Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/442d8d89-07c2-3234-8a6b-08d87f6def9f.roa
File: 442d8d89-07c2-3234-8a6b-08d87f6def9f.roa (raw, json)
Hash identifier: Guq7QxICGZ/XFfh9/FE2LwcvxH6+PffCQ/9p2OtYtpk=
Subject key identifier: 90:33:00:FD:59:0D:0B:BB:CC:AB:3A:AE:CB:8A:71:88:36:FC:CF:BF
Certificate issuer: /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Certificate serial: 010D0C9F4328584882809B303B5F73A203801E00
Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/442d8d89-07c2-3234-8a6b-08d87f6def9f.roa
Signing time: Sat 11 Jan 2025 14:00:52 +0000
ROA not before: Sat 11 Jan 2025 14:00:52 +0000
ROA not after: Fri 11 Apr 2025 13:00:52 +0000
asID: 12083
IP address blocks: 143.59.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:82:80:9b:30:3b:5f:73:a2:03:80:1e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Validity
Not Before: Jan 11 14:00:52 2025 GMT
Not After : Apr 11 13:00:52 2025 GMT
Subject: CN=5f35305f-a993-43d5-a811-3f821f25a579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:87:94:89:94:b4:e0:6a:a5:38:ea:93:32:0d:
50:e1:46:91:8d:02:8b:b5:8b:78:95:92:c5:b8:f4:
63:2d:1a:d3:8b:51:40:fc:84:50:82:fb:a5:4f:f1:
0a:75:02:e0:40:12:01:3b:6d:5b:48:bd:69:ca:8d:
2c:0a:5b:cd:85:b1:17:f2:ca:69:1d:a0:78:b6:52:
5e:dd:20:7d:be:06:f4:94:b3:35:ed:0a:0b:78:b1:
7a:f4:30:b3:04:ec:01:f1:87:30:a1:73:a7:36:20:
29:b4:a5:23:62:06:f0:72:cb:a7:79:9e:30:db:02:
b6:b6:17:b3:0f:33:b6:28:99:2e:06:81:ad:2a:89:
52:a6:b5:1c:a0:6b:27:0b:2e:6b:69:9b:9e:63:79:
03:26:fe:35:9a:73:75:18:04:57:e9:f1:fe:15:27:
35:37:47:66:a2:0e:fd:6a:84:a8:8b:e3:05:4f:20:
1d:d1:d8:0e:65:46:be:7b:92:b4:6c:5a:37:95:29:
f7:a0:7a:45:39:42:e8:66:f2:ea:39:1e:c2:b5:47:
4b:c6:ee:b6:f0:63:43:25:19:c1:0c:1f:e0:c3:d2:
2b:3f:a1:c8:ec:37:b9:c8:7b:c3:55:15:74:a6:e9:
40:32:b8:81:15:35:f2:c0:10:a0:cb:54:88:aa:be:
c8:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:33:00:FD:59:0D:0B:BB:CC:AB:3A:AE:CB:8A:71:88:36:FC:CF:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/442d8d89-07c2-3234-8a6b-08d87f6def9f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl
X509v3 Authority Key Identifier:
keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
sbgp-ipAddrBlock: critical
IPv4:
143.59.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:98:2d:6a:dc:5d:c5:f6:bc:0e:77:20:f9:e7:37:a8:b9:2d:
dd:b0:f9:4d:3d:63:14:39:1c:35:94:aa:e2:a5:e9:67:fc:8a:
70:6a:e3:e7:45:4b:02:9f:a5:bc:2f:ff:3c:40:e6:68:eb:d1:
f4:91:27:f9:a2:46:b6:57:3b:b5:7c:7f:80:9a:c2:5e:a9:0c:
3c:96:fc:ba:97:c8:2f:9a:b8:8e:e9:85:82:5a:33:aa:02:b1:
39:bd:52:d3:3d:f0:78:ff:32:81:e9:54:2d:0f:b5:e4:ed:ed:
50:0b:8c:15:b8:a2:d3:f0:e5:d4:76:5f:1a:cc:a5:f4:41:d3:
91:a1:ef:3d:a7:24:4a:20:0b:e8:08:e1:ab:22:08:cd:fe:89:
34:f8:a9:b2:9e:ea:d5:3e:27:7f:29:47:e0:b4:d2:78:f9:93:
ce:5f:21:e1:f9:bb:8c:5e:2c:bc:5d:5a:96:16:98:e6:12:3e:
58:20:44:ae:ce:3e:96:e3:88:65:fe:bf:bd:d3:8a:50:c2:53:
b7:60:9d:ca:99:bc:83:54:e3:40:7c:77:b5:4d:6f:1e:31:d9:
36:93:ff:89:35:cc:23:5b:33:d0:1c:fe:f1:ba:ae:a8:54:3b:
36:2c:c7:66:53:c2:dc:0d:b9:4e:41:2e:c6:29:75:7e:5d:ed:
62:d8:a4:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 12:06:31 2025 by rpki-client