Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/f009aaa7-d5c7-3d0f-a469-59421f27c99d.roa
File: f009aaa7-d5c7-3d0f-a469-59421f27c99d.roa (raw, json)
Hash identifier: bItm4ZMvTe4yn/rvfXxpLh3IKRkyw7i2EiHuqAA0pTQ=
Subject key identifier: 57:87:10:3E:86:08:A3:13:8A:B6:EB:20:89:08:0D:2F:EF:E0:C1:ED
Certificate issuer: /CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4
Certificate serial: 010D0C9F43285848388548732681A4D75C192200
Authority key identifier: 7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/f009aaa7-d5c7-3d0f-a469-59421f27c99d.roa
Signing time: Mon 16 Dec 2024 02:00:39 +0000
ROA not before: Mon 16 Dec 2024 02:00:39 +0000
ROA not after: Sun 16 Mar 2025 01:00:39 +0000
asID: 22742
IP address blocks: 129.133.240.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:38:85:48:73:26:81:a4:d7:5c:19:22:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4
Validity
Not Before: Dec 16 02:00:39 2024 GMT
Not After : Mar 16 01:00:39 2025 GMT
Subject: CN=ade05038-2be9-4459-b7b0-1b60c24a2573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c9:95:7d:f9:a7:c8:a0:c0:ea:98:d7:21:ee:
25:f3:2b:6d:6a:ff:02:30:58:3a:58:f7:12:c5:5c:
5a:6b:e8:02:be:18:c1:96:16:e9:34:66:99:08:88:
01:8c:92:ff:94:06:94:1f:b0:13:c3:59:26:e6:3e:
d8:48:8e:21:1b:4d:65:cc:35:3f:0f:d1:3b:be:65:
d6:c9:08:ff:55:26:ed:c6:88:a5:2b:ef:d7:a1:f1:
e8:db:9e:96:74:64:53:c2:3e:6a:8e:bd:da:a2:ec:
c0:c2:48:5d:8f:45:9e:e1:bd:61:c7:19:0c:b0:ac:
c0:8e:9e:b9:cf:a7:50:d0:9b:2f:49:99:c0:97:e9:
00:e9:1d:3e:75:f9:f3:c1:4a:80:20:f5:74:4b:01:
63:0c:f1:d6:be:c9:dd:05:f8:24:94:b3:8e:ad:89:
cf:2d:ca:6f:65:a9:fd:a6:30:33:1c:7c:33:26:3e:
b7:a2:ef:71:fc:9f:f2:60:ae:30:42:9a:75:cd:7f:
47:26:86:ef:72:85:dd:3a:32:43:a8:3a:c3:ef:b5:
ec:4a:85:dc:58:ad:f2:f8:d2:48:24:d5:3b:d2:42:
55:b1:a5:3a:f3:ec:11:7e:74:8a:93:6f:53:30:6d:
bd:0a:56:c1:c9:13:d5:7e:94:4a:e1:e8:2e:54:b5:
13:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:87:10:3E:86:08:A3:13:8A:B6:EB:20:89:08:0D:2F:EF:E0:C1:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/f009aaa7-d5c7-3d0f-a469-59421f27c99d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl
X509v3 Authority Key Identifier:
keyid:7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer
sbgp-ipAddrBlock: critical
IPv4:
129.133.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:dd:72:22:b8:5f:6e:a1:53:56:55:d5:e8:6d:4b:59:26:3c:
aa:1e:ba:a4:4d:34:e1:62:a9:15:2a:1e:8d:75:5a:81:05:9d:
ae:57:85:a9:6d:54:a1:b0:3f:27:27:c2:86:ac:e9:a5:c0:cd:
54:bf:6c:2f:d4:55:4a:f3:c3:9e:34:aa:8e:16:8d:26:ed:18:
0a:e7:37:e7:db:8d:e7:2a:d5:23:ef:b6:f3:a6:36:fa:97:09:
ab:fc:a5:54:cc:40:4f:6e:ae:6a:90:cc:f0:88:bd:2e:9e:8e:
78:52:37:60:5a:8f:06:c6:a8:da:ad:7f:c9:cc:06:d6:14:ea:
25:40:01:c1:1e:44:c1:11:7a:3c:10:63:8d:57:c9:d7:f6:6c:
34:d2:d6:ee:8f:57:bd:90:a5:45:67:d4:b0:d1:c5:86:88:83:
12:e5:14:70:46:b5:b4:ee:56:0f:b8:1b:2f:70:66:9e:45:d9:
a9:86:dd:e8:e4:c6:c6:64:63:f6:f7:4a:b2:8d:25:d0:8d:5b:
cf:de:19:51:bd:13:3c:f7:52:8f:21:34:60:87:18:1e:b2:a1:
4d:c5:4e:37:bf:8b:bc:dc:ab:23:fb:d6:56:d5:19:2f:da:28:
e1:51:b8:31:d9:bc:2c:e2:96:63:1d:53:05:61:ad:bf:ab:91:
6f:3d:fa:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:50:13 2025 by rpki-client