Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b60fd368-cb50-418b-8840-57c8491066b3/f4d7f13b-71e5-36f9-8515-997655669633.roa
File: f4d7f13b-71e5-36f9-8515-997655669633.roa (raw, json)
Hash identifier: /JTM3yjHgegnblw1MdTnVe232nIzIxHdBObfbepwhas=
Subject key identifier: BD:39:EE:59:B6:0A:8F:A6:05:20:5F:9D:10:5D:A6:FB:13:89:7E:22
Certificate issuer: /CN=b60fd368-cb50-418b-8840-57c8491066b3
Certificate serial: 010D0C9F432858483025435D673B8192044A3080
Authority key identifier: 8E:1C:4F:B6:E2:B8:B8:5D:C8:2D:ED:E4:80:47:C3:86:1B:5C:9D:8A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b60fd368-cb50-418b-8840-57c8491066b3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b60fd368-cb50-418b-8840-57c8491066b3/f4d7f13b-71e5-36f9-8515-997655669633.roa
Signing time: Fri 13 Dec 2024 02:00:39 +0000
ROA not before: Fri 13 Dec 2024 02:00:39 +0000
ROA not after: Thu 13 Mar 2025 01:00:39 +0000
asID: 398754
IP address blocks: 152.36.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:30:25:43:5d:67:3b:81:92:04:4a:30:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b60fd368-cb50-418b-8840-57c8491066b3
Validity
Not Before: Dec 13 02:00:39 2024 GMT
Not After : Mar 13 01:00:39 2025 GMT
Subject: CN=8c6cb185-1e12-4729-ba02-e2b1ce3cbae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5c:c1:1c:17:c5:c3:83:b9:a8:5b:d1:94:cf:
7a:45:bd:a8:83:1d:ea:aa:de:9b:e3:f9:28:2f:ee:
ba:e4:0d:80:a4:71:4d:8a:ab:3f:dd:dc:70:b3:f7:
c6:c4:db:73:02:a5:de:76:ad:4c:8a:dd:82:b8:b7:
0d:6b:96:da:20:84:02:fd:ec:b1:a8:0b:87:78:c1:
1e:69:70:7e:66:13:11:ee:c4:3a:c9:5d:96:76:bd:
5c:71:d4:fe:bc:ac:12:1e:dc:9e:98:4f:ea:9a:41:
04:37:e0:9b:b5:ba:99:d8:34:f6:10:6b:15:5b:2c:
fc:c0:a9:77:9b:2e:19:04:0f:0b:bb:86:e4:65:81:
d3:9f:78:c6:be:5e:3b:cf:27:19:92:d8:eb:d9:4c:
fa:56:5e:33:01:79:c1:61:81:75:11:79:7f:10:59:
06:97:7a:79:1d:b8:3d:7e:90:34:af:e5:e7:75:3c:
58:63:17:af:c8:b0:5c:4d:bb:38:41:93:14:c1:2c:
f0:5c:f7:6f:bd:a6:3d:61:ae:48:2a:89:38:5e:c2:
da:c0:d3:6d:38:e7:bb:2a:88:4a:60:c2:98:c6:42:
f1:de:b3:da:63:e7:b4:9d:eb:ce:47:af:8d:f3:d7:
be:d1:be:79:79:22:ce:83:4c:3b:a5:39:e1:ee:9c:
29:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:39:EE:59:B6:0A:8F:A6:05:20:5F:9D:10:5D:A6:FB:13:89:7E:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b60fd368-cb50-418b-8840-57c8491066b3/f4d7f13b-71e5-36f9-8515-997655669633.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b60fd368-cb50-418b-8840-57c8491066b3/b60fd368-cb50-418b-8840-57c8491066b3.crl
X509v3 Authority Key Identifier:
keyid:8E:1C:4F:B6:E2:B8:B8:5D:C8:2D:ED:E4:80:47:C3:86:1B:5C:9D:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b60fd368-cb50-418b-8840-57c8491066b3.cer
sbgp-ipAddrBlock: critical
IPv4:
152.36.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:8d:15:98:70:d3:83:f6:9e:91:d7:00:8e:79:f0:bc:8b:44:
2a:1a:9c:5e:98:3e:a4:7c:60:5d:b1:3b:99:af:0f:6f:fc:2b:
a9:17:c1:4c:b4:e9:1d:0b:ef:dc:bd:25:42:ba:8c:cc:07:46:
a4:73:bc:f9:18:e5:84:ae:73:ef:c9:cd:36:68:ba:0c:6d:64:
f1:d4:3e:c9:85:2d:5e:d8:6c:e5:c7:16:7d:27:5d:7a:ca:c6:
5c:44:8e:c7:77:c7:25:60:bd:8a:8e:af:34:90:58:2a:05:b0:
d8:23:ef:16:71:df:5a:27:18:21:fc:13:24:10:17:3f:30:ef:
d9:8d:11:02:4a:44:b5:7e:fa:c7:a6:38:ff:b1:b1:66:91:d0:
fc:f9:e5:9f:87:da:6d:d1:e5:63:2e:e7:c0:5f:6a:88:34:98:
77:97:5f:ca:e8:48:b1:a8:19:e6:2d:a4:75:39:2a:6e:9f:bf:
e6:42:ae:a2:e4:82:e7:1a:fb:29:8b:59:a9:4a:f9:09:f5:3c:
38:e3:d4:9e:90:76:26:b6:ad:e7:d2:d9:06:fa:1a:41:09:79:
b5:89:3f:b9:6c:6b:cf:a4:39:96:d1:16:58:03:18:02:a9:16:
72:c3:9c:fb:1d:2d:40:86:75:1b:39:6f:40:7b:bb:a8:42:78:
07:66:7b:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:24:39 2025 by rpki-client