Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/86ce795d-c584-310b-9693-21cb26b6e90a.roa
File: 86ce795d-c584-310b-9693-21cb26b6e90a.roa (raw, json)
Hash identifier: SPgueYvQaAn9kHRjy08CWgTrSsg0s0i8FVMkoHJqsTs=
Subject key identifier: 43:B6:2D:D7:C4:2C:C2:08:D0:E7:97:28:82:D0:8B:1B:3F:E2:9B:55
Certificate issuer: /CN=3a636afd-ece5-4e23-a54f-c43e0fc08124
Certificate serial: 010D0C9F43285849244E7AC27B125E3FD8F5B400
Authority key identifier: 8B:CE:40:F1:5E:3E:E3:95:3C:35:42:B6:04:3C:3E:D1:61:07:37:23
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/86ce795d-c584-310b-9693-21cb26b6e90a.roa
Signing time: Mon 10 Mar 2025 13:00:52 +0000
ROA not before: Mon 10 Mar 2025 13:00:52 +0000
ROA not after: Sun 08 Jun 2025 13:00:52 +0000
asID: 14618
IP address blocks: 148.59.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:24:4e:7a:c2:7b:12:5e:3f:d8:f5:b4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a636afd-ece5-4e23-a54f-c43e0fc08124
Validity
Not Before: Mar 10 13:00:52 2025 GMT
Not After : Jun 8 13:00:52 2025 GMT
Subject: CN=e880f61e-bca4-4043-b874-8f9a37f6b891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:35:88:b4:1a:fb:30:b6:63:f7:db:62:7c:b5:
ab:e7:e3:09:d1:dd:10:a7:4d:0c:8b:43:cb:9d:fb:
db:23:3c:69:44:57:ce:ee:e7:b8:04:e6:e1:f1:0a:
2e:6e:a3:76:a3:f8:b9:40:14:f1:80:64:25:52:16:
cf:ae:54:b6:11:47:cf:b7:ee:73:29:5d:69:ac:5a:
e7:21:86:d7:2f:7f:1e:8e:d4:43:1f:df:bb:23:00:
2a:5f:b9:70:2b:c4:25:7f:49:d4:dd:d7:ee:f7:93:
93:ce:31:a0:6d:87:0a:d8:f0:8b:20:b4:4c:d2:89:
d8:4a:b0:2d:01:aa:33:5e:82:6c:22:9e:27:04:fb:
f7:76:49:6e:60:08:a7:47:5c:8e:4b:f1:aa:b3:a0:
98:56:bf:2d:f7:ec:cf:37:df:ac:f4:b2:4a:ac:c6:
11:2d:d4:ff:b0:9e:35:d7:92:e5:3c:b5:4a:aa:8c:
39:96:41:96:8d:0b:03:a3:4c:54:ab:2c:cf:c5:12:
4f:da:be:d4:89:a1:af:75:a0:c7:30:a6:dc:a9:07:
41:1d:77:57:22:3e:d5:d6:63:91:4e:11:f7:1c:23:
49:08:e1:ac:a0:8c:40:5d:39:d3:ab:8b:fc:a2:fa:
bb:c0:27:8a:ca:b2:c6:95:9e:4e:26:67:f0:f8:f0:
c7:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:B6:2D:D7:C4:2C:C2:08:D0:E7:97:28:82:D0:8B:1B:3F:E2:9B:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/86ce795d-c584-310b-9693-21cb26b6e90a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.crl
X509v3 Authority Key Identifier:
keyid:8B:CE:40:F1:5E:3E:E3:95:3C:35:42:B6:04:3C:3E:D1:61:07:37:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124.cer
sbgp-ipAddrBlock: critical
IPv4:
148.59.78.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:3b:44:e8:3b:3f:4f:36:82:d9:4b:19:b5:d9:6e:02:7c:43:
92:36:23:89:f1:14:1d:64:0e:4a:03:8c:a0:45:f5:3b:f6:44:
af:36:f3:3e:00:21:ee:52:a4:a3:a1:d0:ad:d3:18:3d:66:2c:
7d:cc:ab:5d:77:44:80:f3:b1:03:ca:d6:75:0d:e7:c2:5f:89:
5c:a0:fd:d1:be:61:86:56:b3:ae:d4:b6:46:d2:7f:d1:35:87:
46:8a:14:62:ef:16:fb:45:1a:63:91:58:34:36:a0:e3:9b:e9:
27:62:69:99:04:1a:20:e7:f6:7f:5a:28:10:df:cc:ee:f1:04:
e8:f2:9e:87:e4:c5:28:55:b9:8d:44:b9:80:11:91:2e:b1:0c:
87:14:98:b0:b0:72:be:39:d1:4a:7a:c4:4c:c6:3b:74:6e:81:
06:ae:55:1f:ef:75:1c:e2:ea:6b:53:d5:3c:57:ea:6a:c2:18:
1d:f7:70:fe:f5:cc:cb:27:35:22:97:ef:62:09:0d:46:81:1a:
7d:d1:98:18:97:53:c2:d2:b2:5a:a7:6d:79:5e:f1:21:05:d9:
01:01:2f:90:13:05:9c:2c:c5:3d:7e:10:60:1d:9c:59:48:53:
db:31:01:f5:d7:f3:ac:82:f8:d0:79:da:2a:5c:4d:0c:16:57:
65:3f:2e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:41:03 2025 by rpki-client