Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/0155e4f1-7cd4-3db7-aa49-5dd276ac8b4c.roa
File: 0155e4f1-7cd4-3db7-aa49-5dd276ac8b4c.roa (raw, json)
Hash identifier: fGznlYdT4RKkJ4pF+waHvTxYN6h+voPrN285SlNjVl8=
Subject key identifier: BF:C9:02:34:21:48:CB:47:44:E0:91:E9:74:E9:37:48:EF:B2:D4:6E
Certificate issuer: /CN=4c5f6fb8-1f68-4792-8def-a616a53280be
Certificate serial: 010D0C9F432858480EA506C9FF86A3A76F2A3F40
Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/0155e4f1-7cd4-3db7-aa49-5dd276ac8b4c.roa
Signing time: Sun 01 Dec 2024 02:00:39 +0000
ROA not before: Sun 01 Dec 2024 02:00:39 +0000
ROA not after: Sat 01 Mar 2025 02:00:39 +0000
asID: 18593
IP address blocks: 138.8.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0e:a5:06:c9:ff:86:a3:a7:6f:2a:3f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be
Validity
Not Before: Dec 1 02:00:39 2024 GMT
Not After : Mar 1 02:00:39 2025 GMT
Subject: CN=8efc1068-5dfb-48ad-9b2f-5fb4d3f04e36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1e:d4:07:be:b2:ea:58:ad:78:ff:a1:1b:c1:
30:29:0b:44:94:7f:5c:14:87:cd:64:04:6b:2d:41:
4f:18:81:95:39:c3:16:16:71:e7:37:4f:1d:08:02:
de:07:59:41:9a:0b:4f:7d:b4:a8:2b:68:bf:34:0b:
f7:43:a0:79:11:30:34:94:46:cd:38:bb:af:2a:69:
86:92:18:72:92:a5:84:1c:39:d2:21:0b:83:55:b7:
f8:21:ad:79:10:e8:dc:1f:ce:e0:ac:1a:50:55:0a:
b3:9d:9f:61:32:6c:a2:e1:dd:1a:c2:72:e5:7d:ec:
8f:42:02:dc:b7:6a:38:cd:ad:c6:28:1b:9e:cb:50:
8b:d1:93:24:d4:b6:c4:37:2f:ff:d3:17:a3:ba:06:
37:ab:75:ee:6a:23:59:7d:60:02:ca:cb:be:bf:d1:
07:c3:00:d6:12:a3:81:e5:b2:e3:1e:02:ca:cc:02:
7c:dd:49:ff:5b:09:80:78:20:e8:f3:74:85:c2:3e:
46:ea:0e:b9:de:b4:a9:06:32:0b:c8:4e:35:80:20:
55:d0:4b:df:d9:b4:a0:31:e0:20:8c:7f:8b:80:2c:
1d:b9:46:34:79:86:a3:6e:5b:12:8d:3b:f6:ae:de:
e9:41:2a:76:af:91:cf:40:1d:66:60:8a:f3:ea:06:
2f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:C9:02:34:21:48:CB:47:44:E0:91:E9:74:E9:37:48:EF:B2:D4:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/0155e4f1-7cd4-3db7-aa49-5dd276ac8b4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl
X509v3 Authority Key Identifier:
keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer
sbgp-ipAddrBlock: critical
IPv4:
138.8.109.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:b6:82:ce:92:5c:e8:67:c1:73:56:0b:73:70:2a:da:73:a8:
d1:f2:98:1a:28:fa:75:72:63:ee:f5:1f:97:f2:22:ce:15:1e:
60:8f:f8:18:ea:90:08:45:c2:14:50:aa:ee:c0:52:d0:6a:6a:
10:b3:7a:cf:9a:66:b5:7d:e6:76:4d:e1:54:ea:9e:c4:19:54:
6f:0b:e7:09:1c:8d:33:c4:b8:61:73:8b:ed:4d:75:4f:8c:25:
9f:65:6c:9f:d9:99:a3:f3:cc:ee:3d:88:10:56:6a:70:85:61:
a0:70:8a:87:2d:63:ba:be:40:ca:ef:95:82:35:ef:01:02:11:
4d:f6:47:a2:9a:cf:a6:c1:9d:57:07:5d:dc:5b:e7:59:bd:4e:
e9:c1:fa:03:b3:9e:8c:64:e4:be:a5:72:8d:6d:91:7f:4d:5c:
7d:bd:5b:8f:50:12:77:c6:a3:7f:ad:dc:c8:a8:8a:8f:90:d5:
2e:d5:48:4b:e1:d3:e0:82:1f:fb:fd:b6:f8:73:50:3a:1f:6c:
56:09:18:e8:6c:0d:b3:30:55:db:3d:96:83:b4:3a:21:75:f9:
4c:a6:16:7e:38:d8:dc:5a:e5:99:58:76:21:70:40:50:7b:56:
4b:ad:03:9b:2f:9b:1c:77:d9:93:df:12:6e:16:c7:81:01:9c:
c7:ba:fe:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:22:43 2025 by rpki-client