Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/53c8f6dd-71ef-3d56-ac98-cc4c5ea4f8d2.roa
File: 53c8f6dd-71ef-3d56-ac98-cc4c5ea4f8d2.roa (raw, json)
Hash identifier: 8a2rKz3ttsFpH/eK+2oSo9OOSeRUatXLwOds6Baut6A=
Subject key identifier: E4:2E:FD:9E:1F:04:1E:A6:DB:DA:F2:5A:CF:12:74:25:C4:61:DD:A2
Certificate issuer: /CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e
Certificate serial: 010D0C9F43285848143A77A8BE4398CF1EB0E280
Authority key identifier: FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/53c8f6dd-71ef-3d56-ac98-cc4c5ea4f8d2.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 25649
IP address blocks: 161.38.42.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:77:a8:be:43:98:cf:1e:b0:e2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=d5ce9779-a076-4ead-98e0-09f567314445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e2:a3:62:e0:7d:f1:6d:98:5d:ea:e2:58:6d:
1a:27:53:a4:90:09:c6:4e:a6:00:33:b1:f2:8c:61:
56:ef:41:69:91:42:a5:ee:17:ef:4f:48:ad:67:e1:
0b:e1:98:b0:e6:b1:c2:b1:bb:bf:01:82:d9:04:93:
59:e3:5d:77:74:d3:b8:04:47:58:41:6a:05:06:2f:
c7:01:cc:cc:a9:b2:4e:42:f4:d6:99:69:36:21:84:
27:2b:f0:b1:f0:e6:80:a6:0d:f4:9f:45:22:57:40:
a3:99:57:e6:53:66:c3:e6:64:4b:5f:e6:d8:3b:27:
e3:2e:57:00:21:5e:ff:82:da:03:45:f5:64:d8:75:
4c:25:95:48:1d:02:ea:db:25:4b:4c:e4:34:ea:04:
ea:20:6b:92:9a:ac:79:f4:8f:63:66:ec:68:e7:9f:
4f:52:28:42:8f:f8:bb:27:87:20:d7:07:de:81:ed:
f8:70:3f:0c:67:e4:39:a5:2b:1b:9f:13:a4:a0:fc:
ee:07:fc:c9:18:39:ba:fd:17:7b:f6:94:e2:60:88:
91:dd:b9:05:0e:3d:71:46:75:59:15:a0:67:d0:38:
91:ac:36:6a:48:14:07:90:6a:26:4d:e1:05:10:b8:
44:0d:0e:0d:db:56:a6:eb:79:a5:0b:8a:f6:93:bf:
e8:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:2E:FD:9E:1F:04:1E:A6:DB:DA:F2:5A:CF:12:74:25:C4:61:DD:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/53c8f6dd-71ef-3d56-ac98-cc4c5ea4f8d2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl
X509v3 Authority Key Identifier:
keyid:FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer
sbgp-ipAddrBlock: critical
IPv4:
161.38.42.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:b9:30:c4:4a:83:9e:86:fd:76:0f:36:5d:82:28:9c:eb:20:
0a:dc:a5:5b:61:bb:31:c0:97:52:92:60:54:c1:2e:00:c6:7a:
4b:99:4b:5a:7a:c5:91:bb:53:7d:db:6f:8c:45:9a:a9:41:04:
b9:66:e5:52:a9:f4:e6:d6:84:58:91:6d:67:4d:b2:71:ce:34:
76:64:a9:b4:44:df:0b:31:3e:60:07:ec:4e:19:c5:e9:94:bd:
ba:4b:44:3c:3c:0f:e9:43:1d:de:e3:25:7a:df:71:85:67:5c:
e1:ef:ad:e9:bd:49:dd:be:53:b6:c1:58:69:50:3b:58:0a:be:
04:75:13:47:d1:12:8e:28:c4:cc:04:97:d3:dd:5c:19:f9:8b:
a8:c2:33:4c:b4:bc:0d:a5:46:07:f1:1f:23:cf:4f:da:65:1b:
4d:32:de:c6:9c:3e:ff:98:5b:f5:bd:78:66:71:17:64:ea:5f:
b0:39:7b:ca:8d:87:55:98:ef:ec:cb:a1:ac:79:b2:2a:9d:f5:
44:08:1c:07:2f:86:97:05:aa:a6:74:6d:96:1a:4d:5f:c9:7a:
9d:2e:47:00:6b:10:d7:0e:b4:69:70:c1:de:0c:46:15:4f:0d:
65:14:63:6c:34:aa:e4:ce:63:d5:fc:35:d5:ba:82:de:4f:ab:
b8:ce:4f:bc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgUOneovkOYzx6w4oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGYwY2Y2ZmYtNmY2OS00MWI0LWFhNjctMjZkMGFiYTAy
ZThlMB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk
ZDVjZTk3NzktYTA3Ni00ZWFkLTk4ZTAtMDlmNTY3MzE0NDQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+KjYuB98W2YXeriWG0aJ1OkkAnGTqYAM7Hy
jGFW70FpkUKl7hfvT0itZ+EL4Ziw5rHCsbu/AYLZBJNZ4113dNO4BEdYQWoFBi/H
AczMqbJOQvTWmWk2IYQnK/Cx8OaApg30n0UiV0CjmVfmU2bD5mRLX+bYOyfjLlcA
IV7/gtoDRfVk2HVMJZVIHQLq2yVLTOQ06gTqIGuSmqx59I9jZuxo559PUihCj/i7
J4cg1wfege34cD8MZ+Q5pSsbnxOkoPzuB/zJGDm6/Rd79pTiYIiR3bkFDj1xRnVZ
FaBn0DiRrDZqSBQHkGomTeEFELhEDQ4N21am63mlC4r2k7/oYQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOQu/Z4fBB6m29ryWs8SdCXEYd2iMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBj
ZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQwYWJhMDJlOGUvNTNjOGY2ZGQtNzFlZi0z
ZDU2LWFjOTgtY2M0YzVlYTRmOGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGYwY2Y2ZmYtNmY2OS00MWI0LWFh
NjctMjZkMGFiYTAyZThlL2RmMGNmNmZmLTZmNjktNDFiNC1hYTY3LTI2ZDBhYmEw
MmU4ZS5jcmwwHwYDVR0jBBgwFoAU/GAffSctPt57SUZisgIHLGcDogIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBjZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQw
YWJhMDJlOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoSYqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHq5MMRKg56G/XYPNl2CKJzrIArcpVthuzHAl1KSYFTBLgDGekuZS1p6
xZG7U33bb4xFmqlBBLlm5VKp9ObWhFiRbWdNsnHONHZkqbRE3wsxPmAH7E4ZxemU
vbpLRDw8D+lDHd7jJXrfcYVnXOHvrem9Sd2+U7bBWGlQO1gKvgR1E0fREo4oxMwE
l9PdXBn5i6jCM0y0vA2lRgfxHyPPT9plG00y3sacPv+YW/W9eGZxF2TqX7A5e8qN
h1WY7+zLoax5siqd9UQIHAcvhpcFqqZ0bZYaTV/Jep0uRwBrENcOtGlwwd4MRhVP
DWUUY2w0quTOY9X8NdW6gt5Pq7jOT7w=
-----END CERTIFICATE-----
Generated at Sat May 3 11:36:21 2025 by rpki-client