Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f0daa8e4-3fb8-3efa-b959-8af2ca7a4412.roa
File: f0daa8e4-3fb8-3efa-b959-8af2ca7a4412.roa (raw, json)
Hash identifier: /eRXDbwgUKXzkBRHiE7er/yIDzYjKOE4a4mmz82boK0=
Subject key identifier: F8:21:57:94:5D:7B:08:62:00:C2:26:BB:ED:7E:F0:E3:8C:EB:9E:B1
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F43285848CB165E67BA161BF3387B6460
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f0daa8e4-3fb8-3efa-b959-8af2ca7a4412.roa
Signing time: Thu 06 Feb 2025 14:00:52 +0000
ROA not before: Thu 06 Feb 2025 14:00:52 +0000
ROA not after: Wed 07 May 2025 13:00:52 +0000
asID: 13335
IP address blocks: 150.48.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cb:16:5e:67:ba:16:1b:f3:38:7b:64:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Feb 6 14:00:52 2025 GMT
Not After : May 7 13:00:52 2025 GMT
Subject: CN=8a2bd8d2-f070-488c-b1cd-af77a47e1438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d6:5b:f1:df:5b:8f:36:11:24:49:86:9c:1d:
c9:3c:15:d9:0f:1d:0c:14:1c:99:0d:b4:59:9b:09:
93:9d:c6:7f:10:bf:72:3a:7f:e1:e3:65:e9:0b:c6:
9d:42:2c:e7:36:e1:3f:5f:61:20:6d:ef:29:54:7e:
e9:6f:6e:54:ef:8c:0c:6b:a0:43:f0:54:03:e5:6b:
d8:6a:e9:53:e6:98:d6:c7:f1:bd:e1:de:ef:03:bb:
bb:2b:7f:a1:cb:4b:3d:a4:89:c0:9c:ec:5d:32:8d:
17:ae:c9:f6:5a:38:bc:db:5b:9f:7a:7d:78:a0:4d:
04:87:8d:a6:a1:90:21:6f:50:52:07:3e:ff:79:93:
63:69:1a:47:97:58:af:21:ee:1b:7a:52:27:d1:a1:
2e:78:df:2f:85:a7:d4:1a:ef:10:1f:a8:04:57:72:
90:3e:0c:db:23:73:f8:ac:99:36:10:eb:12:32:7b:
39:27:7e:fe:15:14:17:a1:36:52:35:53:63:6b:98:
9e:20:ef:c2:17:e6:9b:97:56:00:ac:2d:a5:56:3d:
71:5f:7d:e1:c5:ab:1f:75:6a:fa:2e:76:b6:f5:4e:
f9:52:e3:82:62:7c:80:2a:98:0b:2a:6b:e1:f3:ec:
32:b2:bb:da:b3:ff:3a:a5:2e:80:06:75:70:01:a4:
d6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:21:57:94:5D:7B:08:62:00:C2:26:BB:ED:7E:F0:E3:8C:EB:9E:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f0daa8e4-3fb8-3efa-b959-8af2ca7a4412.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv4:
150.48.148.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:78:4f:f1:ce:f2:a9:15:54:86:24:99:ff:9a:5e:bc:e7:01:
1e:30:df:8c:da:17:7d:b9:df:11:9c:c8:68:12:79:81:2d:f2:
0c:97:95:35:98:c7:cb:27:f9:4a:7e:b0:37:2d:72:f3:aa:f9:
6f:94:51:74:b8:35:03:68:44:4d:44:6f:6d:fd:34:19:67:83:
af:1b:82:c2:86:2f:31:4d:fb:29:5a:9b:bd:9a:3a:a7:2c:a5:
cf:75:e3:db:20:ea:e0:8a:f5:ee:58:91:f0:5c:9a:85:5c:a1:
ef:c7:df:fe:dc:b4:72:65:51:11:15:43:2e:74:dc:61:d3:d9:
ad:ca:82:e5:a5:b8:d1:11:1b:5e:e3:32:05:b9:cc:69:78:bb:
fc:c3:aa:0f:19:ec:6c:54:88:58:95:70:fa:38:2c:53:5a:13:
36:40:f2:32:6b:55:1a:d2:3e:8f:3d:d5:14:1a:df:01:a1:a7:
da:f1:01:60:b9:22:36:74:04:f9:b8:0b:73:8c:97:44:d0:04:
23:f9:91:3c:4b:16:28:8b:6a:f0:13:b8:c8:5e:d6:4d:21:41:
e3:6e:fd:07:fb:80:3e:ea:a4:8b:ea:8a:e0:41:d5:a5:bd:85:
a2:ee:28:a6:c9:b5:99:a3:1a:38:1e:54:a9:0e:3e:d9:94:d0:
b8:9c:29:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:03:52 2025 by rpki-client