Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/b295fb1c-1145-3dee-a874-2305ff0b4aa4.roa
File: b295fb1c-1145-3dee-a874-2305ff0b4aa4.roa (raw, json)
Hash identifier: a/zkTR/bYewNWSSDtk1K+RBVIwSx59euNUDg2LaqFSw=
Subject key identifier: 40:1F:37:23:32:6C:1C:3C:E1:3F:BD:6A:68:F3:07:ED:6D:E4:C9:B8
Certificate issuer: /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial: 010D0C9F4328584832F02DF0E83F3E40DFF59F00
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/b295fb1c-1145-3dee-a874-2305ff0b4aa4.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 53555
IP address blocks: 24.38.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:2d:f0:e8:3f:3e:40:df:f5:9f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=4fc269b7-53cf-4ff1-9da7-6d49a6aeace9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:d8:3a:83:86:85:ab:dc:34:95:30:6c:c1:a5:
75:76:24:ec:25:66:bd:44:eb:25:48:a3:d1:98:6b:
e6:cd:4b:c4:ca:30:f9:56:30:39:f1:82:b2:15:e4:
ad:8b:85:ab:cd:8e:26:b3:d5:aa:10:d7:a3:3e:fd:
d6:74:50:9a:a8:4f:79:2b:7e:0d:eb:a7:f2:be:68:
ef:ab:50:19:0f:c3:b5:54:2f:80:b9:98:c8:51:cf:
6a:8a:e0:a1:77:b3:5b:60:49:11:a3:b7:23:5c:7d:
15:50:33:39:6b:77:f2:cc:03:68:b2:55:90:fd:23:
e7:43:db:68:cc:3e:27:28:23:69:65:bb:ef:f2:16:
be:34:2b:1b:02:35:0c:4f:77:6f:ec:4d:90:63:35:
5f:6a:30:80:23:3c:0a:e7:de:e1:e7:6f:d0:ee:34:
fc:82:b7:5e:dd:e1:5c:46:68:e2:01:b7:89:4e:5d:
fa:8b:e5:f4:6f:a6:1a:71:55:aa:6a:b4:80:3f:54:
83:a9:92:dd:71:16:1b:6c:34:15:de:0c:67:0a:c0:
c2:6a:3c:81:17:78:14:4c:b0:42:43:3f:7f:04:79:
59:4b:6e:9b:06:e3:df:7c:53:ef:ae:38:db:5a:46:
57:8a:33:b2:48:88:bf:c0:76:fd:ca:3b:48:0b:ce:
ae:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:1F:37:23:32:6C:1C:3C:E1:3F:BD:6A:68:F3:07:ED:6D:E4:C9:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/b295fb1c-1145-3dee-a874-2305ff0b4aa4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
X509v3 Authority Key Identifier:
keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
sbgp-ipAddrBlock: critical
IPv4:
24.38.125.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:4f:c9:70:36:24:84:54:db:41:fe:48:02:d5:41:74:40:3b:
e6:b6:94:99:ed:c6:6d:f7:64:75:7f:94:97:d8:ef:67:3c:60:
fd:1b:73:6e:fc:b4:e6:8e:fa:26:ac:a9:5e:85:af:c3:28:f8:
33:d3:59:41:ba:3d:2a:fa:62:b6:8a:b4:60:d8:8f:d5:b7:77:
c1:3e:c1:be:25:02:2a:5c:83:51:45:e9:71:cb:35:43:8c:4b:
26:a3:de:69:54:4c:e8:a9:e9:75:d8:53:87:2f:aa:a1:9e:d0:
24:0a:f8:24:02:a3:de:69:ee:ee:7b:42:c8:f1:03:3d:55:21:
5a:d2:ef:f2:d7:90:b3:bd:4e:93:ec:b1:19:ec:c5:cf:44:e5:
c3:81:09:cf:36:f8:6c:f9:0b:30:b1:c4:b9:05:88:77:37:88:
56:38:5a:03:49:f4:8d:92:37:3d:51:6f:5d:ee:49:af:74:b2:
ff:2a:cd:1a:54:09:a1:81:fa:2c:e6:cc:ed:ff:df:e9:68:46:
1c:33:46:14:46:4b:2c:ee:24:b2:5e:3e:37:3a:89:be:3c:e1:
03:e1:db:8f:55:a6:e1:83:e7:ac:53:c9:a1:97:20:40:b9:63:
f8:25:bb:40:d5:a9:c5:b1:44:c8:92:b6:71:80:f9:91:a4:d3:
de:bb:fc:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 09:21:16 2025 by rpki-client