Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a52b4c58-e7b1-3ba4-bc28-40449f4d7100.roa
File: a52b4c58-e7b1-3ba4-bc28-40449f4d7100.roa (raw, json)
Hash identifier: CTzc6OL/JfzaTvkiQ9AZYxxh6SsiS8zeI3ttbcoD1CI=
Subject key identifier: AE:80:5B:D7:CC:21:93:FD:97:62:73:20:0F:7C:75:4F:92:A3:88:E4
Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial: 010D0C9F43285848F0087D8068C694AECAA5CB80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a52b4c58-e7b1-3ba4-bc28-40449f4d7100.roa
Signing time: Wed 19 Feb 2025 19:38:00 +0000
ROA not before: Wed 19 Feb 2025 19:38:00 +0000
ROA not after: Tue 20 May 2025 18:38:00 +0000
asID: 44477
IP address blocks: 136.0.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f0:08:7d:80:68:c6:94:ae:ca:a5:cb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
Validity
Not Before: Feb 19 19:38:00 2025 GMT
Not After : May 20 18:38:00 2025 GMT
Subject: CN=73ddb8fc-2deb-4bc5-a926-c65c9328c0c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:57:d6:e1:aa:02:f2:bc:eb:cf:1c:8d:a9:cf:
37:66:41:b5:04:dd:95:09:a8:f3:90:00:49:90:57:
75:a3:12:79:12:c5:a2:67:cd:1b:a4:a2:b6:b5:db:
df:02:e6:f0:36:46:7f:57:5c:29:17:95:5c:ae:b0:
0b:c9:e8:24:b2:18:86:87:c3:d5:e5:b1:ad:ca:33:
5d:35:dc:c9:c8:6d:e7:7d:c5:be:0e:49:de:ae:01:
ca:b1:e6:48:07:90:18:20:93:4e:6e:37:aa:30:7c:
3d:c2:ae:74:46:5d:3b:78:a8:bc:37:08:43:c7:49:
d8:1e:99:80:b6:8c:27:c5:7c:80:e8:82:ee:7a:b5:
0f:2f:0e:90:c4:06:ff:2e:03:2a:f8:69:42:fe:be:
e3:ff:c3:2e:0a:e7:c6:10:fc:07:41:01:1d:4b:ed:
72:0d:42:76:1e:8c:77:c4:de:04:d9:91:0e:58:9f:
75:b1:0c:27:eb:b7:ee:2b:b2:4d:28:c1:1d:eb:7b:
30:19:85:1c:3f:cd:55:ef:46:05:58:08:77:7e:82:
b6:48:41:19:38:77:90:3d:ce:60:6b:ce:43:72:73:
6e:20:e9:97:d2:90:9a:4d:b1:81:52:09:8d:54:53:
78:b7:6f:e0:ae:8e:1a:e5:82:80:ca:bc:79:3c:ad:
87:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:80:5B:D7:CC:21:93:FD:97:62:73:20:0F:7C:75:4F:92:A3:88:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a52b4c58-e7b1-3ba4-bc28-40449f4d7100.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
X509v3 Authority Key Identifier:
keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
sbgp-ipAddrBlock: critical
IPv4:
136.0.198.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:b4:83:9c:40:62:c8:0d:26:e8:85:a7:b1:cb:31:a8:fd:47:
11:4b:b0:26:e8:e6:fe:b0:cc:f6:e0:1b:be:46:7f:3b:9c:ed:
ba:2f:20:0f:10:12:52:60:5f:73:4d:2d:ea:85:7d:2e:83:2b:
55:5c:20:fa:96:fc:a7:88:7e:b6:2e:f7:1b:a9:21:f1:20:a7:
fb:ed:04:aa:99:f7:1a:63:c5:be:31:57:4f:7d:31:93:8b:6b:
4a:9e:b0:cc:e9:fd:28:1b:07:a1:77:6a:a8:c7:39:2a:13:c5:
e0:c0:5d:56:fa:f1:f5:2e:4b:93:db:d8:c9:c8:04:b3:93:b2:
80:80:b1:bf:35:0e:ff:1c:ce:3b:8d:a1:8c:ef:9d:74:a3:c6:
d7:0d:88:58:f9:b1:d8:5c:27:b4:45:14:47:14:fb:2b:f5:b2:
1c:1b:46:fe:ab:09:51:52:43:ff:8c:05:92:08:35:96:d8:0b:
ae:8d:2d:03:45:8f:ac:5b:a6:74:5f:4f:3b:e8:c7:b9:d3:fc:
48:7d:4d:94:31:ef:c1:6c:a2:63:0f:da:e2:79:48:33:8b:a1:
d4:87:51:cf:f0:8c:5c:77:66:9b:0c:a7:11:ce:7b:2f:95:ca:
ab:9a:84:49:15:18:16:55:cc:ac:77:06:c1:95:bf:e6:5e:67:
68:54:26:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:40:58 2025 by rpki-client