Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2e11d9c9-5fed-3745-ae64-0c6b4cea6694.roa
File: 2e11d9c9-5fed-3745-ae64-0c6b4cea6694.roa (raw, json)
Hash identifier: JoOt+Z4oX+HAuHa8F3rtW6CfeYljIAikfzyEElpN61Q=
Subject key identifier: C5:82:C7:D7:04:E4:B9:39:81:92:51:F8:69:EF:C2:66:D7:DD:E6:BF
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F43285848CB16626FE9C4880B3EC37900
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2e11d9c9-5fed-3745-ae64-0c6b4cea6694.roa
Signing time: Thu 06 Feb 2025 14:00:52 +0000
ROA not before: Thu 06 Feb 2025 14:00:52 +0000
ROA not after: Wed 07 May 2025 13:00:52 +0000
asID: 13335
IP address blocks: 150.48.144.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cb:16:62:6f:e9:c4:88:0b:3e:c3:79:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Feb 6 14:00:52 2025 GMT
Not After : May 7 13:00:52 2025 GMT
Subject: CN=3ff248e1-c92e-4f2a-8449-7be1f007da70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:01:34:45:58:16:56:62:c6:4a:87:10:0a:85:
66:4c:c5:7f:50:8b:24:0a:ae:29:ed:ce:17:07:43:
dd:6d:23:69:ef:55:b6:af:21:76:80:57:6d:ce:b1:
c4:fc:30:c1:92:a7:42:a5:41:bd:66:60:ec:b5:37:
c2:c4:9f:60:c5:e1:73:d8:e9:64:42:cd:93:8b:fc:
ef:7e:78:3b:31:e7:51:9c:f1:bc:1f:21:cc:f4:64:
9e:1f:e2:27:02:a0:c0:7e:eb:01:ca:20:d7:d5:51:
ba:ba:3a:53:eb:bf:23:51:b1:5f:2a:00:e6:0c:56:
81:3f:66:f4:49:fc:8e:7c:cc:bd:39:bc:31:54:73:
d8:9e:bd:39:2e:6f:ca:9a:0e:6b:59:01:8f:9a:6b:
b7:9b:f4:05:82:67:fe:0c:e5:e7:d2:da:82:39:62:
05:e4:e8:17:6a:42:30:88:73:f5:33:24:7c:90:c8:
73:67:c3:83:ba:b7:68:7d:58:80:71:91:67:f3:03:
25:0b:2e:85:eb:22:4a:c7:94:12:f2:3e:ab:a3:e8:
91:6d:da:94:3b:36:a1:00:3b:f1:c1:3d:b1:0e:e6:
5c:02:1c:09:4b:af:70:f8:5e:53:6a:fb:aa:14:12:
b8:1e:d8:91:a8:68:97:7c:a8:01:c4:cd:f5:4f:84:
2a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:82:C7:D7:04:E4:B9:39:81:92:51:F8:69:EF:C2:66:D7:DD:E6:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2e11d9c9-5fed-3745-ae64-0c6b4cea6694.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv4:
150.48.144.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:f8:7b:af:2c:d8:58:08:b6:60:e3:3e:40:9f:a4:e1:b4:a4:
12:58:f2:01:d2:10:f0:4d:65:30:50:ee:eb:29:e2:2d:9d:ed:
93:4e:62:b9:f1:a3:7d:b9:1c:cd:e4:8f:ac:c7:26:63:a7:31:
5e:09:75:ee:a8:99:65:d2:09:ea:2f:d4:1b:25:2b:cf:87:b3:
7a:9c:df:47:e5:0b:5e:1a:e8:64:9d:44:22:74:51:13:40:f3:
3a:f8:15:2a:01:16:bb:e6:93:21:cd:7c:af:d8:24:5b:40:db:
6b:50:db:bc:6c:1f:ec:a3:5c:59:99:5a:fe:b7:25:c2:c8:fa:
33:79:c1:61:08:b0:dd:8a:bc:d3:38:cb:cc:65:bb:f1:2d:84:
8b:69:95:9b:2d:27:f7:50:09:b7:03:88:cf:66:0e:6c:ed:26:
c4:15:ae:90:1d:db:31:e4:45:aa:16:f9:cf:e0:46:06:ab:96:
13:b9:55:63:e5:3c:12:6f:e8:c2:87:e6:70:20:8f:98:df:17:
a7:38:31:97:e2:f1:43:10:04:d2:0a:5e:3e:d9:72:d6:2f:8d:
4b:de:0d:07:24:87:c1:a1:43:30:00:12:78:e2:c7:e8:c3:e7:
29:c9:99:ae:85:cb:7d:39:4e:38:b6:9a:83:36:15:91:2c:72:
81:02:34:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:10:13 2025 by rpki-client