Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/c22f2e88-bade-3751-bab2-b79ec6310d07.roa
File: c22f2e88-bade-3751-bab2-b79ec6310d07.roa (raw, json)
Hash identifier: TGw1eil8wUUtk91ATFR5OiZzLb0o304ovll8qOBAx7E=
Subject key identifier: 61:63:9F:B3:C4:06:DA:93:C2:18:E3:2E:BB:49:CD:3E:06:08:F1:E2
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F43285848CB1660FC05AD06FF9F35B4C0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/c22f2e88-bade-3751-bab2-b79ec6310d07.roa
Signing time: Thu 06 Feb 2025 14:00:52 +0000
ROA not before: Thu 06 Feb 2025 14:00:52 +0000
ROA not after: Wed 07 May 2025 13:00:52 +0000
asID: 13335
IP address blocks: 150.48.136.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cb:16:60:fc:05:ad:06:ff:9f:35:b4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Feb 6 14:00:52 2025 GMT
Not After : May 7 13:00:52 2025 GMT
Subject: CN=f9bb8fde-9c03-437e-bebc-cfb38b0f19c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:48:2d:29:de:ae:54:d2:41:73:55:a8:a8:64:
e6:b7:04:22:a9:69:d5:56:12:a5:a9:36:66:c1:ce:
35:d9:e2:1a:d8:db:8e:ba:53:e0:12:c8:4a:f4:d0:
9b:9a:8e:46:82:f4:fc:2b:67:d7:e1:71:f2:bb:f3:
0c:47:ec:2a:9b:47:65:89:d8:c0:4d:f2:17:17:81:
32:a5:bb:17:3b:de:d1:9a:f8:db:84:4e:a7:55:56:
42:8a:20:1f:64:d7:2b:98:e8:28:d9:5a:fb:b5:5c:
e6:63:f5:c6:40:c3:b3:b7:7c:5d:1c:a6:0c:34:1a:
cd:9f:a8:bb:4a:be:44:50:38:cc:41:a6:a0:71:6e:
10:50:21:f3:e7:71:4f:c5:61:48:95:cf:bd:77:44:
dd:33:6e:9c:c0:ae:4d:11:a0:01:02:51:ec:98:80:
7d:bf:cf:ab:4f:a5:04:0d:31:00:47:f4:60:b2:43:
7a:9c:44:09:67:a9:c4:68:56:ae:98:6c:14:cb:9b:
ae:d0:ce:ee:41:0c:8a:06:71:9a:af:90:e2:42:b4:
d7:04:a4:21:59:23:1c:21:83:76:57:ac:23:f9:97:
cd:96:07:1f:21:5a:6d:2c:33:37:76:f3:7f:36:7b:
8d:b6:eb:02:68:ac:55:e3:eb:77:5f:55:3b:7e:a9:
be:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:63:9F:B3:C4:06:DA:93:C2:18:E3:2E:BB:49:CD:3E:06:08:F1:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/c22f2e88-bade-3751-bab2-b79ec6310d07.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv4:
150.48.136.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:b9:af:4f:b9:5e:07:c1:c6:3a:de:48:c1:c9:21:91:a0:cb:
ba:c3:af:ef:10:2c:37:66:f8:a3:4a:11:af:80:6f:9a:c6:3d:
62:f6:ae:2a:eb:af:67:08:83:ff:b4:01:29:27:60:46:23:f1:
eb:62:da:d3:67:ec:ce:c7:a9:15:0d:e9:34:82:af:40:aa:d9:
6d:04:5a:b1:f2:50:15:ca:23:a1:fc:50:7e:b3:93:6a:d4:d1:
b0:ad:45:30:eb:ee:30:94:ec:f3:5e:05:0e:06:af:76:e6:70:
09:b8:24:b7:2d:3d:fa:d9:8a:5d:d3:89:1b:21:b7:f9:86:c5:
88:a4:92:e5:4d:44:da:c9:7b:80:cb:cc:d3:ae:55:7c:6f:93:
71:30:0c:cb:c8:48:63:aa:ac:7f:1d:90:51:ae:f6:b0:00:ce:
ff:06:af:88:ef:fb:03:14:e5:b9:03:e2:8f:14:c9:fb:fb:cf:
43:56:35:d0:27:b3:c8:7c:61:03:8c:82:bc:4a:98:9d:65:d6:
ac:bb:fe:10:2d:38:96:b7:11:d6:16:49:93:47:73:0e:25:4e:
d9:a8:61:d7:42:0a:fa:33:11:25:79:82:fb:ff:56:21:bb:12:
04:a0:a2:51:e4:a0:ae:3d:68:b9:b2:af:68:1f:de:e8:f8:f1:
d7:4a:69:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:35:30 2025 by rpki-client