Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/24e50275-08d8-38a2-a053-3a76fa2cbac3.roa
File: 24e50275-08d8-38a2-a053-3a76fa2cbac3.roa (raw, json)
Hash identifier: 9xMOpDyLWgKJj+ixwJFkjBRaT587HTTQ83j0W4vwT4c=
Subject key identifier: E8:25:72:76:56:FC:A0:1C:F5:82:AC:09:C5:FA:51:6F:C6:6A:4F:0E
Certificate issuer: /CN=06795d2e-ca43-4b22-8995-31898670bf14
Certificate serial: 010D0C9F43285849393E6ED27B5BB310C7E04680
Authority key identifier: C8:8F:F3:C8:20:79:E3:65:D4:EF:EB:46:00:40:5B:2C:47:62:FE:23
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/24e50275-08d8-38a2-a053-3a76fa2cbac3.roa
Signing time: Tue 18 Mar 2025 01:00:38 +0000
ROA not before: Tue 18 Mar 2025 01:00:38 +0000
ROA not after: Mon 16 Jun 2025 01:00:38 +0000
asID: 396982
IP address blocks: 161.38.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:39:3e:6e:d2:7b:5b:b3:10:c7:e0:46:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06795d2e-ca43-4b22-8995-31898670bf14
Validity
Not Before: Mar 18 01:00:38 2025 GMT
Not After : Jun 16 01:00:38 2025 GMT
Subject: CN=788ad52e-b951-42cd-b3d1-13ce6bee6cce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:03:71:02:05:6d:7d:d4:94:0a:60:18:57:f1:
de:b8:cc:7b:90:1c:67:e4:93:4e:4f:c4:b7:9c:ef:
b6:36:41:ea:dd:dc:ff:c8:70:43:e1:38:75:9c:72:
7b:97:7b:c5:97:68:af:12:0c:6c:20:7c:78:a6:9a:
f5:34:dc:63:3e:a1:34:df:99:06:6c:f5:77:97:06:
8e:33:1c:f0:bf:f9:9c:19:e4:25:77:92:28:25:8e:
49:51:df:8a:4f:f5:dd:da:93:df:c8:71:b4:3e:ba:
df:ab:9c:36:98:14:7a:a1:1c:1b:5d:68:73:af:7d:
ed:36:8a:95:5a:e8:e0:27:d8:37:ba:5e:f8:e4:9d:
0e:58:a3:13:bf:b7:6b:ab:6e:90:6f:f3:ff:88:91:
e1:8a:0b:a1:d9:9e:90:89:fc:e4:08:40:ad:7d:41:
91:6f:47:49:5d:8a:56:d0:db:9e:89:47:4d:20:3b:
01:ca:41:9e:ae:89:79:56:fc:91:6a:29:3c:ee:01:
c4:31:04:53:1e:b6:76:1a:fc:6a:e9:ab:98:f4:84:
d7:5e:c3:a8:ab:7e:d8:b7:d0:d8:d7:9f:01:9c:62:
c1:a7:22:9e:38:58:47:1f:45:55:86:cc:f6:8b:ec:
a6:42:a3:bc:77:48:cb:10:a0:02:09:64:3d:75:dd:
4f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:25:72:76:56:FC:A0:1C:F5:82:AC:09:C5:FA:51:6F:C6:6A:4F:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/24e50275-08d8-38a2-a053-3a76fa2cbac3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/06795d2e-ca43-4b22-8995-31898670bf14.crl
X509v3 Authority Key Identifier:
keyid:C8:8F:F3:C8:20:79:E3:65:D4:EF:EB:46:00:40:5B:2C:47:62:FE:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14.cer
sbgp-ipAddrBlock: critical
IPv4:
161.38.56.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:b0:b3:f7:fc:5f:ba:99:e6:a5:ff:65:45:cb:b5:6b:d2:75:
b8:36:98:92:de:f6:be:7c:d0:00:14:20:46:bb:2b:07:6a:8d:
1f:62:af:43:44:00:e1:ac:56:8a:4a:d5:90:85:14:98:f7:35:
3a:6e:e0:39:e7:df:45:5b:6f:ad:16:ef:d7:19:d1:41:ee:28:
a3:68:94:ae:c2:9a:1c:35:9b:ff:b7:34:5a:5c:56:7f:8b:f3:
5f:b2:60:5f:f4:61:8f:ae:f0:f2:ae:85:5e:13:73:a4:18:e8:
0f:7b:d5:95:0b:bc:05:13:88:db:ef:89:fd:e9:1a:ed:43:76:
31:ea:2f:49:21:ca:e7:e4:d6:a4:1f:8d:23:00:04:fd:97:aa:
96:c3:80:64:27:68:48:70:ef:c8:69:c3:f9:50:03:c1:5a:94:
5d:83:cd:74:b9:b8:8e:62:78:a1:28:df:db:95:62:fb:da:5a:
3a:c1:f4:b0:89:28:40:65:f5:82:db:6c:d3:08:1f:fb:4b:8d:
0f:1b:0c:71:23:dc:df:54:36:b4:1f:80:d4:3c:c2:aa:a0:05:
94:8d:f0:7d:95:a7:a4:79:e3:7a:db:2d:74:d0:40:0a:52:e4:
80:20:f7:7d:5d:17:5d:7a:a9:e7:ba:32:cb:1f:d7:a2:88:c9:
59:af:24:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:18 2025 by rpki-client on console.sobornost.net