Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/03097b4b-171e-373c-95b7-f17a8cbaed08.roa
File: 03097b4b-171e-373c-95b7-f17a8cbaed08.roa (raw, json)
Hash identifier: Z/9clIGHyzC/etLBpP5KwsF6ywCruU2qa1BfxvmM5sQ=
Subject key identifier: 1B:A8:F6:87:94:48:0A:B6:BD:88:E6:82:EE:8F:72:F0:DA:F3:0E:55
Certificate issuer: /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
Certificate serial: 010D0C9F4328584902EC0FE73A1C1EE584B87F00
Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/03097b4b-171e-373c-95b7-f17a8cbaed08.roa
Signing time: Wed 26 Feb 2025 14:00:51 +0000
ROA not before: Wed 26 Feb 2025 14:00:51 +0000
ROA not after: Tue 27 May 2025 13:00:51 +0000
asID: 14340
IP address blocks: 136.147.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:02:ec:0f:e7:3a:1c:1e:e5:84:b8:7f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
Validity
Not Before: Feb 26 14:00:51 2025 GMT
Not After : May 27 13:00:51 2025 GMT
Subject: CN=c024c887-48c0-4523-a512-ce50586ad5ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:d3:ff:40:3d:2f:75:4b:5b:98:eb:9f:6a:b1:
96:88:64:35:13:4c:66:7a:de:71:e2:3e:62:7c:c0:
2f:61:2e:ea:00:d2:23:af:87:e6:3f:6f:4e:47:b5:
82:81:78:4f:7a:30:0e:c2:8c:42:80:65:da:e2:c8:
5d:ad:10:49:bb:56:83:02:c9:89:93:bb:f2:17:56:
25:08:0e:8b:3a:77:28:f2:18:66:8b:c3:a3:13:69:
ef:89:f3:fe:91:18:2b:95:c8:6d:3a:60:b7:8b:c5:
58:10:94:79:04:2d:67:30:ae:1f:89:04:cd:99:47:
8e:93:76:96:91:51:2f:26:3b:db:a0:42:23:86:fb:
f4:80:c3:67:95:7c:6c:6b:1c:a5:74:00:35:cc:01:
c5:cc:0c:23:f6:5f:1b:52:d4:f4:8f:66:be:fe:80:
91:35:02:dc:65:b8:d8:1e:95:2b:c7:f3:66:48:2a:
0f:09:10:55:d6:84:85:f0:8b:5a:ed:fd:33:d9:d3:
2c:d2:f4:34:6d:13:13:6a:14:ed:51:07:0b:6a:d5:
38:06:ef:d1:d9:c0:86:21:43:2b:5b:61:10:2a:58:
67:05:2e:dd:d1:51:d3:db:23:c1:01:e0:3f:3c:62:
91:02:5d:b9:83:fd:45:41:b2:43:6e:a8:5c:ff:11:
e0:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:A8:F6:87:94:48:0A:B6:BD:88:E6:82:EE:8F:72:F0:DA:F3:0E:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/03097b4b-171e-373c-95b7-f17a8cbaed08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl
X509v3 Authority Key Identifier:
keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
sbgp-ipAddrBlock: critical
IPv4:
136.147.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
dc:4f:e8:e5:70:7a:0e:ef:b8:28:9d:7f:38:20:bd:26:31:ea:
2e:38:48:ed:7a:b4:25:a9:22:1b:72:d3:0d:56:f1:cf:4b:11:
93:f7:30:11:f0:9f:10:87:b3:dc:2d:50:32:e6:6f:40:4c:58:
25:b8:80:be:76:f7:71:12:dc:8c:70:09:94:f8:2b:d9:a1:89:
be:57:b7:b1:88:30:b1:c9:27:03:7f:0d:27:af:c8:bc:fc:78:
65:99:88:09:a3:12:e8:29:f0:87:f0:02:5a:37:c5:f5:55:06:
04:5f:0c:89:33:1b:38:20:46:dd:28:da:8f:b7:81:26:a2:eb:
7f:17:11:51:89:29:5a:41:2e:20:24:ba:c4:9d:b2:32:32:3b:
86:dd:7d:eb:6f:6e:1a:8a:c7:8b:61:2c:1f:65:8b:f7:7d:bd:
74:f9:b1:73:c4:b3:35:24:a6:2a:ee:f2:5c:22:04:0d:3e:49:
a8:11:0a:dc:55:a3:17:46:4c:05:8f:97:15:63:79:ee:68:42:
42:5f:ba:e0:40:6b:37:03:9b:fb:1c:0e:94:06:d6:6d:fe:54:
a3:30:3a:84:ee:39:06:92:59:5c:46:5f:86:1d:64:d1:c9:ae:
ed:4d:ae:8c:dc:1e:eb:7e:74:94:a8:ec:b7:6a:48:58:5b:90:
40:70:7c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:53:33 2025 by rpki-client