Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/24b3e43b-3b83-3437-be0d-021a80ce94df.roa
File: 24b3e43b-3b83-3437-be0d-021a80ce94df.roa (raw, json)
Hash identifier: bJl5tVB4avknFokL15bKf4SHX4gjwpMhmALdDp4X43Y=
Subject key identifier: D5:3F:75:35:50:54:BF:B2:67:4D:24:F3:16:E9:94:91:0A:7F:18:39
Certificate issuer: /CN=ffc39f64-f356-459c-8bf7-d142a7a166f3
Certificate serial: 010D0C9F43285848530AEDD7F70886E27FACA480
Authority key identifier: 4D:52:88:03:05:6C:F7:2A:7F:D0:E7:BC:30:7E:24:98:8D:2D:20:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/24b3e43b-3b83-3437-be0d-021a80ce94df.roa
Signing time: Wed 25 Dec 2024 14:00:52 +0000
ROA not before: Wed 25 Dec 2024 14:00:52 +0000
ROA not after: Tue 25 Mar 2025 13:00:52 +0000
asID: 8075
IP address blocks: 138.32.110.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:53:0a:ed:d7:f7:08:86:e2:7f:ac:a4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffc39f64-f356-459c-8bf7-d142a7a166f3
Validity
Not Before: Dec 25 14:00:52 2024 GMT
Not After : Mar 25 13:00:52 2025 GMT
Subject: CN=1844f76f-2bdf-4eda-ae21-eb1e34b3ad28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:32:5a:40:39:a7:2f:80:49:1d:50:48:38:3e:
be:b1:2c:68:d2:b1:d5:5c:41:47:92:9c:da:7f:34:
07:6f:5e:2b:9a:89:b5:78:81:42:7e:f8:23:46:76:
46:1f:ad:1c:84:d9:13:bb:5d:4e:b6:19:ff:6d:1a:
6e:1c:a9:a4:02:8c:f3:6a:d4:f5:f7:77:c8:87:00:
89:4e:13:4c:34:3c:da:a7:69:63:c4:22:3c:6d:39:
2e:f5:b4:74:a5:2a:4b:e1:a3:fc:a6:70:2a:d3:62:
59:6e:7c:82:52:95:27:e5:7c:8c:6e:21:82:f7:4e:
a2:7e:0a:20:6c:a3:43:23:18:64:37:d5:af:e6:22:
98:89:84:08:42:75:bf:ab:cf:37:01:f3:d3:89:28:
96:60:db:9b:b5:4a:83:51:7b:7b:ab:52:bf:25:0e:
86:c8:a6:82:4d:77:20:c6:de:49:58:a7:bd:27:d9:
6b:12:cb:4d:e8:60:cf:aa:cb:6b:78:6c:60:ad:fd:
9b:96:d7:74:12:5f:a9:42:31:d2:03:26:92:06:b9:
95:33:c0:ab:68:ad:db:40:5c:c8:70:36:34:91:14:
75:f1:2b:15:2b:a4:6f:66:07:b8:10:55:5d:8a:d4:
46:74:c9:44:3a:4d:1d:06:7b:13:f2:19:33:4d:ad:
e3:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:3F:75:35:50:54:BF:B2:67:4D:24:F3:16:E9:94:91:0A:7F:18:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/24b3e43b-3b83-3437-be0d-021a80ce94df.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.crl
X509v3 Authority Key Identifier:
keyid:4D:52:88:03:05:6C:F7:2A:7F:D0:E7:BC:30:7E:24:98:8D:2D:20:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer
sbgp-ipAddrBlock: critical
IPv4:
138.32.110.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:ad:9f:df:3e:2c:20:17:87:22:24:95:77:1f:31:71:ed:1f:
d4:1f:38:69:fc:04:61:a2:07:6c:07:8f:2e:67:b3:e6:2f:fb:
7c:9f:38:ae:37:2f:89:29:6b:0e:ea:9f:6c:2d:44:cb:5f:d9:
55:89:70:f8:ad:90:de:29:7f:09:7f:42:b6:e5:9d:17:dd:92:
69:6d:af:d9:71:98:c7:dd:29:bf:ae:be:f3:14:f8:42:30:33:
de:e5:b3:bc:a3:6d:3f:37:dd:47:4e:3a:86:55:2e:ac:ec:ac:
5c:54:7a:e7:27:ea:42:de:10:76:1a:22:a7:23:4a:64:b9:46:
59:22:11:88:09:cd:de:cf:de:60:5b:32:cf:91:09:a6:ce:2c:
b9:72:45:30:b5:28:03:ce:e1:f7:48:90:38:3e:fe:13:60:18:
9b:a5:26:ec:b9:28:4e:f0:63:1e:5c:8d:5d:4b:db:9d:72:00:
19:09:21:51:8c:99:4d:f1:ad:f3:5c:5f:a4:94:a6:1f:bd:36:
a4:39:d7:8c:60:eb:ef:ad:36:76:d6:41:6c:c7:42:30:cc:0e:
50:3f:46:35:68:46:0e:ac:aa:5c:9b:8e:6c:10:71:ff:c3:4f:
f4:7a:5d:4e:74:93:3c:cb:98:ed:1d:c8:78:8c:72:ab:75:0a:
f6:0f:3b:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:22:08 2025 by rpki-client