Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1/dcf9e65a-be83-3af7-9131-27213172cafc.roa
File: dcf9e65a-be83-3af7-9131-27213172cafc.roa (raw, json)
Hash identifier: LJ5W4O2Fez3juqa/5dP9IHvQuzY1bXZtCpFXlDOHfgg=
Subject key identifier: C8:76:5A:47:17:D1:E1:19:C0:96:83:EE:5B:FA:16:EC:0A:62:D8:4F
Certificate issuer: /CN=66610284-035b-4928-833d-55f67bcdadc1
Certificate serial: 010D0C9F4328584827C54EF2867260AF78B42500
Authority key identifier: 32:AF:D3:AC:41:06:54:F4:2A:D6:37:1C:C5:76:F9:3A:2A:AA:30:D1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1/dcf9e65a-be83-3af7-9131-27213172cafc.roa
Signing time: Tue 10 Dec 2024 02:00:40 +0000
ROA not before: Tue 10 Dec 2024 02:00:40 +0000
ROA not after: Mon 10 Mar 2025 01:00:40 +0000
asID: 400587
IP address blocks: 121.127.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:c5:4e:f2:86:72:60:af:78:b4:25:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66610284-035b-4928-833d-55f67bcdadc1
Validity
Not Before: Dec 10 02:00:40 2024 GMT
Not After : Mar 10 01:00:40 2025 GMT
Subject: CN=0395a786-dcae-435f-901b-82c356040d49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d5:e4:fc:83:f7:10:81:2a:39:d7:1b:46:fb:
08:59:a4:56:1d:ce:2d:62:49:16:99:e6:b1:28:b4:
9d:e1:7c:e1:44:9c:62:ce:c7:31:4c:ab:5a:62:20:
6d:a3:56:72:cc:f1:23:1b:dd:e1:56:79:83:a8:a5:
54:98:ce:6a:4f:23:68:e0:f0:be:a3:29:07:e4:fa:
2c:45:77:b1:1d:c3:b2:99:df:83:33:6e:6b:47:07:
41:57:65:a3:7d:b9:7a:98:9e:2c:7d:6b:fd:ef:80:
ac:b0:4b:d0:9f:a8:dc:08:35:f0:ce:30:d1:1b:b4:
f4:bb:c3:e7:48:ef:d8:d8:f1:27:4b:eb:33:a6:52:
6d:a7:a6:51:67:38:01:f2:16:81:a5:02:82:c5:0b:
da:ee:ee:3f:e2:9e:d8:53:5c:16:57:a5:b8:13:ca:
10:40:84:f3:9b:e5:61:87:fa:ac:31:55:89:dc:5e:
2c:ee:90:8d:1d:5c:9c:b6:e3:3f:1f:80:56:3b:4a:
3b:13:95:5c:98:1c:bb:8e:2d:53:36:5f:16:80:33:
66:67:c2:d0:c4:fc:79:88:5e:c9:89:60:87:83:35:
bf:0b:d4:f2:41:e2:c9:d4:2c:e1:06:3a:ee:6c:75:
23:1e:33:b8:35:b8:c8:ba:1a:99:8d:82:36:3d:9b:
89:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:76:5A:47:17:D1:E1:19:C0:96:83:EE:5B:FA:16:EC:0A:62:D8:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1/dcf9e65a-be83-3af7-9131-27213172cafc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1/66610284-035b-4928-833d-55f67bcdadc1.crl
X509v3 Authority Key Identifier:
keyid:32:AF:D3:AC:41:06:54:F4:2A:D6:37:1C:C5:76:F9:3A:2A:AA:30:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1.cer
sbgp-ipAddrBlock: critical
IPv4:
121.127.34.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:dc:d6:b6:b7:37:e5:62:14:07:15:07:50:aa:0f:5e:42:f6:
70:6b:91:04:95:be:ca:34:51:ad:49:7c:9a:10:a4:e7:69:db:
3e:b3:21:e9:c6:9e:6b:52:a8:5b:ae:bf:5e:09:86:10:fd:f2:
7c:e0:c6:00:bd:b8:d7:41:7d:06:d3:69:72:48:8a:39:87:07:
ba:82:1f:e6:a2:9a:4e:15:2a:18:ef:2c:c9:64:ca:82:3b:9a:
81:c2:21:a8:9f:ce:81:88:e8:69:98:54:19:74:cd:53:40:48:
2a:a2:e3:2a:6d:a3:d4:0a:39:c9:59:67:13:03:45:99:fb:46:
f7:02:c7:e8:95:48:ec:b2:50:55:03:13:54:ae:54:b7:66:22:
31:5f:e2:cd:1b:53:65:a5:f8:a4:ad:51:97:34:a5:5a:97:52:
14:03:32:87:6d:ed:6b:76:82:34:4c:ad:09:75:4e:9c:63:0c:
b8:14:aa:b1:40:33:47:aa:c2:f1:0a:05:83:19:c6:de:eb:23:
2c:17:6f:4d:ab:93:33:10:e7:83:ec:11:76:0a:55:f2:3c:06:
53:9b:6c:54:7f:dc:7f:79:3b:0b:14:02:05:55:05:0c:61:74:
7f:57:ee:b1:e2:b4:cf:8f:11:07:bc:11:f7:e0:ae:69:24:82:
d6:7c:3f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:51:33 2025 by rpki-client