Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/18c22446-23f2-433c-bff0-b35a75738dd5/f3a095cf-f0ec-3033-be5c-75cfbc5537fe.roa
File: f3a095cf-f0ec-3033-be5c-75cfbc5537fe.roa (raw, json)
Hash identifier: iKLeauQdWfQrpiSEnPMO3f45GeCNa9wDS49wMwuEFVs=
Subject key identifier: 8E:9A:D8:A0:73:E3:F5:44:97:51:C8:6D:C6:25:8F:A4:EB:F0:A4:FE
Certificate issuer: /CN=18c22446-23f2-433c-bff0-b35a75738dd5
Certificate serial: 010D0C9F432858480EA5079BC2BFB70AE15A0023
Authority key identifier: F1:84:FA:82:AB:89:52:E5:C3:DE:8E:A7:86:B7:2C:C5:48:52:91:D5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/18c22446-23f2-433c-bff0-b35a75738dd5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/18c22446-23f2-433c-bff0-b35a75738dd5/f3a095cf-f0ec-3033-be5c-75cfbc5537fe.roa
Signing time: Sun 01 Dec 2024 02:00:39 +0000
ROA not before: Sun 01 Dec 2024 02:00:39 +0000
ROA not after: Sat 01 Mar 2025 02:00:39 +0000
asID: 16509
IP address blocks: 138.43.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0e:a5:07:9b:c2:bf:b7:0a:e1:5a:00:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18c22446-23f2-433c-bff0-b35a75738dd5
Validity
Not Before: Dec 1 02:00:39 2024 GMT
Not After : Mar 1 02:00:39 2025 GMT
Subject: CN=557a99b0-54de-4d03-a681-c85fc84091c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:29:ed:75:6e:70:1a:d1:e9:b7:7d:0b:03:06:
64:a5:45:dd:e5:a2:a6:5f:cb:36:73:ac:78:62:d6:
2d:17:d5:83:58:1e:8f:a0:ae:53:7c:77:7c:31:fd:
b1:04:f8:fc:10:60:0b:fd:99:29:c7:af:90:bb:45:
ac:2f:31:63:0f:e2:bb:23:61:ef:ec:9e:06:01:d2:
04:cd:f2:c2:60:7c:79:67:75:e9:c4:88:79:3b:66:
38:a0:13:c4:d9:63:ca:2e:37:ce:09:66:15:80:ed:
9d:66:ac:ea:ed:83:1d:3b:7d:c2:6b:cc:57:55:ce:
7a:3c:91:c1:c8:ea:a0:e9:91:fc:26:02:bc:c1:31:
b3:77:9c:74:91:3a:5d:18:a8:4e:ae:0c:d8:53:d0:
79:31:6a:fe:37:37:24:49:62:c8:dc:f2:92:bd:fc:
8e:94:18:85:4d:b7:48:82:ab:ed:df:b7:8c:fa:56:
06:0b:4e:53:3b:81:7a:51:31:78:d7:45:5b:ed:58:
98:7b:2c:e2:a6:37:7c:1b:59:e9:d8:cb:8e:54:df:
2d:ef:c5:40:e7:2a:95:6d:59:02:78:29:af:c4:89:
8d:92:00:8a:9d:bd:c8:0f:76:61:05:29:1f:c2:9d:
88:ad:84:be:15:fd:be:6d:85:a6:8d:95:3b:17:1e:
cf:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:9A:D8:A0:73:E3:F5:44:97:51:C8:6D:C6:25:8F:A4:EB:F0:A4:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/18c22446-23f2-433c-bff0-b35a75738dd5/f3a095cf-f0ec-3033-be5c-75cfbc5537fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/18c22446-23f2-433c-bff0-b35a75738dd5/18c22446-23f2-433c-bff0-b35a75738dd5.crl
X509v3 Authority Key Identifier:
keyid:F1:84:FA:82:AB:89:52:E5:C3:DE:8E:A7:86:B7:2C:C5:48:52:91:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/18c22446-23f2-433c-bff0-b35a75738dd5.cer
sbgp-ipAddrBlock: critical
IPv4:
138.43.114.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:c1:45:d9:bf:50:ba:18:a3:eb:37:0a:a8:5c:86:fb:26:f4:
ff:b1:e5:21:43:7c:a2:d5:43:8c:f0:61:b7:cf:73:7c:3f:96:
19:81:35:df:9e:2b:a0:91:10:e4:9d:9a:1a:cc:3e:f5:21:60:
92:8e:48:06:67:e7:be:8d:b0:13:8f:ee:81:ee:62:fe:79:ee:
4d:86:fc:2b:e6:cc:c7:b0:30:30:da:55:3c:fe:27:fa:3f:cd:
d4:d1:8b:ee:75:6c:aa:c0:53:08:5d:80:e3:08:9c:a3:61:6d:
ac:17:fd:dd:46:a6:6d:b9:20:db:00:3f:be:e6:6b:e5:69:63:
54:e5:d8:9e:c1:d0:a4:52:b7:c8:78:9e:12:dc:d3:a8:37:70:
01:0e:59:60:e6:ce:04:ab:c4:f8:a4:f1:99:32:78:f2:3e:89:
d5:f4:78:7c:00:89:62:2c:0e:15:6a:fe:2e:53:05:25:93:31:
83:cd:9b:91:56:93:10:59:d0:54:53:e6:ea:71:41:6a:ff:bf:
f4:68:d5:32:c5:6c:8b:b1:19:cc:3e:ad:78:01:65:66:36:5a:
35:b3:d7:fd:b3:b7:7f:95:20:31:9a:53:0c:1d:19:89:a7:8c:
49:4d:5b:a3:62:4d:c0:fc:be:c8:ac:86:2c:b8:c5:74:2e:ad:
6d:4a:f2:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:32:17 2025 by rpki-client