Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/02f90fd8-7e23-3fcc-bb0f-2ff8206ae2fb.roa
File: 02f90fd8-7e23-3fcc-bb0f-2ff8206ae2fb.roa (raw, json)
Hash identifier: qjgdRk6FvAqsD6J95lnosKKnv7HhqO14EtBcNm8IYN0=
Subject key identifier: 81:D3:09:CD:B7:F1:6B:DD:57:1D:3B:5E:3F:9C:16:91:54:59:C4:AE
Certificate issuer: /CN=4c5f6fb8-1f68-4792-8def-a616a53280be
Certificate serial: 010D0C9F432858480EA506A86542BFF88CE92180
Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/02f90fd8-7e23-3fcc-bb0f-2ff8206ae2fb.roa
Signing time: Sun 01 Dec 2024 02:00:39 +0000
ROA not before: Sun 01 Dec 2024 02:00:39 +0000
ROA not after: Sat 01 Mar 2025 02:00:39 +0000
asID: 18593
IP address blocks: 138.8.74.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0e:a5:06:a8:65:42:bf:f8:8c:e9:21:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be
Validity
Not Before: Dec 1 02:00:39 2024 GMT
Not After : Mar 1 02:00:39 2025 GMT
Subject: CN=96950d5e-5e93-4c21-85a8-83b27908cefb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:50:00:a6:e1:94:85:4c:b1:73:f4:f9:1c:52:
e0:bd:7f:8c:e2:23:7b:ea:a6:15:bb:0e:a4:0c:81:
7d:06:a2:f1:0b:9f:55:84:6b:3f:99:77:7b:5a:11:
23:a6:8d:56:a5:3f:9e:c0:bf:0e:1f:c4:30:9a:29:
22:bd:fe:a0:3f:df:f7:cb:89:62:67:bc:cd:97:4e:
54:6d:ea:fc:41:45:8e:e6:3d:c8:2b:1b:71:1f:74:
3e:ee:97:00:87:79:bc:97:e7:42:3d:83:a0:c9:06:
e1:57:fc:78:ed:cf:a2:4e:29:8a:89:50:ea:04:bd:
16:56:e7:8f:f1:d6:4a:60:40:e5:5b:80:18:72:b7:
c3:fc:e4:d4:76:3b:dc:a6:9f:87:2b:4b:9b:c5:76:
9e:66:31:52:64:92:0b:59:d9:30:c9:17:d4:f0:9f:
38:db:e4:a4:75:e5:be:db:ca:45:f6:3e:05:73:e8:
ee:01:f0:9b:44:fc:a8:5d:da:df:74:19:79:4b:c4:
ac:ac:76:73:33:2d:e9:d6:61:1a:01:c8:88:50:ef:
dc:9c:2e:c3:7c:78:ab:fd:eb:43:7f:0f:25:88:ee:
e3:2f:dc:f3:b5:8b:6f:9f:64:a6:48:0b:ce:97:06:
71:30:98:f4:c7:5f:01:e3:c6:66:77:82:c5:48:1d:
37:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:D3:09:CD:B7:F1:6B:DD:57:1D:3B:5E:3F:9C:16:91:54:59:C4:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/02f90fd8-7e23-3fcc-bb0f-2ff8206ae2fb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl
X509v3 Authority Key Identifier:
keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer
sbgp-ipAddrBlock: critical
IPv4:
138.8.74.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:5e:87:54:07:ee:0f:78:b2:d4:11:4a:59:4d:fc:05:10:92:
1f:28:0a:a0:87:f2:d4:63:1e:a8:4a:07:8f:5f:0d:6f:67:0c:
d5:d3:6e:09:29:fb:31:6c:ee:01:51:f9:ef:9d:35:e7:75:6a:
65:e5:53:d4:c3:b4:8e:ce:ef:b9:d5:7d:ec:54:03:20:49:cd:
6a:34:1d:c5:fd:4d:95:49:10:66:83:18:e0:30:ca:dc:84:74:
27:47:d0:33:56:42:e0:5e:67:14:d1:27:99:eb:9a:79:f9:89:
37:0a:4c:50:af:8c:b3:ac:01:f4:34:34:87:83:31:df:ed:ba:
19:cc:c0:eb:8c:62:64:37:01:5b:96:03:82:d3:24:dd:e8:7b:
3c:54:6b:41:0d:3f:82:7c:83:fb:e7:16:92:6f:6d:06:95:ee:
a4:ed:e3:cb:e5:d2:49:a3:17:40:98:30:7e:b5:a4:ce:40:94:
ea:00:14:f2:49:9a:7c:d8:ad:c4:af:d0:80:c0:5f:f7:43:9a:
7a:b6:7f:f7:44:b7:d9:dd:0f:94:67:86:ce:71:23:62:82:fa:
94:50:5b:fe:57:0c:80:3f:f9:18:16:87:f7:c7:e4:2d:5b:8a:
ed:e7:0b:8d:9f:3e:1c:45:43:2c:e4:7d:21:5f:0b:2a:d7:e9:
7f:6f:58:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:23:26 2025 by rpki-client