Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5ce49acc-723a-336a-9ee3-3587aa89d6e1.roa
File: 5ce49acc-723a-336a-9ee3-3587aa89d6e1.roa (raw, json)
Hash identifier: ctvDxeu9KG3mhWDIT2+BhnVrgn0/wVNKTOOFV9f0vWU=
Subject key identifier: E5:48:F3:40:BA:48:72:A5:59:66:11:2C:59:8D:5B:40:0C:6A:6E:1A
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F43285848CB1663482F8B126932BE1E78
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5ce49acc-723a-336a-9ee3-3587aa89d6e1.roa
Signing time: Thu 06 Feb 2025 14:00:52 +0000
ROA not before: Thu 06 Feb 2025 14:00:52 +0000
ROA not after: Wed 07 May 2025 13:00:52 +0000
asID: 13335
IP address blocks: 150.48.160.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cb:16:63:48:2f:8b:12:69:32:be:1e:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Feb 6 14:00:52 2025 GMT
Not After : May 7 13:00:52 2025 GMT
Subject: CN=e7bc5a6e-d38b-4cd6-885e-ec31c369323d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ee:fa:57:2e:4c:5a:62:30:20:92:ee:27:2e:
07:b1:12:6c:eb:f7:c4:ea:f1:65:bb:be:83:66:48:
ec:70:4e:de:e7:3e:2d:4e:1a:45:a8:d3:f8:eb:17:
4e:c8:62:1c:b2:b1:c4:51:0a:91:fd:28:a9:8d:4f:
bc:b8:33:dd:33:d6:c2:89:92:8b:f7:ba:50:e3:95:
7d:5d:db:d9:45:c5:db:a8:6f:af:a3:19:ab:60:2a:
d9:c7:de:5e:18:16:ab:93:8e:ec:a6:5c:f3:62:f8:
5f:79:b5:23:71:36:6b:8e:47:a8:e1:5a:0c:d8:2d:
24:34:eb:6b:ff:bb:73:71:5b:41:ec:db:99:98:71:
25:e0:b8:7c:20:56:4c:54:37:87:13:21:e0:f3:fc:
a4:64:e0:6c:6e:11:91:9a:e6:cc:e9:01:1a:08:24:
cc:a7:33:01:bd:27:a1:5a:58:2e:a7:39:0d:cc:94:
52:23:0b:4a:9b:c9:ef:94:7f:32:8b:f8:7e:b8:5b:
36:af:3e:0b:6a:f2:11:f0:4b:ff:d4:55:b0:23:2a:
58:fe:24:85:e6:1a:79:66:26:72:d6:84:33:aa:81:
db:c3:d2:0d:89:12:7a:40:1d:77:13:40:95:79:a2:
7a:a9:15:84:bc:c8:11:2f:d4:5d:2b:7e:47:bd:6b:
8c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:48:F3:40:BA:48:72:A5:59:66:11:2C:59:8D:5B:40:0C:6A:6E:1A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5ce49acc-723a-336a-9ee3-3587aa89d6e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv4:
150.48.160.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:a7:22:26:05:43:db:be:b4:02:cd:72:6a:52:ab:5c:b6:e9:
d2:85:c0:88:e2:84:ec:0f:16:83:0f:47:72:b6:12:1d:74:8b:
37:79:b7:84:d7:2c:13:52:e7:52:c0:15:00:4f:98:7e:ca:e5:
a3:88:d8:59:04:72:43:04:2c:aa:91:71:68:7c:27:74:d7:15:
b8:34:2a:e0:8a:32:42:b3:32:97:c2:34:91:cd:a2:a5:b5:88:
18:49:9e:b0:e1:ff:b9:0d:5b:89:68:1e:6f:00:90:21:1a:7d:
9c:93:ea:7c:97:1d:d0:57:c2:e5:81:be:d5:69:40:b0:05:c1:
87:df:6e:72:dc:1f:0f:76:47:dc:93:93:77:6b:e1:28:04:47:
0a:1a:10:ab:fb:0b:31:ef:19:7b:64:bc:b7:17:60:49:d0:c1:
35:e3:a0:ff:ea:57:ec:47:b4:51:dc:b2:71:f6:2d:b7:0a:93:
a0:59:41:58:08:e6:17:f1:2a:7a:01:43:fe:b3:b8:1b:4a:64:
a2:14:ba:f7:62:7e:8e:c5:c8:e5:19:03:54:f9:51:27:35:ec:
33:a9:19:e3:5b:fc:7c:97:33:74:5b:76:66:9a:19:63:d7:b1:
97:45:69:86:6c:8c:17:94:f7:a2:40:7d:7d:7e:8b:37:0c:85:
c6:94:5d:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 23:24:09 2025 by rpki-client