Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/5a789292-2e18-3e5d-9145-faab5fa7d256.roa
File: 5a789292-2e18-3e5d-9145-faab5fa7d256.roa (raw, json)
Hash identifier: WkF8oX1z5kc3LWlVwD6NDLeOLpdrRTEo3rjYD9EL0dM=
Subject key identifier: 05:68:51:2D:F7:03:C7:50:65:41:42:07:49:55:40:D7:5C:27:04:F9
Certificate issuer: /CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4
Certificate serial: 010D0C9F432858488AE098B2E096D0074A930600
Authority key identifier: 7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/5a789292-2e18-3e5d-9145-faab5fa7d256.roa
Signing time: Tue 14 Jan 2025 14:00:51 +0000
ROA not before: Tue 14 Jan 2025 14:00:51 +0000
ROA not after: Mon 14 Apr 2025 13:00:51 +0000
asID: 394688
IP address blocks: 162.221.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8a:e0:98:b2:e0:96:d0:07:4a:93:06:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4
Validity
Not Before: Jan 14 14:00:51 2025 GMT
Not After : Apr 14 13:00:51 2025 GMT
Subject: CN=29325440-1a34-4d37-ab75-7bc67488ec7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:0b:fb:97:8e:81:fb:0b:0e:a8:58:f6:7b:c9:
96:62:a0:43:ad:1c:57:4c:69:2f:48:5c:a8:93:49:
f9:fd:77:3d:aa:0a:08:39:ff:01:43:38:54:4b:e1:
59:78:29:93:9e:30:64:37:08:7c:fb:3f:36:0b:5d:
ba:92:d6:24:07:51:e1:8a:6b:5b:c3:27:af:b4:d1:
11:e9:bf:53:ab:d6:c1:45:59:db:86:6d:84:9c:a9:
a6:6e:a1:e8:d8:33:0a:27:74:fa:d6:c8:91:5e:0c:
f8:f5:ac:5d:5f:e9:d9:90:3e:08:a7:fd:b5:bf:88:
56:c1:5a:62:96:bf:35:6c:f3:44:c0:a9:cd:44:7a:
1a:8d:97:b9:c2:db:e6:ae:d1:66:09:c2:9d:17:d2:
bb:a1:37:7f:f2:c1:72:ae:6d:33:39:ca:05:54:2d:
5b:ac:5a:68:76:e2:56:54:88:27:e1:9f:b8:4d:7e:
3e:b8:4e:3a:9a:46:0f:ea:31:08:94:da:65:4c:04:
05:72:2f:af:09:86:4b:50:9a:d6:81:86:88:71:40:
23:44:c6:ff:55:36:a1:7e:dc:87:be:f1:e0:a7:4f:
3e:ee:c1:61:a7:cc:cf:e5:55:34:d2:81:e3:f3:48:
40:c6:89:e1:e0:8d:3c:4c:57:10:1b:32:83:7a:80:
bb:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:68:51:2D:F7:03:C7:50:65:41:42:07:49:55:40:D7:5C:27:04:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/5a789292-2e18-3e5d-9145-faab5fa7d256.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl
X509v3 Authority Key Identifier:
keyid:7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer
sbgp-ipAddrBlock: critical
IPv4:
162.221.8.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:fd:00:86:36:85:52:d8:68:18:2b:98:a0:1f:ec:2f:9a:d3:
2f:74:92:fb:9a:c8:6a:b1:d3:bb:f4:bd:69:60:ec:52:8f:4d:
00:bc:ed:c2:45:6c:45:77:3d:09:74:ca:ce:0d:33:2f:02:10:
71:4f:39:50:a4:e2:45:35:b8:2e:c6:ca:e6:6b:33:02:5e:fe:
49:9d:80:1b:c4:e9:d7:29:c8:c9:25:92:51:9e:33:44:37:65:
e7:8a:43:b9:7e:e5:22:f8:c3:67:5d:13:91:95:26:e4:4f:8d:
d4:d5:4a:49:0e:8e:69:b6:cc:58:ce:2a:d9:40:89:14:e2:57:
62:ca:e4:87:c1:09:a3:f5:21:17:ac:b6:42:fb:62:4c:02:bb:
b8:a7:c2:68:f4:b7:0a:81:dc:a0:de:7e:05:b1:90:a1:c8:5c:
04:42:7d:b6:b0:ac:c1:38:6a:4c:5e:9b:42:d0:84:35:82:c5:
00:23:6e:4b:0c:90:32:d9:a2:ce:d8:d9:8c:ff:b2:e7:90:d3:
08:32:9b:ce:47:46:94:f9:69:de:1e:b3:c1:d7:94:59:67:21:
4e:42:3c:3a:e2:54:be:79:0e:1f:84:c5:ae:50:fa:7b:9e:f3:
a5:07:18:bd:7a:58:0f:6a:60:c2:6b:8e:c4:fb:b3:6f:3e:e3:
a3:2f:95:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:37:05 2025 by rpki-client