Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/df81f8d2-6da0-3290-b864-c6d6e634429c.roa
File: df81f8d2-6da0-3290-b864-c6d6e634429c.roa (raw, json)
Hash identifier: BbnvetEgI9XTlC5NcJVMrGJCa1JJyIlAF/EW0722iIg=
Subject key identifier: 17:27:B7:F1:CC:4E:D0:7F:3D:15:79:1F:48:3D:44:87:1F:6C:82:0F
Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial: 010D0C9F432858481C9A8F9611DF2409551DDBC0
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/df81f8d2-6da0-3290-b864-c6d6e634429c.roa
Signing time: Fri 06 Dec 2024 02:00:39 +0000
ROA not before: Fri 06 Dec 2024 02:00:39 +0000
ROA not after: Thu 06 Mar 2025 02:00:39 +0000
asID: 16696
IP address blocks: 161.38.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1c:9a:8f:96:11:df:24:09:55:1d:db:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Validity
Not Before: Dec 6 02:00:39 2024 GMT
Not After : Mar 6 02:00:39 2025 GMT
Subject: CN=6171e439-12fe-4c84-a35c-68636c3965fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:d3:dd:39:25:a4:58:9d:5a:1f:ad:d2:14:e0:
c8:fb:82:6a:3f:4e:57:b1:4f:dd:f8:8d:00:1a:46:
d5:6d:6c:f6:32:4a:44:71:99:39:16:d8:d4:31:df:
67:41:29:6f:28:0a:24:18:bb:23:bf:b9:19:2e:fa:
59:56:a4:ed:69:80:9b:ec:a6:9a:51:65:22:c9:c8:
1b:9d:1e:56:30:74:2c:55:6a:08:c2:d6:c0:77:77:
53:33:58:14:79:97:29:75:11:24:0c:c9:e1:98:dc:
c0:b8:d0:f8:5c:d1:0a:bd:6c:29:a4:a8:43:ac:34:
d3:fd:d7:ed:f4:15:8e:35:8d:2a:4d:a5:ec:0e:01:
f7:6a:b2:ee:a9:0f:d0:2f:ff:d3:a6:47:41:32:21:
ec:dd:16:50:7f:5c:14:84:bd:0e:e9:46:12:7e:c3:
3e:e5:65:7a:de:1c:ee:f8:51:e7:1d:08:07:39:2e:
14:b3:22:9c:c3:d3:c7:8d:67:4a:ae:ca:52:50:5b:
57:ae:73:ae:e9:72:02:b5:f6:ce:b7:57:6a:6e:fb:
af:58:5e:8b:43:09:35:a8:78:a5:e6:d3:92:dd:1d:
e6:20:24:ff:a3:bf:47:67:54:8b:1e:84:e2:af:c6:
9d:18:e6:7d:93:ce:82:3a:24:c2:c1:29:36:ab:06:
0d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:27:B7:F1:CC:4E:D0:7F:3D:15:79:1F:48:3D:44:87:1F:6C:82:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/df81f8d2-6da0-3290-b864-c6d6e634429c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
X509v3 Authority Key Identifier:
keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
sbgp-ipAddrBlock: critical
IPv4:
161.38.29.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:fd:2b:82:fb:86:7e:17:0c:86:3b:e1:bb:8b:ec:f8:07:51:
46:37:d3:b9:00:b0:8e:5c:1d:19:1d:e5:a9:47:50:00:2d:6e:
93:44:a3:56:3a:4b:49:fe:e1:14:e7:cf:0f:d4:78:88:9a:65:
ef:7f:60:63:8b:e6:c8:78:c5:7f:61:3a:2e:f4:54:aa:56:fc:
49:2b:9d:51:69:77:09:a6:f3:50:96:e1:76:17:35:82:3d:12:
8b:f4:e7:dd:52:fa:a1:ed:88:5b:68:f2:c3:9a:3b:f5:57:aa:
ab:65:5c:5d:3c:47:f0:5b:f4:78:a3:a7:72:a8:78:64:28:74:
ba:52:77:6a:95:cb:d3:dd:6a:b5:39:f5:ad:ff:61:65:90:69:
5e:93:3d:87:9e:e2:b1:46:5a:99:f4:aa:22:50:be:dc:d3:9a:
a1:0e:6b:c6:46:98:2c:1f:53:37:b2:a1:dd:9b:4e:53:bb:ec:
5a:f7:9f:21:79:93:33:d1:61:5e:c4:7d:2e:3d:2e:4a:23:1b:
32:a2:bf:19:eb:f7:52:43:f8:d6:c4:6d:6b:94:48:35:ad:e3:
96:3b:60:2b:79:e8:a3:ed:5d:cc:6c:b5:f8:fd:59:f2:8b:5e:
5b:da:a5:bd:3e:c7:6b:c1:54:96:70:dc:2f:b9:40:f0:3b:ef:
aa:94:bf:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:26:06 2025 by rpki-client