Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/37629db3-f942-34cd-bffc-f6eb585e68eb.roa
File: 37629db3-f942-34cd-bffc-f6eb585e68eb.roa (raw, json)
Hash identifier: 3PmfAxf6PDpT7LRtxaf7BILvdOlbSXM0XjtiHzzdg4o=
Subject key identifier: 11:32:87:95:18:65:19:22:12:58:7C:74:9B:36:DC:DD:C9:D8:2D:4C
Certificate issuer: /CN=ffc39f64-f356-459c-8bf7-d142a7a166f3
Certificate serial: 010D0C9F43285848530AEDBCDF46F942E03CF180
Authority key identifier: 4D:52:88:03:05:6C:F7:2A:7F:D0:E7:BC:30:7E:24:98:8D:2D:20:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/37629db3-f942-34cd-bffc-f6eb585e68eb.roa
Signing time: Wed 25 Dec 2024 14:00:52 +0000
ROA not before: Wed 25 Dec 2024 14:00:52 +0000
ROA not after: Tue 25 Mar 2025 13:00:52 +0000
asID: 8075
IP address blocks: 138.32.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:53:0a:ed:bc:df:46:f9:42:e0:3c:f1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffc39f64-f356-459c-8bf7-d142a7a166f3
Validity
Not Before: Dec 25 14:00:52 2024 GMT
Not After : Mar 25 13:00:52 2025 GMT
Subject: CN=a21f2892-dbfa-448c-a9e4-ec59fec65db8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ed:3b:c3:38:22:a0:2c:a8:8b:f3:e4:f5:da:
36:68:f9:7f:32:64:dc:ca:93:04:71:d6:a5:49:ce:
5d:bb:be:a0:10:91:53:cc:ad:ac:71:38:3b:68:39:
0c:c4:17:a9:67:25:21:b7:ab:4c:d1:42:4b:fc:bb:
c8:cf:35:8f:14:e4:91:79:8d:af:61:df:0c:76:72:
ef:f7:10:c7:44:6e:71:9b:b7:eb:ef:c3:fd:28:37:
43:bc:38:74:6a:ad:a6:55:84:72:e5:a0:70:25:c7:
10:67:29:db:b2:48:7e:cb:f8:19:5d:58:cd:1d:e4:
ee:87:54:b0:e9:9b:32:e6:77:15:c9:25:fd:2e:cb:
ea:2c:ff:e3:5e:22:e8:07:70:8f:c8:77:dc:cc:dd:
cc:ef:64:33:12:cf:42:2e:4a:bb:77:a1:ed:d5:23:
80:1c:08:74:7b:9a:a4:e1:5b:37:0b:3e:55:0c:57:
b1:c0:b4:b9:61:bf:00:70:6d:17:6e:50:70:cd:33:
ed:d3:cf:40:06:08:69:06:83:92:60:f9:c2:6d:63:
b8:5a:aa:90:e0:34:83:40:5b:09:21:5d:f7:18:78:
f3:d4:f0:41:91:9c:7b:13:35:db:9c:4d:61:53:9a:
3a:11:fb:30:ae:07:b4:e1:fe:a6:00:15:4e:9a:db:
e1:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:32:87:95:18:65:19:22:12:58:7C:74:9B:36:DC:DD:C9:D8:2D:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/37629db3-f942-34cd-bffc-f6eb585e68eb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.crl
X509v3 Authority Key Identifier:
keyid:4D:52:88:03:05:6C:F7:2A:7F:D0:E7:BC:30:7E:24:98:8D:2D:20:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer
sbgp-ipAddrBlock: critical
IPv4:
138.32.108.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ad:77:83:a9:b4:45:f7:59:f1:a7:9d:ac:4c:ec:e9:87:ec:42:
7e:09:a0:8a:12:7a:e4:fa:88:0b:3a:2a:b4:82:e9:1a:b3:a8:
63:31:37:f7:b6:27:cf:e8:6a:5f:d1:ef:e2:d2:3b:e7:59:a4:
14:aa:b2:94:0e:ed:41:f8:0f:5f:78:b3:63:be:69:38:f0:c7:
36:b8:18:1f:e5:04:78:68:84:de:63:53:74:7d:fc:9c:68:ae:
c8:24:1f:de:6e:5e:5c:17:0f:57:ce:98:45:2c:ce:06:46:e9:
9e:86:29:3c:eb:85:ac:ae:5c:71:70:f1:5c:51:93:ff:8a:19:
30:85:0f:03:64:69:e6:76:76:f9:a6:02:be:ea:1e:93:bd:3b:
bd:7d:8e:3e:54:1f:e5:01:bc:1c:b4:49:5c:f4:31:9a:3b:2b:
c4:59:25:be:1b:b1:73:dc:dc:44:40:b9:9c:a9:e1:69:ca:e9:
fe:44:17:8c:64:ac:85:60:79:79:92:f7:17:93:fb:4e:c5:bc:
6b:30:f1:c5:6c:8d:a4:09:07:00:11:78:9c:a6:e3:03:1c:eb:
1b:bb:36:a8:50:be:e0:53:50:07:15:76:7d:9d:0c:ef:d1:02:
90:7a:be:7f:41:b9:9a:5c:62:6e:cf:74:64:87:fb:e3:bb:24:
4f:05:01:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:28:19 2025 by rpki-client