Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0989b0f9-acba-3cf6-b3e7-6c4c8473418e.roa
File: 0989b0f9-acba-3cf6-b3e7-6c4c8473418e.roa (raw, json)
Hash identifier: cX0rogmLzL77ohfzc6Q0VSUUiIg742K6ByCgBmw/YtU=
Subject key identifier: 8F:56:6D:77:AA:C7:5C:53:6B:30:A5:CB:7E:DB:CD:1D:4E:7F:6D:CD
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F43285848CB165BF6B105C6D690585700
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0989b0f9-acba-3cf6-b3e7-6c4c8473418e.roa
Signing time: Thu 06 Feb 2025 14:00:52 +0000
ROA not before: Thu 06 Feb 2025 14:00:52 +0000
ROA not after: Wed 07 May 2025 13:00:52 +0000
asID: 13335
IP address blocks: 150.48.168.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cb:16:5b:f6:b1:05:c6:d6:90:58:57:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Feb 6 14:00:52 2025 GMT
Not After : May 7 13:00:52 2025 GMT
Subject: CN=cd72bdf5-c74c-476b-89da-04b838992b9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d4:18:1a:87:3c:f0:53:d1:82:2d:14:0f:35:
6a:2a:7d:f1:e1:85:32:59:7e:99:c2:fa:4c:55:3a:
f8:12:57:b3:55:39:d0:8b:e0:34:b0:dd:2b:0a:2a:
5a:8c:65:a1:a6:ae:ad:0a:00:4c:d3:1c:14:f2:aa:
39:a1:49:c0:ec:13:18:f0:6d:29:ea:15:5e:03:43:
a7:5f:8a:ce:7a:6e:12:4a:cf:51:47:39:1a:74:c4:
8b:93:d1:bf:21:01:9b:17:e4:96:87:8d:43:8c:3e:
eb:f4:ea:1c:f6:69:02:94:18:cc:35:cf:c2:71:b0:
df:ce:7d:9c:23:18:2a:7a:88:ea:c8:15:d5:c7:30:
e4:dd:56:5f:ab:7c:74:e7:f7:43:11:91:0d:33:04:
42:f9:29:d4:4e:6d:2b:e8:e1:41:5a:63:db:3f:33:
68:fe:76:75:37:61:dd:87:f0:19:c8:be:f3:a6:fa:
61:ef:08:39:8a:b3:0a:e9:12:40:78:30:9e:ff:7e:
85:c4:b5:17:e1:ee:1f:3c:39:97:43:34:6c:e6:c9:
d3:0a:83:0f:fc:71:fa:46:f0:ac:bd:5d:b4:36:3a:
fe:01:fa:4e:3b:96:09:9c:51:65:8b:b1:16:df:b1:
66:d0:14:ed:a0:fd:e6:9a:1a:1e:f4:34:63:47:97:
90:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:56:6D:77:AA:C7:5C:53:6B:30:A5:CB:7E:DB:CD:1D:4E:7F:6D:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0989b0f9-acba-3cf6-b3e7-6c4c8473418e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv4:
150.48.168.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:9c:d3:06:4e:6d:25:07:66:18:c8:f8:ae:e6:e4:53:f1:b2:
a5:23:37:a6:67:2d:90:14:1a:26:ec:8e:1a:78:9e:a4:68:1b:
49:96:fa:92:c8:f4:28:35:2a:25:29:7a:0a:92:f3:c9:db:a8:
99:12:d8:30:1b:49:7b:e3:1f:04:5e:7b:65:b8:d5:32:4e:f1:
63:52:45:f7:e4:e2:1e:ab:17:d6:a7:75:7f:17:3d:d0:5a:5d:
ff:b8:3f:ad:81:83:44:f4:19:2a:01:52:39:61:92:94:d3:68:
9e:9a:66:0c:5c:30:57:d1:04:f4:c8:4e:3e:26:07:50:9c:42:
9a:60:5a:51:42:a1:8e:34:b6:8d:14:33:d3:e8:9c:bc:b5:be:
77:93:aa:38:3e:13:3a:99:d3:b7:3d:98:18:c5:0c:e1:b0:92:
0f:93:3d:6e:f6:03:70:80:d3:a0:78:af:a7:d8:8a:35:f1:fb:
0d:b5:ac:ef:5e:28:07:d3:ab:ad:99:06:cc:0c:25:1a:25:79:
99:7e:6f:04:5e:a7:71:2a:a2:20:07:3c:94:62:d9:21:16:95:
b9:12:98:f8:28:30:90:88:73:9f:47:a3:ec:3d:b3:f3:a3:bc:
fa:6a:16:c8:44:0a:87:5f:44:a0:21:32:3e:5f:33:d2:49:29:
8d:a5:43:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:04:02 2025 by rpki-client