Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/f585be5d-4b82-3039-bcb5-12d932832a7c.roa
File: f585be5d-4b82-3039-bcb5-12d932832a7c.roa (raw, json)
Hash identifier: zPO6aMREXFS7NC0XnF/XnSjkdywacv2aJ8SyKTdYORY=
Subject key identifier: 2A:31:0B:B4:18:D6:1B:2B:0E:2C:48:D9:2A:B4:B5:C8:B0:96:6E:6D
Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial: 010D0C9F432858481C9A8F4A33FA1150D867DB00
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/f585be5d-4b82-3039-bcb5-12d932832a7c.roa
Signing time: Fri 06 Dec 2024 02:00:39 +0000
ROA not before: Fri 06 Dec 2024 02:00:39 +0000
ROA not after: Thu 06 Mar 2025 02:00:39 +0000
asID: 16696
IP address blocks: 161.38.24.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1c:9a:8f:4a:33:fa:11:50:d8:67:db:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Validity
Not Before: Dec 6 02:00:39 2024 GMT
Not After : Mar 6 02:00:39 2025 GMT
Subject: CN=7f2142ce-fbe8-4dfc-93f3-e26b46ed2e99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:c1:10:36:2f:81:86:20:c3:4b:9a:9d:bf:72:
7a:82:1d:8a:e2:1f:1d:05:ab:ee:c2:b4:e2:90:cc:
e4:89:ff:07:bd:e5:e0:7a:49:c6:5a:8b:d8:18:ab:
d3:bb:6e:61:81:c6:9b:02:9b:20:1b:f2:6e:16:b1:
7c:6a:7f:f7:4d:b8:43:4c:99:cc:10:d5:be:db:c0:
da:b0:88:69:19:2e:09:52:02:6b:90:a9:10:d1:74:
d0:04:00:2a:f1:55:0a:09:5e:af:33:3a:e6:04:cc:
14:a1:66:df:31:53:e5:85:e0:80:88:68:b2:2f:a9:
2e:03:c7:37:2e:6c:cd:91:94:b6:61:f9:7d:8e:6e:
e6:e9:b3:c3:47:80:60:29:27:08:c1:0c:62:1e:ad:
c6:f8:8a:a9:af:2f:fe:c8:c1:10:2c:c7:05:27:94:
ce:eb:6c:00:3c:11:b6:c3:bf:bc:e1:41:a1:72:e1:
66:71:3d:a6:0c:51:75:b6:ef:43:9b:83:bd:9e:17:
22:9a:62:ff:5a:2a:c0:a8:03:1f:fc:37:03:85:da:
2d:d4:60:c2:44:c3:57:fc:c8:2a:ac:c3:3b:c0:45:
33:b4:d3:dd:bb:46:fd:8b:a5:7a:44:6a:e8:47:0f:
05:04:6e:26:b2:d5:5d:b9:9c:c4:49:71:83:38:f0:
33:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:31:0B:B4:18:D6:1B:2B:0E:2C:48:D9:2A:B4:B5:C8:B0:96:6E:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/f585be5d-4b82-3039-bcb5-12d932832a7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
X509v3 Authority Key Identifier:
keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
sbgp-ipAddrBlock: critical
IPv4:
161.38.24.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:d3:a8:d0:14:b6:07:83:ed:ee:36:ed:d4:ac:6a:12:89:8e:
d3:67:a9:57:77:19:9d:57:96:3a:90:38:09:5d:75:71:65:82:
72:4d:7b:d0:21:13:d0:ef:b2:91:ee:f4:72:0a:88:19:a5:21:
a9:90:3f:d9:2c:1a:3e:37:ea:c3:e5:bc:3c:93:a3:7f:4c:57:
a9:fa:dd:96:ae:97:59:7e:b8:e2:39:e7:ec:65:8d:db:fa:9c:
78:e0:cb:b2:b5:c7:20:09:94:0b:2b:4a:99:e1:1b:e7:2a:25:
1c:0e:33:0d:22:a9:13:03:65:a8:7f:70:a6:36:a1:92:d0:b2:
fa:d8:9d:16:d7:67:80:b9:82:29:c0:8e:74:63:27:28:4b:62:
5b:d5:a4:6e:67:8b:c2:9d:86:17:05:4f:d1:82:31:74:ab:31:
3a:c9:60:db:17:7a:65:e7:f4:f2:37:37:f2:83:f0:0b:67:da:
1c:a1:0b:d6:1f:50:35:a1:a4:04:3c:6b:15:86:f3:94:62:9e:
57:20:91:04:dc:f7:7e:d1:f6:5b:33:b6:49:f8:c5:79:8a:c2:
d6:0c:5a:f9:75:50:4a:59:e8:e7:35:37:37:bd:19:84:9c:f0:
e3:5c:60:de:e2:d3:c4:e4:5d:fd:0c:6e:27:b5:2a:7f:07:7f:
82:57:8e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:23:44 2025 by rpki-client