Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/0be47df5-e448-3b23-b7b1-65b9fd6b8adf.roa
File: 0be47df5-e448-3b23-b7b1-65b9fd6b8adf.roa (raw, json)
Hash identifier: 1LoVRtPLnvAaiw5yGlh/9jsTblcWjkA7XMeqz67tS7M=
Subject key identifier: 32:97:ED:9E:EC:96:B0:A1:7F:BB:96:F9:BA:16:6C:55:8F:8A:56:0D
Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial: 010D0C9F432858486C2B3307F1576C4178A97B00
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/0be47df5-e448-3b23-b7b1-65b9fd6b8adf.roa
Signing time: Fri 03 Jan 2025 14:00:51 +0000
ROA not before: Fri 03 Jan 2025 14:00:51 +0000
ROA not after: Thu 03 Apr 2025 13:00:51 +0000
asID: 54858
IP address blocks: 152.44.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6c:2b:33:07:f1:57:6c:41:78:a9:7b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Validity
Not Before: Jan 3 14:00:51 2025 GMT
Not After : Apr 3 13:00:51 2025 GMT
Subject: CN=b15b8ff9-0af7-4dbf-8cb3-cc54ef370431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ea:61:e4:b8:93:31:fc:b4:bd:10:2e:2e:18:
ba:e5:8b:5a:a4:b9:df:95:3b:1b:a8:ee:8a:9b:bf:
bd:f7:d9:9d:94:d0:be:b4:5e:f5:37:fe:8a:8e:e3:
66:20:c0:e1:f8:65:5c:7d:74:df:e6:f6:2e:2b:8e:
76:c3:fc:ea:24:52:12:5e:ec:05:d2:0d:17:5b:c2:
4b:e1:ae:05:90:ae:1b:97:7c:43:e5:e4:51:2e:dc:
6e:f7:5b:d6:1d:00:d1:df:74:64:00:9e:f5:dc:0e:
f4:00:6f:f8:dd:ed:6d:af:95:59:64:82:c6:8d:ef:
22:cc:29:bd:7d:d5:64:91:ad:bb:e1:2c:ff:ac:ad:
b4:97:7a:42:22:8a:3d:c5:fa:68:34:d5:11:17:45:
5f:ed:2b:92:24:96:51:a5:30:6e:dd:67:74:44:0d:
f2:db:26:eb:3a:84:43:b0:fa:63:c3:48:67:79:4a:
94:7f:f4:73:ce:04:92:42:cd:b9:14:a5:94:8d:f3:
68:7e:88:12:9e:9e:91:56:8e:ec:03:8e:66:0f:a8:
52:44:ab:45:fa:fd:8b:5a:01:84:dc:75:42:58:fc:
75:ae:ae:22:91:21:e6:73:3d:43:53:20:3f:a0:b1:
02:50:fb:0d:86:b9:23:9a:b4:5d:9d:df:d3:78:94:
d9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:97:ED:9E:EC:96:B0:A1:7F:BB:96:F9:BA:16:6C:55:8F:8A:56:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/0be47df5-e448-3b23-b7b1-65b9fd6b8adf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
X509v3 Authority Key Identifier:
keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
sbgp-ipAddrBlock: critical
IPv4:
152.44.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:24:8a:7a:b3:b6:ae:b3:25:ed:ea:f4:1a:87:29:3d:6a:2a:
a4:66:6d:51:d2:42:01:d6:ee:9e:1f:85:2e:28:42:55:af:45:
d5:cf:6a:6f:04:e7:5e:84:9d:a0:f9:89:a0:f8:5f:07:9a:e5:
17:76:84:9f:15:d2:f5:73:c0:b4:d8:71:cd:7f:08:9e:e3:38:
20:78:d8:a6:3a:7e:12:5d:94:18:a6:d9:0f:a9:1e:b0:df:8e:
48:43:fc:01:ec:77:bc:83:ee:64:55:b3:b4:2c:37:08:61:6d:
ea:d8:e7:e5:44:ff:f5:4f:96:f2:96:d4:90:77:df:8a:d7:c3:
8c:84:b2:2d:b7:4f:e0:56:81:43:dc:95:9b:67:88:e2:b0:df:
62:69:5e:99:41:1b:05:2c:a2:97:ff:c1:8b:ff:e2:4b:61:0d:
77:07:f5:e3:fa:31:e0:48:30:f8:3f:25:a6:f9:3b:0d:03:7a:
7a:ec:ed:84:ba:4d:23:c7:f4:fa:04:19:31:88:92:f2:b2:fa:
86:2f:f5:61:b3:50:f8:38:d9:85:bb:ed:08:8c:ff:67:30:16:
9c:98:0c:02:55:05:17:05:16:62:79:3f:72:f6:fe:34:89:e1:
60:92:c5:58:37:fe:39:f9:5e:c8:07:da:9d:f3:9f:45:5f:70:
bb:0c:96:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:13:59 2025 by rpki-client