Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d4401a01-22e7-306a-8ac3-1a3457bda2cd.roa
File: d4401a01-22e7-306a-8ac3-1a3457bda2cd.roa (raw, json)
Hash identifier: E91fnk55cZdNUmkGuFNPjUeHjVMa1IxyW6ARePnvXis=
Subject key identifier: A3:D5:D2:52:1D:8D:FC:74:1C:D5:50:E2:EB:4B:23:D5:AF:22:1F:F9
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858487CEB71F32B440F31ACB38E80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d4401a01-22e7-306a-8ac3-1a3457bda2cd.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 701
IP address blocks: 141.150.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:71:f3:2b:44:0f:31:ac:b3:8e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=b65db28f-68e1-4966-935c-165139386f8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:12:83:32:bb:2f:7d:54:18:a6:4c:8a:74:42:
16:6d:a5:7e:fc:28:a6:f2:5f:6b:6a:91:27:2b:86:
5d:10:a8:af:5a:02:3d:59:0b:d9:c6:94:02:70:24:
af:4f:ec:ec:31:66:0d:07:e2:cb:b9:bd:7d:b9:09:
d2:4b:fd:d2:f7:2b:da:36:93:b8:36:c3:44:12:aa:
66:a4:1a:a5:78:13:9f:a2:40:68:db:23:fd:ff:6c:
6b:48:c9:e4:78:2e:86:62:6f:85:24:85:b4:b0:8a:
9b:29:4a:18:e3:bb:52:52:53:ab:d2:15:a1:d9:09:
b8:8a:18:38:94:0e:2a:54:8e:e0:b7:bb:27:a9:52:
8a:ac:1e:ea:8d:a4:84:c4:69:5a:3a:f9:c3:25:21:
c1:64:c2:2d:d4:92:6c:9e:d7:e3:91:33:56:97:e0:
93:bf:65:6f:8d:8c:ab:a8:a9:f0:8b:fa:71:60:49:
ac:8a:89:82:c7:d8:41:03:d1:a8:25:78:7f:10:83:
5d:9b:2e:02:30:90:e4:55:b6:88:08:a3:30:0d:75:
fe:90:08:9f:e2:23:25:9f:3f:12:a6:18:88:19:e4:
6b:de:42:54:ef:a4:33:30:06:e9:cd:33:85:0c:d8:
a3:a4:c4:06:fc:22:5b:30:2e:2e:3e:c6:08:9b:56:
54:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:D5:D2:52:1D:8D:FC:74:1C:D5:50:E2:EB:4B:23:D5:AF:22:1F:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d4401a01-22e7-306a-8ac3-1a3457bda2cd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
141.150.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:45:67:87:c0:7c:a9:5c:7d:86:39:91:19:37:05:a8:da:85:
82:44:22:d2:12:31:02:2f:67:f9:39:c3:47:ba:9a:19:7b:25:
f4:11:5b:62:07:99:df:49:e9:5e:b2:d7:c9:70:79:2a:dd:25:
8c:a4:53:62:7a:37:8c:50:62:01:ed:37:a7:55:51:53:85:49:
3d:bc:12:ff:74:ca:d8:2c:c1:e6:54:62:57:8d:fe:41:07:d9:
67:4c:27:c1:ed:21:cb:83:bd:7d:52:da:02:db:a8:04:98:b5:
36:f8:0e:1b:24:e2:ae:03:b9:65:83:cd:ff:29:f6:47:5a:3c:
db:1d:b3:a9:94:45:15:47:ed:06:ac:d6:35:6c:34:5a:12:cd:
fb:d8:e2:f2:df:1f:b8:67:b5:9e:26:73:81:f8:ea:bb:3b:d5:
f3:61:69:0f:6e:98:72:d6:2c:27:01:bb:fb:ba:d5:37:7d:58:
0a:3f:54:07:0f:67:b9:8c:c3:1c:e9:e6:6c:9f:51:b1:98:54:
19:52:5f:16:92:76:3c:3d:23:19:ca:e9:6a:0a:d2:e8:61:4e:
ea:b4:35:a0:2e:7e:da:cc:e9:b2:02:a5:84:28:e7:4d:3d:03:
87:0b:50:a2:ae:c3:34:e3:10:15:22:4c:0b:a3:78:ef:02:cb:
5e:e0:0d:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:23:40 2025 by rpki-client