Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/81157f40-1330-3f4f-8709-0472d5c62aa1.roa
File: 81157f40-1330-3f4f-8709-0472d5c62aa1.roa (raw, json)
Hash identifier: LWg1IPoqNRRHmtG9eL8sVCcyMag/nQjjTCcSukKNMUo=
Subject key identifier: B9:CB:A9:C4:FC:0E:F3:9A:F5:D5:43:60:4F:E9:1A:CE:CC:87:68:31
Certificate issuer: /CN=4c5f6fb8-1f68-4792-8def-a616a53280be
Certificate serial: 010D0C9F432858480EA506DE10B780E25C152200
Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/81157f40-1330-3f4f-8709-0472d5c62aa1.roa
Signing time: Sun 01 Dec 2024 02:00:39 +0000
ROA not before: Sun 01 Dec 2024 02:00:39 +0000
ROA not after: Sat 01 Mar 2025 02:00:39 +0000
asID: 18593
IP address blocks: 138.8.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0e:a5:06:de:10:b7:80:e2:5c:15:22:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be
Validity
Not Before: Dec 1 02:00:39 2024 GMT
Not After : Mar 1 02:00:39 2025 GMT
Subject: CN=a9d58880-e8ea-40fa-ad18-d4451d0ee74d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:34:e8:e2:7c:3d:54:60:10:fe:77:77:72:2c:
57:5f:22:fa:d2:51:5c:9a:54:57:da:47:e4:9f:b2:
ee:a9:74:58:97:99:6a:49:d6:98:9e:52:ca:8c:8f:
f9:8f:96:91:8f:cc:6c:be:2e:a6:4f:ac:56:76:f5:
ff:43:83:d3:dd:04:42:a5:07:e1:a5:8d:57:4a:97:
b1:6e:78:3a:1f:c7:16:9c:a9:7f:c8:60:f2:16:11:
e3:b2:1e:21:c9:68:1a:4f:f4:b4:26:cc:bc:38:f5:
2c:12:59:ca:1a:80:ea:ab:a6:15:5a:b7:8c:63:0f:
dd:c8:31:53:76:12:77:92:f9:e8:26:1d:55:49:b6:
00:f6:55:d3:d4:f4:b2:78:9e:91:c4:cd:5e:2a:8a:
e1:27:3a:a5:eb:4c:a7:0e:b2:dc:34:d2:c4:4d:86:
5c:e9:3e:63:10:05:9c:a4:d4:52:5c:f9:6a:e4:93:
63:f2:b1:03:c9:62:f5:51:26:7d:09:b4:db:e4:a1:
80:ce:a8:25:e7:56:20:8a:d6:be:99:b9:2d:1e:d0:
e4:c9:03:17:73:c8:13:5c:88:3f:e5:3a:b2:ce:bc:
7e:1a:8d:8d:d5:a0:65:b1:7f:c8:ba:6c:4e:79:56:
64:d4:61:d3:fc:d0:e6:07:84:bd:02:57:7d:72:99:
10:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:CB:A9:C4:FC:0E:F3:9A:F5:D5:43:60:4F:E9:1A:CE:CC:87:68:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/81157f40-1330-3f4f-8709-0472d5c62aa1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl
X509v3 Authority Key Identifier:
keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer
sbgp-ipAddrBlock: critical
IPv4:
138.8.116.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:71:f0:16:2a:96:2b:b4:e3:c2:7d:3d:82:77:84:4f:ff:c3:
96:e5:d3:e9:df:f3:d3:40:35:12:c3:ee:43:05:0a:a0:1f:5c:
82:4c:19:7e:51:ca:30:7a:49:d3:ee:10:4d:86:fd:f7:29:36:
cf:ee:0a:a5:7d:73:a1:9c:0e:84:84:71:4e:57:ad:a2:7f:bd:
91:73:9a:e6:03:5b:33:cd:99:c8:35:51:c1:8c:d5:e5:22:71:
fa:65:6d:d2:b5:69:ac:8f:92:f1:6b:a4:ac:3c:ec:aa:e0:8e:
85:fb:55:87:cd:f6:6f:ec:0e:5a:56:b2:4b:98:72:dc:91:49:
30:59:d6:96:3d:64:c5:4a:1c:4b:2b:05:e1:91:01:ab:8c:f2:
0d:cb:5d:7d:24:13:5b:3d:9c:89:c0:11:5f:c6:d5:c4:86:2f:
43:d1:56:e8:ad:11:01:d1:82:30:2b:fd:13:d4:f2:e4:42:28:
31:d3:72:fd:43:65:9c:fe:45:f6:d1:93:6b:c3:3c:68:5d:64:
73:ac:27:5e:5b:c3:78:b3:d7:db:13:98:06:d1:53:89:15:93:
35:96:6e:74:e5:b9:63:07:a6:3b:bf:36:28:af:43:fd:d3:e5:
b0:52:ea:ae:7e:1f:42:22:93:6d:57:66:20:da:d4:31:14:de:
fc:51:2c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:26:23 2025 by rpki-client