Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a75ece7f-5380-409e-b027-b6733c088c34/c826d2c7-c973-3a95-b348-80cf23735821.roa
File: c826d2c7-c973-3a95-b348-80cf23735821.roa (raw, json)
Hash identifier: tJfLgUSOOBIA9V8Q+MbkSaBw9dY4MIyG0QjuHGcCoas=
Subject key identifier: 27:36:9E:FE:42:67:EA:73:0D:49:E9:75:3E:CA:C1:5C:CB:EB:26:4B
Certificate issuer: /CN=a75ece7f-5380-409e-b027-b6733c088c34
Certificate serial: 010D0C9F432858489A3B36C7B53CD6F8E5256A20
Authority key identifier: 41:9C:A5:A0:88:3E:87:77:F8:C3:93:27:25:12:7A:9F:8E:25:CE:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a75ece7f-5380-409e-b027-b6733c088c34.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a75ece7f-5380-409e-b027-b6733c088c34/c826d2c7-c973-3a95-b348-80cf23735821.roa
Signing time: Mon 20 Jan 2025 02:00:40 +0000
ROA not before: Mon 20 Jan 2025 02:00:40 +0000
ROA not after: Sun 20 Apr 2025 01:00:40 +0000
asID: 59
IP address blocks: 146.151.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9a:3b:36:c7:b5:3c:d6:f8:e5:25:6a:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a75ece7f-5380-409e-b027-b6733c088c34
Validity
Not Before: Jan 20 02:00:40 2025 GMT
Not After : Apr 20 01:00:40 2025 GMT
Subject: CN=9eca7844-4fcd-4466-a4b6-15c1dbcca40f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:30:0c:d3:9e:e2:9f:fa:69:3c:9c:50:a5:b0:
9b:16:d0:ab:27:e7:1e:8b:0b:ad:64:08:45:f0:1c:
57:ee:2c:66:2e:02:9b:d1:97:cf:44:72:cb:7f:71:
8b:97:9e:49:bb:cd:f4:93:66:99:27:64:c3:dd:ce:
52:e7:e6:3f:d5:64:1c:3c:da:39:fb:d1:9b:8a:4b:
6e:db:a3:18:d1:35:cd:e1:25:5c:ae:f6:99:50:50:
8f:cf:d4:99:55:09:3b:09:e1:4b:48:44:ba:3f:4b:
9b:22:0f:10:76:d2:0d:81:a0:a2:1a:c8:27:a3:b5:
45:cd:c7:64:61:f6:a7:21:f7:d2:e7:ca:53:b5:5b:
6b:64:51:f9:3c:20:2d:55:2c:02:33:9e:8c:59:1c:
c4:47:2a:7f:7d:72:c8:02:4d:c2:fa:23:18:1d:0e:
1c:b2:2b:ad:4e:05:67:f9:53:9f:ce:1a:a9:9b:85:
13:5e:29:3f:9d:40:fa:a2:99:25:a8:09:81:c5:c1:
80:b8:39:e1:6c:c4:7c:f7:24:f4:2c:f2:86:eb:fc:
5b:4a:94:00:a0:b7:c4:08:d8:ea:bf:e0:ce:21:8e:
1f:4c:9c:8e:6e:83:6c:22:c4:ea:0e:ed:53:17:f2:
82:80:60:b9:ff:48:76:e6:fc:46:fa:91:ac:6c:4f:
5a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:36:9E:FE:42:67:EA:73:0D:49:E9:75:3E:CA:C1:5C:CB:EB:26:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a75ece7f-5380-409e-b027-b6733c088c34/c826d2c7-c973-3a95-b348-80cf23735821.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a75ece7f-5380-409e-b027-b6733c088c34/a75ece7f-5380-409e-b027-b6733c088c34.crl
X509v3 Authority Key Identifier:
keyid:41:9C:A5:A0:88:3E:87:77:F8:C3:93:27:25:12:7A:9F:8E:25:CE:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a75ece7f-5380-409e-b027-b6733c088c34.cer
sbgp-ipAddrBlock: critical
IPv4:
146.151.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:de:55:c3:3e:1b:6c:3e:bc:5f:a4:31:32:a9:98:f6:d1:2c:
c3:15:3d:44:44:f1:55:9e:49:b5:19:50:e6:8f:4d:90:a8:cb:
c1:45:af:e7:dd:c5:90:f7:65:ab:c0:60:65:b1:37:95:8c:4f:
45:9c:56:6d:b3:20:7d:f2:cd:ba:09:c7:c9:bc:43:3f:0f:22:
d4:e8:52:df:e9:ca:61:31:f4:10:af:81:d7:f4:58:a4:b6:35:
08:42:7d:be:a2:47:c4:43:e4:fb:95:d7:0f:93:a2:9b:e6:f5:
89:62:cb:1b:b8:08:82:e4:bd:55:4d:a1:ee:c2:c2:94:1f:47:
13:0f:62:93:8f:7c:e6:3c:58:b8:5b:2b:fa:0b:47:6f:d3:9f:
0f:03:36:62:b1:89:f0:56:f0:84:7c:d8:20:f1:eb:dd:ed:d5:
99:30:eb:0e:6b:dd:84:2f:dc:38:96:02:a6:79:0c:ca:38:a4:
36:35:62:4c:c5:de:cc:63:3b:9e:bd:b8:6d:2e:a4:37:58:65:
f5:5a:c1:20:b4:6d:4d:48:9b:b7:0b:b6:81:a3:96:01:05:10:
70:12:73:0f:3e:3a:fc:8a:17:f5:a3:68:b8:71:de:50:52:30:
dd:4c:72:3e:93:7a:1f:02:4a:43:71:a9:4a:3b:86:4c:06:65:
e1:6b:aa:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:48:33 2025 by rpki-client