Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/04adc8be-6949-381f-85ec-0ef42f2d5286.roa
File: 04adc8be-6949-381f-85ec-0ef42f2d5286.roa (raw, json)
Hash identifier: Awb+BNfohRK+WF6g5J4DvCMJSai21AvddWqjeOUmrs0=
Subject key identifier: 69:F0:0D:F4:F9:4F:06:21:48:59:52:37:C0:DD:FF:FD:F4:CC:03:C7
Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
Certificate serial: 010D0C9F43285848E2D11DCD1B2F56A637754B00
Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/04adc8be-6949-381f-85ec-0ef42f2d5286.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 63199
IP address blocks: 148.153.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:1d:cd:1b:2f:56:a6:37:75:4b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=d4ff78d3-2bbf-4076-80b3-f26c3468e0d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b2:b7:76:5c:d4:4b:33:3e:18:7e:d9:60:25:
f4:e5:24:ee:2a:eb:73:9e:33:53:46:c0:09:e1:bc:
b8:28:66:f5:14:ce:8c:43:ea:dc:95:05:6b:54:01:
5e:1c:bd:d3:da:32:9c:ec:e9:a3:4f:9a:f1:46:46:
3a:c1:06:82:8e:28:ac:74:b6:d2:ee:98:f8:17:29:
7b:e9:3b:f0:9d:d5:26:c3:ff:05:93:93:41:5e:e9:
61:b4:82:ea:4a:f8:94:c4:d8:17:4b:c2:f1:0c:5b:
8f:31:39:13:39:f6:bc:77:22:b2:47:eb:0b:09:aa:
07:71:1c:1b:76:b8:24:63:55:42:33:c4:28:89:9a:
18:e7:36:20:48:84:44:71:c4:4b:14:bf:3f:88:10:
88:c6:54:39:13:47:13:a6:76:e9:73:bb:f7:77:59:
8c:ac:a8:9b:9a:9a:5b:76:d1:7e:08:99:20:12:ed:
9c:6d:74:29:d7:65:cd:8f:92:81:6f:26:52:17:b1:
a7:f2:1b:c2:07:de:6a:a6:5e:e2:25:8a:95:6c:5b:
71:56:d6:15:a9:5e:89:b0:dd:93:18:e0:94:df:18:
66:7f:20:be:10:9d:d1:95:9c:03:34:b4:d8:85:b9:
52:5b:83:bc:06:fb:03:65:69:07:90:37:4d:08:de:
96:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:F0:0D:F4:F9:4F:06:21:48:59:52:37:C0:DD:FF:FD:F4:CC:03:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/04adc8be-6949-381f-85ec-0ef42f2d5286.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl
X509v3 Authority Key Identifier:
keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
sbgp-ipAddrBlock: critical
IPv4:
148.153.36.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:ec:a3:b6:0c:dd:82:60:aa:f8:6b:50:ce:dd:63:e1:92:15:
3f:12:51:f9:30:a0:d9:cf:45:f6:2f:e4:84:20:a2:3f:a8:7b:
c0:87:8c:2f:38:26:d3:49:ac:9a:f3:7d:b5:68:c4:97:28:2d:
01:4d:8a:1d:2d:fd:8b:71:8c:81:02:3d:ef:63:d9:97:2c:fd:
8e:8b:8c:70:48:62:e4:fb:fd:6e:13:9b:1e:7a:b5:e7:d8:e2:
95:a9:c9:3d:22:c9:6d:6d:67:03:4c:32:46:b4:e6:d1:35:b3:
93:b5:ca:7e:b4:a1:85:07:c5:00:a7:95:7e:74:74:94:2f:23:
74:a5:d2:02:01:da:60:22:7b:24:92:b2:bd:9c:92:ff:fa:c3:
03:e5:a5:23:2d:eb:e1:98:26:88:7f:c2:26:82:25:ea:6d:f1:
03:f7:63:c9:d8:1f:1d:6b:c7:dd:b8:b5:63:16:5c:1e:bb:ca:
48:69:5b:54:a7:ca:39:f0:33:70:29:42:ae:32:3e:bc:2b:b6:
9a:cc:f3:71:57:bd:cb:c1:fc:9c:96:cf:7a:5c:1b:38:70:f6:
b3:2f:76:ea:63:20:83:e7:49:75:44:40:dc:b7:50:6c:d9:ef:
bf:9d:73:35:63:1f:c2:51:44:d0:d4:0c:45:02:f2:3a:8f:50:
73:dc:33:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 08:44:20 2025 by rpki-client