Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/85852c49-c9ec-33cd-83f5-fe8aa1041d0c.roa
File: 85852c49-c9ec-33cd-83f5-fe8aa1041d0c.roa (raw, json)
Hash identifier: xKWWCbpruAwlVLkcupTbOjorn141zC9+reUcUlAGWsE=
Subject key identifier: 7E:6C:21:CB:E7:77:41:B4:06:5F:08:B9:C3:F6:37:16:D4:B7:0C:15
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F43285847EBBF879A274E60E6D490FF80
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/85852c49-c9ec-33cd-83f5-fe8aa1041d0c.roa
Signing time: Mon 18 Nov 2024 14:00:40 +0000
ROA not before: Mon 18 Nov 2024 14:00:40 +0000
ROA not after: Sun 16 Feb 2025 14:00:40 +0000
asID: 13335
IP address blocks: 150.48.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:eb:bf:87:9a:27:4e:60:e6:d4:90:ff:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Nov 18 14:00:40 2024 GMT
Not After : Feb 16 14:00:40 2025 GMT
Subject: CN=bd1a45c0-ccf8-4b8e-8836-215aee993d93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:26:04:f7:30:99:03:dc:ff:3f:0c:70:11:02:
60:bc:50:64:9b:8a:70:76:12:fc:17:d4:0f:2f:fa:
f9:0c:92:88:f1:02:2f:e2:4c:86:51:a0:c2:eb:8d:
9a:f0:e4:2e:55:6d:3f:36:f6:ef:16:b8:47:e1:66:
14:0f:84:6b:b2:04:b2:05:82:29:54:1e:52:d6:a0:
a4:39:ec:44:69:2a:4a:95:7c:97:59:4f:7b:2d:be:
64:b2:16:c2:6d:cc:b9:74:3c:03:25:0e:81:23:0f:
9d:0f:eb:35:61:1d:70:7f:84:40:8f:e5:11:93:61:
3a:d6:b8:a0:ba:87:e1:75:76:1f:0d:1a:5c:bd:36:
f5:65:24:9d:d3:10:5f:bc:bf:7d:95:fa:89:ec:fe:
0b:4b:9c:a7:0d:b3:61:2b:47:e7:44:92:c8:b4:ca:
09:25:6b:1b:6f:31:80:d6:83:89:ed:9d:b3:6e:5c:
33:2b:82:b1:4f:67:d7:9d:2e:86:c3:db:2e:ad:38:
48:2e:74:97:7b:7e:4b:02:4e:78:fc:e5:9d:ff:78:
2d:20:98:06:eb:4a:02:a7:cd:e7:6b:7f:69:a1:9b:
73:34:63:72:f5:a4:e5:76:a7:f1:3b:be:15:69:0d:
97:cf:d0:e7:b7:45:60:ae:2d:f5:49:3f:14:ce:a0:
32:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:6C:21:CB:E7:77:41:B4:06:5F:08:B9:C3:F6:37:16:D4:B7:0C:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/85852c49-c9ec-33cd-83f5-fe8aa1041d0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv4:
150.48.141.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:4e:70:54:64:9f:98:de:fe:72:d2:85:2c:ef:dd:bb:bf:15:
ef:38:fd:22:35:92:d8:53:5a:4d:f5:cb:c1:e4:bb:fc:19:51:
01:bb:36:04:53:6c:7c:d1:1a:b2:4b:4b:3d:02:61:79:95:12:
4d:2f:aa:fa:a3:f4:76:de:ef:8b:37:4d:8b:e9:eb:f9:02:74:
fe:73:88:b1:dc:5f:07:c5:c2:1d:7b:e9:51:68:e6:cf:25:0d:
06:95:83:d8:08:ea:1a:be:2f:4a:cb:81:3d:43:be:d8:9f:3b:
df:6e:bf:b0:3f:74:88:6f:90:b7:5a:69:d7:7c:df:a7:84:d7:
b2:0f:b6:5c:fd:5f:17:97:b2:c3:31:dc:72:9b:bb:d5:f1:ec:
a3:57:e5:cd:f7:b6:10:b6:e7:c5:c8:53:b6:56:1b:f6:ba:ee:
9c:97:ed:4e:20:88:b1:c6:22:d9:b7:30:47:dd:84:cc:5f:e7:
1a:6f:05:34:4b:54:0b:e7:c1:e8:09:67:8e:64:85:27:de:eb:
a1:73:f6:ac:83:7d:df:99:69:5c:ed:f5:25:46:28:c6:05:57:
a1:0a:de:e7:ee:f2:b8:e0:ca:9f:c0:a5:ea:60:f7:f8:94:c6:
f6:7d:80:c4:bf:d1:c9:23:20:83:78:92:c9:4d:1d:40:95:d0:
07:12:ff:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:44:06 2025 by rpki-client