Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/035def30-19a3-3770-96c6-3387b1f7f2e2.roa
File: 035def30-19a3-3770-96c6-3387b1f7f2e2.roa (raw, json)
Hash identifier: 203xTuv08g5u6Azgid1Obi4YLn22eczStrpUew29IW0=
Subject key identifier: 36:2D:5A:72:02:25:45:34:24:2F:48:D2:0E:CB:79:57:92:7A:CE:37
Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial: 010D0C9F432858481C9A8FA31684BCA6D3CB0380
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/035def30-19a3-3770-96c6-3387b1f7f2e2.roa
Signing time: Fri 06 Dec 2024 02:00:39 +0000
ROA not before: Fri 06 Dec 2024 02:00:39 +0000
ROA not after: Thu 06 Mar 2025 02:00:39 +0000
asID: 16696
IP address blocks: 161.38.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1c:9a:8f:a3:16:84:bc:a6:d3:cb:03:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Validity
Not Before: Dec 6 02:00:39 2024 GMT
Not After : Mar 6 02:00:39 2025 GMT
Subject: CN=8d999093-de01-4b04-b8c6-d4ec61c9d1a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:cd:fa:8d:d6:0b:aa:12:e2:71:ac:95:1a:8d:
68:82:4b:44:b3:bf:be:9e:cf:a5:0e:5f:ec:11:5f:
7e:56:57:18:da:8d:2c:30:ed:27:5b:16:0d:45:8d:
39:bf:58:58:fa:c7:d2:03:48:2f:49:b5:87:e6:7d:
8a:7f:a0:97:9e:56:42:04:8b:c0:c6:0b:cd:15:7b:
3d:ee:af:bc:1d:de:75:74:85:d0:53:39:93:b8:29:
bd:e5:eb:83:42:a0:b4:e5:d6:ee:cc:e4:ff:5e:dd:
7e:24:d7:20:49:54:7f:53:9a:cb:12:d0:25:c8:f1:
b3:a2:60:c4:ba:0d:00:73:11:9e:73:f8:83:ae:9c:
fa:28:6f:e6:f6:9d:9b:65:61:3a:ca:4e:0c:2d:85:
62:43:fd:52:33:77:5e:dd:10:3a:c0:59:e5:76:38:
6c:d0:29:49:d5:da:e4:0b:47:9a:72:c9:ff:88:c2:
19:2a:d0:f1:f8:43:f8:42:2f:e1:2f:5a:e3:ba:fc:
d6:3a:72:4f:26:22:c3:a1:eb:d4:ef:04:e3:e2:61:
33:10:aa:8f:73:71:7a:3c:c6:ad:cd:bd:fc:a5:bb:
a8:e1:34:62:12:d0:24:ac:0f:11:94:6c:34:ee:79:
e7:dd:d8:25:1c:15:01:93:bd:5a:9f:c1:1d:d5:7c:
95:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:2D:5A:72:02:25:45:34:24:2F:48:D2:0E:CB:79:57:92:7A:CE:37
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/035def30-19a3-3770-96c6-3387b1f7f2e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
X509v3 Authority Key Identifier:
keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
sbgp-ipAddrBlock: critical
IPv4:
161.38.30.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:7d:61:8e:11:d8:42:ac:a1:27:27:a2:ce:25:47:ff:42:59:
84:13:31:e5:36:80:33:e2:d4:81:df:37:ff:b0:ea:47:51:72:
6e:52:8d:12:eb:86:ce:5c:92:13:90:5d:11:ff:35:62:11:f8:
8f:1c:78:0f:53:42:65:fc:b7:bb:24:49:9e:c9:07:50:27:c7:
36:36:bd:08:22:12:26:b0:7f:12:05:32:e7:d5:db:3d:8b:b5:
be:64:6f:7e:99:21:7e:00:0a:f0:ee:bc:31:0f:d8:63:72:d1:
d0:61:b7:7c:f8:77:56:67:fa:c8:dd:26:b4:01:e6:b1:d5:f5:
0e:7d:74:fd:c1:6b:98:d7:44:f4:2b:26:46:c3:98:9d:99:e0:
26:fd:99:a1:1f:68:46:fd:90:7e:77:f4:32:ef:28:42:b4:1e:
d4:aa:ad:9e:32:fe:a0:72:4d:38:54:4c:a6:b5:70:6a:ff:3e:
ab:25:50:73:36:af:7d:c3:bf:7f:6a:a3:27:2b:1f:26:04:b8:
9a:a6:a8:dc:02:9f:a3:31:46:f4:70:75:16:db:71:26:82:99:
c8:da:7a:38:8b:39:7d:00:56:87:ab:e2:b7:e3:05:27:ec:8f:
1f:f5:d5:1f:41:3d:89:e5:3d:0b:30:4d:18:04:bb:d6:1e:12:
f7:74:4b:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:32:15 2025 by rpki-client