Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/e8652caf-7ee4-3c62-b950-9fc7c2435849.roa
File: e8652caf-7ee4-3c62-b950-9fc7c2435849.roa (raw, json)
Hash identifier: MWG80DEJraa7xCQaR3vq3wFs1+7lRdFZNsA0n0tU9Lg=
Subject key identifier: 9A:1A:1D:12:74:89:3D:71:3F:F9:8A:4B:BB:27:07:A0:F9:4C:7E:6A
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F43285847EBBF8C833E57E17DDD3DE430
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/e8652caf-7ee4-3c62-b950-9fc7c2435849.roa
Signing time: Mon 18 Nov 2024 14:00:40 +0000
ROA not before: Mon 18 Nov 2024 14:00:40 +0000
ROA not after: Sun 16 Feb 2025 14:00:40 +0000
asID: 13335
IP address blocks: 150.48.128.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:eb:bf:8c:83:3e:57:e1:7d:dd:3d:e4:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Nov 18 14:00:40 2024 GMT
Not After : Feb 16 14:00:40 2025 GMT
Subject: CN=41f4f90f-20d8-48ee-bdd5-679b9a4ec393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e8:d2:61:8b:82:84:e7:78:fb:43:6f:38:29:
a4:77:85:40:45:65:1d:32:17:5f:c8:43:c8:f3:b2:
d5:85:24:77:5b:ee:a6:70:6c:7f:ee:0d:08:b1:25:
c1:69:16:98:cc:23:cb:3f:b8:93:6e:41:32:c0:2b:
44:47:9c:e4:89:ff:5b:0f:d4:8e:9f:bc:fc:c7:62:
b0:bc:08:9d:7e:f5:ea:4c:05:6d:f1:ca:d1:5c:69:
b6:df:88:7c:9c:d7:76:15:5e:d8:65:09:17:35:ab:
24:ec:12:83:3b:99:03:bb:e0:ea:3b:e2:0e:87:24:
75:cd:7b:7c:50:6b:9a:19:d1:45:28:79:5a:a6:e0:
d4:10:6f:43:3b:26:aa:d1:5d:f5:dd:92:c5:2f:77:
b2:37:66:86:eb:81:01:7a:23:39:12:4e:35:d0:95:
2e:14:77:45:26:c7:3b:2f:f6:90:13:ff:69:fc:ce:
70:68:d7:f7:df:bf:0b:9e:be:b1:6e:ec:0d:0e:39:
29:2b:47:06:d0:7e:14:eb:0a:9b:40:31:76:2f:3e:
15:7b:e3:e3:bb:ff:a1:41:40:87:fc:8e:36:d4:7a:
4c:8d:95:3e:d3:c8:c1:0d:78:8a:04:b9:c7:b2:a7:
4b:47:29:d6:d4:bb:d0:8f:b7:90:9e:ca:d1:ea:8c:
e1:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:1A:1D:12:74:89:3D:71:3F:F9:8A:4B:BB:27:07:A0:F9:4C:7E:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/e8652caf-7ee4-3c62-b950-9fc7c2435849.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv4:
150.48.128.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:1b:cb:53:35:6c:16:94:1e:ef:de:5d:ac:17:ae:64:da:6f:
28:7a:c8:a8:bd:c0:6f:38:d6:11:15:d4:29:0d:ea:56:25:1d:
8b:0b:52:e2:b3:a7:e6:1e:9d:96:85:77:25:ab:db:b8:cd:31:
2f:c0:9d:95:29:2f:bf:eb:9e:27:a3:6e:09:c9:7c:87:95:82:
77:68:68:bb:68:24:5a:1b:f0:60:ac:ff:3e:25:fe:4f:7d:5f:
1e:c9:cd:03:66:96:bb:ab:4e:a5:2b:bc:4f:07:3f:9b:53:b1:
6a:ec:db:de:4c:4a:52:1d:84:ce:da:8d:75:9b:5c:f6:bf:20:
74:19:8b:6a:2d:01:22:96:23:ca:42:b4:a9:b5:6d:a6:11:fc:
17:85:e1:9a:3e:c2:84:74:71:fd:a0:6f:30:d5:01:0c:d4:1f:
54:b5:f6:c4:dd:0c:12:8c:0e:cc:80:2c:cc:ad:6f:98:c9:7f:
bf:3d:30:df:6b:c1:bf:ce:b9:75:79:2e:c5:ba:fe:dd:a2:92:
fa:8a:5e:3c:86:97:95:d0:a5:3b:49:79:eb:a2:3e:f8:54:8b:
9a:fd:2e:0f:4f:6a:1b:a2:8a:a0:a5:82:5d:70:b8:b6:5c:02:
08:91:0b:50:24:6c:28:2a:d9:9d:98:cc:0f:6d:0d:29:27:13:
47:52:c9:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:55:52 2025 by rpki-client