Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/5eb06c17-6f04-3135-bc69-e990ab9b6737.roa
File: 5eb06c17-6f04-3135-bc69-e990ab9b6737.roa (raw, json)
Hash identifier: pkUofFHNJHO7213HbdX/0REllCaXHQmMz9MliA6VRcY=
Subject key identifier: C8:CE:BD:19:1E:11:FD:5A:0A:1A:5F:29:27:40:AC:95:A4:BC:A1:0C
Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
Certificate serial: 010D0C9F432858491246C65DD81A9D8AC2C2BD00
Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/5eb06c17-6f04-3135-bc69-e990ab9b6737.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 63199
IP address blocks: 148.153.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:c6:5d:d8:1a:9d:8a:c2:c2:bd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=f1e516a3-5cf8-4375-bcb6-ae932098fd1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9b:78:d9:13:b3:46:78:ca:1c:d0:d9:c5:bf:
50:02:d2:cb:5e:5d:5b:1d:e4:78:fd:85:38:a7:f8:
9f:24:61:39:d4:5f:1e:e1:69:66:e2:8f:dc:31:94:
b6:9d:04:60:80:93:4c:b2:c7:6e:d7:66:53:a0:9a:
87:e2:8d:4d:f9:89:0d:03:6c:25:25:18:2b:82:01:
7f:fc:6b:3d:99:4f:e2:75:46:ab:68:d6:d8:d9:8e:
21:70:87:4e:be:9b:20:c1:b3:75:fd:6f:20:60:d8:
7f:9a:5c:1c:8a:93:51:84:bd:69:0d:2a:99:70:99:
6e:b5:df:8a:87:6a:12:66:ee:14:7a:21:83:87:13:
f9:cc:ac:84:0f:24:26:74:8d:ac:dd:ee:99:b1:41:
7d:04:04:6d:62:50:52:54:26:c2:5e:92:64:32:1b:
fd:1c:f9:81:04:62:ed:23:3d:38:d6:69:e4:ed:94:
86:e6:55:58:bb:1a:35:e1:b6:a0:a8:df:38:6c:e9:
3f:b4:38:07:d9:3f:8a:6c:b2:70:3c:c1:40:f2:20:
ce:67:54:b9:1b:ea:73:d4:f7:0e:56:cd:c2:03:84:
48:84:64:13:fa:d6:8a:46:25:d9:9e:bc:b8:ed:c4:
3f:e0:c1:e5:37:11:ee:a1:1e:24:56:02:6a:89:75:
c9:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:CE:BD:19:1E:11:FD:5A:0A:1A:5F:29:27:40:AC:95:A4:BC:A1:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/5eb06c17-6f04-3135-bc69-e990ab9b6737.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl
X509v3 Authority Key Identifier:
keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
sbgp-ipAddrBlock: critical
IPv4:
148.153.9.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:66:e3:83:8b:c0:4f:75:b1:67:cd:d8:bb:b3:94:1a:47:df:
16:44:74:78:7a:4c:37:c0:61:eb:26:0d:0c:a2:40:94:69:4c:
e0:d5:07:ab:e4:b5:f4:12:dd:0e:77:ba:74:a6:5f:8a:7d:05:
04:b4:9d:09:d8:fa:f5:7d:dc:3b:47:00:5b:4d:f8:b2:27:04:
14:8c:43:01:a7:2a:77:e0:c0:55:5c:54:03:b7:4d:4f:e3:e7:
58:9d:48:66:d2:bf:6c:05:7d:3d:3f:9c:65:04:35:c5:33:00:
ff:52:64:1e:49:0c:55:50:9a:d7:86:0d:fd:fa:b5:c3:8b:5f:
7a:00:6d:dd:73:71:3d:22:ed:a5:f9:29:78:95:41:11:08:40:
91:95:a6:51:2a:17:dd:a7:31:14:dd:aa:09:b1:07:71:57:d5:
6a:81:06:8c:e5:7b:78:d4:b4:59:2a:eb:ea:bf:d6:e2:54:23:
7d:ff:74:33:2b:0e:ca:da:50:52:ef:ee:11:ed:2e:7b:5f:66:
6c:18:b5:be:4d:7c:cc:f0:93:0e:b1:0b:7f:54:f6:d6:9c:c6:
e0:f5:59:16:3b:37:d2:be:bb:c6:3c:44:f1:05:3f:86:a3:6e:
d5:8d:2e:34:9b:4e:de:77:72:77:cc:61:e9:a2:8f:79:a9:a8:
a0:3e:6b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:29:07 2025 by rpki-client