Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/797bae3b-6450-34ea-8752-2ea50baa3dff.roa
File: 797bae3b-6450-34ea-8752-2ea50baa3dff.roa (raw, json)
Hash identifier: gqC5X2XO6sfTNVwtgIO4J0GEpLCZ6EO9pICxEmIcDJ8=
Subject key identifier: CC:40:D4:63:A3:0F:19:F1:02:7F:AD:12:F9:CA:3D:89:D2:1A:80:50
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C260F2D0436BD58936404A80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/797bae3b-6450-34ea-8752-2ea50baa3dff.roa
Signing time: Mon 03 Feb 2025 11:09:03 +0000
ROA not before: Mon 03 Feb 2025 11:09:03 +0000
ROA not after: Sun 04 May 2025 10:09:03 +0000
asID: 30036
IP address blocks: 150.195.8.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c2:60:f2:d0:43:6b:d5:89:36:40:4a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 3 11:09:03 2025 GMT
Not After : May 4 10:09:03 2025 GMT
Subject: CN=c90bd7d5-7d09-4045-ae91-4dafc3eb974b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a6:4d:01:5f:2b:cc:ee:16:78:24:d2:19:00:
fc:53:62:33:65:93:e9:5e:1e:53:79:6d:75:8e:40:
26:68:68:2f:2c:53:ac:96:86:a3:da:2a:2c:6b:d1:
21:41:f1:25:4f:97:5c:f3:2a:9b:21:f5:77:e8:3c:
49:a1:6c:d8:01:93:57:58:19:ef:19:1d:0e:e9:5c:
a2:c3:ce:0e:0b:c0:c2:40:69:65:d0:4d:bd:5f:27:
6e:84:5d:66:72:7f:a5:39:81:3f:4c:dc:a9:01:d4:
27:81:46:68:71:31:f0:26:4e:ce:86:6f:f4:04:b0:
99:ed:3e:e4:81:f1:35:8c:99:08:dd:4a:3d:d4:6a:
a3:db:20:c3:82:9f:af:f2:fa:45:31:04:7f:48:09:
e3:3b:35:d0:dc:78:39:c7:ef:ec:7b:82:3a:49:fd:
61:9b:d7:6d:f0:65:df:f1:c0:22:5a:aa:44:44:f5:
0a:99:28:f1:39:ba:d6:39:4b:15:41:5c:c3:3b:6b:
6d:1c:0a:e0:37:0b:07:f3:3d:98:77:d3:d9:24:46:
18:cf:d4:8c:a7:5c:1a:a7:61:76:06:13:be:19:b7:
60:e6:fb:a3:2b:08:9b:c7:ae:3c:c0:fe:94:c8:58:
ff:25:a6:83:79:6f:f1:30:04:26:4c:b1:08:51:08:
4f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:40:D4:63:A3:0F:19:F1:02:7F:AD:12:F9:CA:3D:89:D2:1A:80:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/797bae3b-6450-34ea-8752-2ea50baa3dff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
150.195.8.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:85:76:08:53:5a:0d:4c:2d:fe:59:4c:d6:d3:a0:73:74:ce:
3e:51:c0:1e:75:80:80:b7:ad:b1:c9:b6:f0:f6:38:f3:ee:33:
43:ee:4c:22:9d:da:77:34:b5:be:1b:95:c7:0c:c7:0c:ae:77:
16:bb:1b:50:78:5f:3e:d3:bd:a7:0b:c9:9c:d1:f9:76:24:14:
bf:e5:81:99:59:56:3f:59:ea:1e:20:09:04:5b:5f:af:2a:d8:
61:5f:af:fa:93:ee:ee:bf:f8:2c:78:6a:d6:56:f0:7e:35:62:
3e:c0:e9:93:ec:bb:b8:7c:17:fb:3c:37:4c:eb:4e:cd:5a:e4:
a0:c4:c7:e3:80:f1:c6:9f:e9:d8:2b:fb:35:f2:c4:30:31:b4:
b1:3f:98:97:c5:59:9b:02:41:51:1c:1c:44:6e:80:d5:ac:9a:
a5:42:d1:b3:36:72:0a:14:d5:b0:4a:b3:3b:68:1c:6c:2a:4b:
4f:81:26:6c:0f:d7:c4:44:39:18:fd:a6:b4:76:db:cf:7e:18:
db:bc:58:cd:45:de:86:6f:24:2a:fc:45:35:0d:14:dd:4d:25:
03:21:f0:7e:32:83:85:77:47:48:b1:4b:e9:a1:e7:4b:e5:47:
f0:e8:6e:47:9c:93:62:4f:87:a5:35:68:05:4a:da:ec:c1:a4:
53:d7:1c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:01:27 2025 by rpki-client