Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/41b5e438-b014-3c69-b95f-0b9da7ce1eb7.roa
File: 41b5e438-b014-3c69-b95f-0b9da7ce1eb7.roa (raw, json)
Hash identifier: JgxW477hRN6YaVgVo1EsnegLchuMWyBlg6XT40lnR1E=
Subject key identifier: F2:35:36:C6:C4:F0:FF:82:B1:16:8C:41:04:C1:98:64:2E:3F:9C:E2
Certificate issuer: /CN=b38f5b7a-6c56-4279-aa50-3499b1fb606b
Certificate serial: 010D0C9F43285848090FBF9D3C2D0FCF18BAE680
Authority key identifier: 04:13:C3:E2:D5:03:AC:7D:22:1A:21:48:5A:DC:22:8B:A4:87:B2:D5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/41b5e438-b014-3c69-b95f-0b9da7ce1eb7.roa
Signing time: Fri 29 Nov 2024 02:00:39 +0000
ROA not before: Fri 29 Nov 2024 02:00:39 +0000
ROA not after: Thu 27 Feb 2025 02:00:39 +0000
asID: 40628
IP address blocks: 192.149.244.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:09:0f:bf:9d:3c:2d:0f:cf:18:ba:e6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b38f5b7a-6c56-4279-aa50-3499b1fb606b
Validity
Not Before: Nov 29 02:00:39 2024 GMT
Not After : Feb 27 02:00:39 2025 GMT
Subject: CN=fbf3c67a-c495-4a31-a118-a5427ed95654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:6a:a5:b6:b5:9a:20:02:03:b0:33:54:b2:4c:
dd:dc:4a:ad:d7:58:eb:46:49:8b:e0:66:a7:3b:03:
02:e4:b5:65:a3:30:c4:9c:ae:83:28:06:a7:a8:d6:
04:d1:cc:69:d7:c8:0e:f4:dc:a6:f7:7a:bb:98:50:
e5:7c:60:21:a6:b8:62:77:c6:a4:20:18:8f:83:fb:
59:73:6a:7c:bc:0c:4a:fd:6b:73:7a:66:d3:9f:7a:
2f:48:99:3a:01:81:d7:27:23:c9:92:72:12:26:9a:
21:73:d7:91:fb:ad:83:9c:5a:25:8b:f2:fc:02:3d:
b3:7e:49:4b:42:e5:4f:ad:9f:d4:68:91:b6:ea:c8:
cc:83:c2:7c:2f:7b:67:39:b0:a5:3d:90:4e:8a:a5:
9a:34:b8:3f:8a:9b:4b:84:33:c4:c8:bd:aa:62:e5:
eb:5f:07:75:c9:99:05:a3:92:cf:8e:77:79:db:88:
c4:01:42:70:de:5d:23:9f:31:9e:27:f8:21:c5:73:
19:cb:9f:67:a9:10:bf:49:3d:a4:54:52:63:fd:d5:
fb:62:31:1d:34:f7:ca:10:f5:62:2e:9a:12:fc:35:
37:9f:70:9c:f3:de:17:84:e6:74:11:70:2d:0e:ea:
54:1f:68:8b:83:34:5d:09:d0:5e:0b:2b:0f:f5:8b:
ef:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:35:36:C6:C4:F0:FF:82:B1:16:8C:41:04:C1:98:64:2E:3F:9C:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/41b5e438-b014-3c69-b95f-0b9da7ce1eb7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/b38f5b7a-6c56-4279-aa50-3499b1fb606b.crl
X509v3 Authority Key Identifier:
keyid:04:13:C3:E2:D5:03:AC:7D:22:1A:21:48:5A:DC:22:8B:A4:87:B2:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b.cer
sbgp-ipAddrBlock: critical
IPv4:
192.149.244.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:22:fe:34:dd:e4:ac:81:c1:31:94:ef:52:41:c9:37:0b:cd:
3d:c7:7d:82:3c:18:ef:52:a8:4f:c8:f8:8d:91:bc:4c:c5:f0:
39:76:60:51:7d:1e:df:3e:4d:15:b9:75:33:ed:77:da:65:46:
a1:81:28:fb:1a:9c:a1:af:b1:c6:06:ab:e2:f4:91:a1:a3:c7:
9a:70:e6:30:f4:ac:a2:60:1e:f2:f6:c1:be:b7:06:86:6c:bf:
9f:fb:42:3a:14:92:94:d2:62:d6:ed:d2:3d:18:69:3f:da:88:
41:38:d6:3c:51:ad:9b:9d:55:5c:bd:70:ab:f1:eb:5f:28:16:
92:2a:4b:3a:b0:cc:67:6d:02:cb:5a:88:cc:6c:b9:d5:0f:2e:
cc:f8:a4:90:cb:a4:a3:bc:c8:99:0d:43:91:23:56:67:70:53:
f4:c2:71:ce:9b:81:85:59:4c:d0:66:99:ef:29:b8:93:44:41:
12:b8:84:36:e6:b5:c4:5d:29:c0:d3:20:e3:e3:d0:f5:0e:44:
75:f1:2e:cd:51:d2:68:8f:25:12:e4:aa:82:5e:c4:d6:bd:c4:
9f:9c:69:91:e0:45:45:73:60:c7:fb:e4:e7:d1:27:23:6b:fd:
21:b1:fb:24:f3:02:e0:38:62:09:e4:67:e8:ac:72:d9:49:27:
e8:31:63:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 18:39:06 2025 by rpki-client