Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/2e8df3d4-3025-3380-9b1a-2c42275f0b15.roa
File: 2e8df3d4-3025-3380-9b1a-2c42275f0b15.roa (raw, json)
Hash identifier: bZR79RUVyL0xRE4Ia7Axt/LPjl2GBB9bILpQbWwIuIg=
Subject key identifier: 15:57:F1:58:88:2A:9F:EE:56:58:0D:2C:B6:5F:5A:70:63:B0:36:E2
Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial: 010D0C9F432858481C9A8F69187AC1BF95699F00
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/2e8df3d4-3025-3380-9b1a-2c42275f0b15.roa
Signing time: Fri 06 Dec 2024 02:00:39 +0000
ROA not before: Fri 06 Dec 2024 02:00:39 +0000
ROA not after: Thu 06 Mar 2025 02:00:39 +0000
asID: 16696
IP address blocks: 161.38.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1c:9a:8f:69:18:7a:c1:bf:95:69:9f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Validity
Not Before: Dec 6 02:00:39 2024 GMT
Not After : Mar 6 02:00:39 2025 GMT
Subject: CN=ba42040f-9a67-44e3-8195-3239f8c6832b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ce:19:5e:12:a8:95:49:ee:d0:2d:45:86:d1:
9e:11:84:e8:cd:c1:df:3e:d5:26:4e:d4:fb:57:08:
ee:d4:bd:63:8a:dc:60:2d:a3:91:d8:5f:f5:c9:d5:
f6:d9:2e:5f:c0:93:80:ae:62:49:dc:a7:20:e4:bc:
fa:0f:b4:25:61:ed:a0:d3:75:7a:64:5b:f0:b9:07:
0e:c1:4a:d4:75:3b:7b:2e:51:e2:25:b0:74:b6:a9:
87:40:16:a3:1d:a7:c6:41:4a:d1:2b:90:ce:33:12:
87:02:0c:44:f5:3e:df:83:fa:df:91:7b:c5:0a:4b:
9c:74:eb:c1:62:f3:af:53:0b:79:9f:c3:7e:18:87:
9c:fc:c7:b8:b2:eb:12:6c:eb:51:7c:80:a1:33:e0:
5a:ce:17:0f:23:c7:19:5f:fa:fa:63:e7:39:40:67:
f9:5c:c2:d6:80:42:ce:60:26:bf:3d:fc:69:49:21:
1b:e4:c3:ab:a7:9f:70:b7:ec:af:8c:cd:eb:1c:d5:
a1:28:3a:ff:8e:e5:50:a2:07:af:bf:c3:b3:14:c9:
08:36:1b:89:93:1c:a1:2a:70:f5:60:d8:ba:d2:cd:
22:08:8d:90:68:cf:55:69:95:74:2a:59:fb:57:7c:
36:80:bf:7d:30:8a:3a:c5:8b:10:b1:24:5c:7f:e6:
c6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:57:F1:58:88:2A:9F:EE:56:58:0D:2C:B6:5F:5A:70:63:B0:36:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/2e8df3d4-3025-3380-9b1a-2c42275f0b15.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
X509v3 Authority Key Identifier:
keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
sbgp-ipAddrBlock: critical
IPv4:
161.38.25.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:75:b0:2d:fd:01:98:0a:90:95:b9:1f:99:aa:0c:fa:bd:88:
9f:9d:7e:81:7b:3d:57:4b:26:63:d8:a4:db:7a:96:25:2c:b3:
3a:45:b9:45:c9:b7:ef:06:33:75:60:7e:4e:39:35:4f:06:09:
a4:4f:2c:d1:5c:96:62:a4:d7:2a:1d:40:84:19:86:82:9e:94:
39:a3:db:7e:40:a5:50:70:95:21:0f:63:66:c0:82:97:4c:27:
8d:2e:60:b2:6a:75:ee:24:f9:b7:25:02:19:5c:36:93:07:11:
21:f1:67:11:75:63:80:a5:77:b5:a0:0e:69:42:a9:19:7b:94:
08:bc:70:46:4a:35:55:92:a7:b7:16:b8:03:c6:0d:b8:59:70:
a8:6e:cf:5e:3e:0c:dc:c5:cf:a0:2e:02:20:3c:7f:b1:43:d0:
c7:1e:13:fc:c6:e3:c9:78:2d:83:b5:69:9b:f2:7b:11:18:9b:
2e:63:44:fd:ab:f5:66:de:9d:cc:d0:0b:d1:77:6a:e1:e3:b7:
9d:76:4e:65:1b:c4:20:85:33:f8:e9:56:39:76:22:b4:5c:59:
79:58:47:5b:85:ec:aa:fb:36:a8:3d:1a:da:5a:39:5b:dd:a7:
23:b3:e3:08:7f:7b:84:cc:e7:2a:1f:97:ff:4e:52:64:a6:d7:
71:a1:55:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:27:24 2025 by rpki-client