Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0/1905bf21-ee68-3188-bef3-4a4a821e314f.roa
File: 1905bf21-ee68-3188-bef3-4a4a821e314f.roa (raw, json)
Hash identifier: tFOiz4j/2HvKqya7fFqU0GO/FdoBRPaOuw+oI9U4GQ0=
Subject key identifier: F4:05:0A:F7:29:87:1E:C2:99:97:C1:92:22:CB:F2:F6:6E:DE:58:1B
Certificate issuer: /CN=f7f8499b-2456-4be8-bad9-ced434198fa0
Certificate serial: 010D0C9F4328584897708F8A7AFFAC9318AE4280
Authority key identifier: 35:8D:3C:5F:8A:73:96:74:42:F1:60:4D:65:57:DA:20:F8:A5:64:9A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0/1905bf21-ee68-3188-bef3-4a4a821e314f.roa
Signing time: Sun 19 Jan 2025 02:00:39 +0000
ROA not before: Sun 19 Jan 2025 02:00:39 +0000
ROA not after: Sat 19 Apr 2025 01:00:39 +0000
asID: 7896
IP address blocks: 137.48.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:97:70:8f:8a:7a:ff:ac:93:18:ae:42:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7f8499b-2456-4be8-bad9-ced434198fa0
Validity
Not Before: Jan 19 02:00:39 2025 GMT
Not After : Apr 19 01:00:39 2025 GMT
Subject: CN=73470086-ecf8-49cd-bc92-2b39e198baba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:6e:21:b7:9e:6e:fa:c3:9b:f9:3e:da:ed:c8:
57:f3:11:d6:cd:ce:de:b7:ab:fc:a6:97:37:a1:51:
76:1f:71:06:96:ff:aa:e1:bb:5c:9d:5d:ea:df:95:
ef:24:55:73:c8:cb:c8:88:89:a5:f0:4c:05:11:ad:
d6:a0:5b:d0:5c:2c:ca:d8:b6:dc:3e:77:56:48:5c:
69:8b:e0:28:ce:61:ad:8b:a0:cf:fe:d2:97:db:bf:
79:9e:ea:8d:ab:25:df:a7:cb:b5:92:e4:28:1b:a1:
23:7f:ba:59:88:67:4a:88:c1:aa:bf:38:b9:41:8a:
24:ab:ae:f0:b7:a1:6b:e2:ad:52:fa:85:25:42:12:
c2:d3:fb:b8:44:2b:14:ac:17:dd:d8:5f:44:5f:c6:
81:f1:d3:a3:4d:db:17:10:1b:b2:1b:db:d6:9f:3d:
f2:80:c5:10:9d:be:32:02:ea:18:57:8a:2e:13:25:
63:26:cb:cf:10:f9:c8:b5:e9:bc:e2:76:6d:08:20:
fe:d0:b9:9d:69:b9:ab:01:79:64:7b:51:55:ef:87:
1d:87:dd:0f:b2:f0:0f:ca:0d:3b:3e:82:32:9b:7a:
e0:19:13:a2:10:1c:10:4f:b9:cb:57:cd:8f:27:9a:
8a:7d:1e:cb:4f:cd:74:24:26:7f:2a:bf:60:5e:99:
19:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:05:0A:F7:29:87:1E:C2:99:97:C1:92:22:CB:F2:F6:6E:DE:58:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0/1905bf21-ee68-3188-bef3-4a4a821e314f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0/f7f8499b-2456-4be8-bad9-ced434198fa0.crl
X509v3 Authority Key Identifier:
keyid:35:8D:3C:5F:8A:73:96:74:42:F1:60:4D:65:57:DA:20:F8:A5:64:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0.cer
sbgp-ipAddrBlock: critical
IPv4:
137.48.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:c8:f1:d5:dd:75:a9:3c:da:71:e1:f1:6d:bc:2e:de:5a:7c:
08:41:49:0a:72:3b:7d:43:8b:86:72:4b:3c:96:6d:32:9b:04:
1a:ad:c1:3f:c5:02:3f:2a:f2:33:64:de:92:58:48:af:13:53:
ee:a0:f4:50:e3:a0:1f:46:0e:1f:c2:24:a4:28:40:01:5d:b3:
99:5a:fb:5e:cd:a5:fc:7b:36:eb:41:ce:c8:d4:99:45:b8:0f:
38:d9:26:54:c3:9a:85:a9:91:55:8a:b8:19:1c:c4:66:9a:1b:
86:84:aa:dd:9a:09:0e:b5:83:16:e4:5d:e8:ca:5f:e9:bb:06:
d7:04:a7:2b:e6:4d:fc:65:13:b7:0e:d7:ac:2e:3d:25:60:fd:
dd:e3:70:68:19:ae:7b:b2:c4:cf:5d:95:48:d7:ec:87:ad:14:
54:0d:d2:72:54:0c:61:a7:d7:16:95:29:41:4d:77:fe:22:2c:
5e:e3:54:7e:05:a3:2d:50:22:b6:86:02:0b:f3:54:a0:63:6d:
c1:06:d3:e7:e3:51:0e:43:6f:12:ad:46:31:62:7f:cc:83:33:
18:b1:16:62:ca:fa:7c:f0:03:b5:ac:fc:00:66:40:d3:a1:0a:
2f:e0:a3:de:75:10:b0:70:34:92:dd:13:51:9b:73:26:a5:f9:
95:bc:02:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:25:42 2025 by rpki-client