Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/a08b8785-fe90-30e4-a3c5-f1f48ba85ebc.roa
File: a08b8785-fe90-30e4-a3c5-f1f48ba85ebc.roa (raw, json)
Hash identifier: c63g5cNYFU89LkH3Ord1czP7d90Hm+VZ0b83aILdk2A=
Subject key identifier: 36:1E:8B:4A:37:5F:B8:BB:A2:48:8B:E8:FE:BB:D7:8F:E9:83:9F:5B
Certificate issuer: /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial: 010D0C9F432858493DD68E7A29BA4FC41A47A500
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/a08b8785-fe90-30e4-a3c5-f1f48ba85ebc.roa
Signing time: Wed 19 Mar 2025 16:30:26 +0000
ROA not before: Wed 19 Mar 2025 16:30:26 +0000
ROA not after: Tue 17 Jun 2025 16:30:26 +0000
asID: 13445
IP address blocks: 144.196.126.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3d:d6:8e:7a:29:ba:4f:c4:1a:47:a5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Validity
Not Before: Mar 19 16:30:26 2025 GMT
Not After : Jun 17 16:30:26 2025 GMT
Subject: CN=4563cb2b-9127-4234-aee4-f21346284cb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5b:10:f1:fd:d0:b0:a6:80:d5:6b:e3:35:59:
9d:95:91:79:a8:c3:31:48:fc:52:36:64:62:a5:98:
16:2a:f0:2b:06:9f:a9:21:a9:38:cb:68:34:2d:0d:
f0:53:1b:bf:81:b0:48:b9:38:e6:06:4a:91:0d:da:
76:61:e1:bd:b4:8e:48:32:d4:b8:ee:a6:2f:94:b1:
c4:76:c0:05:a0:ed:96:ac:d8:44:5a:b7:e4:39:e9:
4d:29:c8:b3:a3:44:9b:0e:a0:ed:e4:0f:17:f2:cf:
b7:f3:64:00:26:99:53:05:25:01:eb:c0:a0:d3:21:
e7:41:61:76:b0:c8:eb:44:57:98:63:67:af:03:45:
28:05:4c:11:9a:7b:0e:3d:97:3d:d5:ca:f8:80:74:
ac:5d:ac:b0:bc:4a:60:40:b0:22:c2:c0:17:6f:f4:
24:30:de:33:bc:4d:a3:a5:a2:6d:86:98:50:19:d5:
4c:95:39:af:21:3c:6d:a7:0d:10:68:56:37:83:eb:
6c:a4:e5:77:67:d8:d7:4b:b4:0d:39:b9:08:55:38:
f6:01:0d:03:de:da:73:0a:8e:86:4e:82:98:cf:d9:
5a:a5:f7:2d:65:12:92:fd:4d:d4:8f:0b:07:9d:9c:
16:0f:35:4a:41:f2:cd:54:ea:e9:69:52:b3:25:f3:
f9:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:1E:8B:4A:37:5F:B8:BB:A2:48:8B:E8:FE:BB:D7:8F:E9:83:9F:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/a08b8785-fe90-30e4-a3c5-f1f48ba85ebc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
X509v3 Authority Key Identifier:
keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
sbgp-ipAddrBlock: critical
IPv4:
144.196.126.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:e8:d4:92:6d:ed:2f:13:2a:cd:14:1f:57:76:61:75:7e:8a:
2d:ff:fa:47:c6:54:d0:2b:3a:82:5a:7f:4c:c8:d6:f9:9b:b5:
36:1c:fd:c9:8a:d5:22:a6:4d:39:98:48:85:55:03:59:89:a6:
4c:22:3d:4a:48:b5:01:43:26:4c:03:8f:8f:f9:f5:99:aa:db:
a5:61:ab:30:41:17:59:67:aa:41:05:55:0f:a8:69:62:1f:60:
56:09:82:1b:2b:4d:56:19:aa:89:25:24:d5:9d:e0:5c:13:52:
ce:5c:39:18:50:95:0f:a6:cd:aa:6f:83:e1:29:70:16:5b:53:
c2:b2:88:50:61:e5:95:e5:eb:e7:18:5c:11:6e:6c:98:aa:15:
fb:9e:15:fb:c5:f8:51:c8:f6:be:50:59:ca:29:c4:14:36:33:
2a:f6:30:9e:6a:8d:66:86:d1:02:97:a8:6c:7f:8f:1d:4a:e9:
98:7e:ca:62:ba:7d:5f:05:46:76:70:8a:9a:98:6c:c7:7a:66:
89:3d:04:77:d6:1b:c7:58:42:22:54:a2:45:6a:94:d4:ab:13:
46:10:52:93:c8:45:30:75:ba:a1:78:9a:c4:98:f4:82:33:49:
6b:c3:b4:95:68:1a:1e:b4:66:b0:d2:bc:93:4d:f0:cb:7c:df:
2b:9b:84:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:06:28 2025 by rpki-client