:fd:d4:7a:e7:95:28:56:21:c1:
8b:2c:82:f9:47:18:5a:7c:d4:f0:92:02:e8:cb:9a:59:4d:3c:
77:46:77:e3:fe:e6:08:54:94:d5:b1:2a:b6:e4:b0:68:87:11:
5b:61:5c:0a:42:67:d2:c7:a2:c8:0b:39:ca:b8:cb:6b:49:ce:
13:c7:be:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:13:03 2025 by rpki-client