Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/804758a5-8bfa-463f-a66c-d50aa7237fff/8916b605-f1b7-343c-b58f-f1991f2406cb.roa
File: 8916b605-f1b7-343c-b58f-f1991f2406cb.roa (raw, json)
Hash identifier: Cy7lPMqvuLPhhjgNASUyKOKyufX17EjoHNCKeF0UvD0=
Subject key identifier: BE:E0:8D:22:63:AD:15:4D:75:7C:77:11:01:7B:3F:DA:1B:26:72:B2
Certificate issuer: /CN=804758a5-8bfa-463f-a66c-d50aa7237fff
Certificate serial: 010D0C9F432858491ED6E9117B6649ADEE398200
Authority key identifier: C5:AC:F5:21:04:22:63:10:CB:AA:76:9F:4D:D9:1D:6F:49:B9:93:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/804758a5-8bfa-463f-a66c-d50aa7237fff.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/804758a5-8bfa-463f-a66c-d50aa7237fff/8916b605-f1b7-343c-b58f-f1991f2406cb.roa
Signing time: Sat 08 Mar 2025 14:00:52 +0000
ROA not before: Sat 08 Mar 2025 14:00:52 +0000
ROA not after: Fri 06 Jun 2025 13:00:52 +0000
asID: 22828
IP address blocks: 150.148.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1e:d6:e9:11:7b:66:49:ad:ee:39:82:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=804758a5-8bfa-463f-a66c-d50aa7237fff
Validity
Not Before: Mar 8 14:00:52 2025 GMT
Not After : Jun 6 13:00:52 2025 GMT
Subject: CN=8937e4b9-ebb2-45d6-8c38-b1cc8676fe1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f7:0b:8a:19:04:c2:b1:30:56:e1:1a:1d:7e:
8e:5e:92:01:87:50:26:b2:64:ef:92:7b:d7:c9:ad:
dd:ac:13:b2:5f:b3:42:6e:79:9d:95:e0:4c:f0:20:
e0:99:1d:09:55:cb:f2:09:20:e4:b4:5a:47:cb:2a:
e3:c5:2b:4a:99:9c:8d:bd:67:6f:b2:0c:10:cd:07:
b1:0e:a9:73:c1:c5:a7:ba:c4:2e:11:5c:e4:45:79:
95:5b:b7:35:05:95:07:83:8d:76:7f:b2:b4:30:83:
bd:36:0a:2b:d6:d0:7a:56:a4:4e:7b:45:9b:ee:61:
b4:77:bb:2d:3f:2b:b0:b0:4f:7d:b1:4d:3b:22:15:
a1:07:ab:be:02:06:0a:71:44:c9:62:a5:72:24:97:
37:54:14:98:24:ed:25:a9:43:b8:ec:3a:fc:0e:08:
ab:a2:72:4f:81:61:b2:1d:fe:0f:f7:00:f8:d2:a0:
eb:0e:25:34:15:7b:33:e2:c0:a0:95:f7:71:5a:a0:
2b:67:14:ef:f6:92:12:02:15:a6:f8:1f:83:f6:88:
b1:63:74:60:f3:20:04:8b:93:be:0a:bc:51:0e:9d:
2d:bd:fe:5a:1c:27:a3:47:fb:b3:a1:1f:33:eb:6f:
7c:ea:c3:99:71:d3:cf:88:d2:ae:e5:b7:62:f1:9e:
b1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:E0:8D:22:63:AD:15:4D:75:7C:77:11:01:7B:3F:DA:1B:26:72:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/804758a5-8bfa-463f-a66c-d50aa7237fff/8916b605-f1b7-343c-b58f-f1991f2406cb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/804758a5-8bfa-463f-a66c-d50aa7237fff/804758a5-8bfa-463f-a66c-d50aa7237fff.crl
X509v3 Authority Key Identifier:
keyid:C5:AC:F5:21:04:22:63:10:CB:AA:76:9F:4D:D9:1D:6F:49:B9:93:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/804758a5-8bfa-463f-a66c-d50aa7237fff.cer
sbgp-ipAddrBlock: critical
IPv4:
150.148.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:90:55:75:9e:34:88:16:19:5e:dd:21:ca:90:9e:02:c9:79:
79:09:a1:a3:76:c0:20:87:da:0e:48:dc:41:06:20:50:d6:fd:
56:d2:03:9d:dc:c4:c3:ec:4e:49:19:6a:7c:38:45:90:11:9f:
8c:69:93:dc:df:23:64:ab:c1:35:40:bc:03:96:9a:ea:ac:c7:
10:b7:08:21:63:d3:8e:7c:17:92:dd:eb:ea:c1:fe:97:44:b5:
f3:2b:3f:82:40:d6:d0:0c:a7:56:c5:92:f7:5b:7f:db:c4:17:
66:d8:b7:3c:99:da:1c:c0:06:ca:bc:ee:93:6b:45:aa:a2:4c:
0e:55:f2:e0:04:1a:ab:8a:a6:e1:bb:f2:af:51:4c:ee:d1:49:
a6:ef:bb:7b:a0:c7:48:90:fd:81:b0:73:69:b3:97:a8:96:9c:
5a:d3:50:9f:b6:cf:2f:f1:45:01:b5:72:1b:f6:f5:85:bd:85:
9d:43:c6:33:ce:2f:d1:76:70:37:c6:c2:5c:56:bd:8e:ca:88:
82:4a:1d:09:20:54:4e:8b:9a:e5:4c:46:6a:47:9e:c1:8d:40:
01:f6:bd:b0:8e:4d:2c:87:49:82:a3:2d:46:16:2f:28:66:41:
21:49:b1:fc:37:d0:bd:d9:79:cd:74:f0:7d:b6:29:c0:7a:02:
44:10:5b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:07:01 2025 by rpki-client