Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aa8794aa-575d-368e-8d1e-fd1f141bb911.roa
File: aa8794aa-575d-368e-8d1e-fd1f141bb911.roa (raw, json)
Hash identifier: QIMnaNdrY4IEZll9lEaEF0aqNC7juAOAMMwSGmI/MKk=
Subject key identifier: 7F:CE:CD:74:CD:7E:C5:7D:7B:6D:CA:FC:5C:93:3E:4E:4D:F5:7B:6E
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848424B0432A2140A3F3DB1B900
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aa8794aa-575d-368e-8d1e-fd1f141bb911.roa
Signing time: Thu 19 Dec 2024 14:00:52 +0000
ROA not before: Thu 19 Dec 2024 14:00:52 +0000
ROA not after: Wed 19 Mar 2025 13:00:52 +0000
asID: 6167
IP address blocks: 97.150.128.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:4b:04:32:a2:14:0a:3f:3d:b1:b9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 19 14:00:52 2024 GMT
Not After : Mar 19 13:00:52 2025 GMT
Subject: CN=88bfdea3-feb9-4d53-8fa1-9df76d39838e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:da:9b:37:5d:97:90:63:9b:47:02:63:79:bf:
05:23:bc:72:f6:a1:90:e8:c4:7d:8a:38:55:d0:95:
67:e7:85:30:21:04:3d:13:1d:d3:21:69:89:56:95:
46:f2:93:53:a3:73:6d:a6:6d:a2:2f:fe:ea:1c:ed:
68:32:a6:fc:45:40:7e:bd:e0:15:f1:e1:3b:d7:bb:
7e:56:65:6a:5b:50:fb:5b:8e:45:b5:6d:c3:24:50:
03:cb:0b:5a:d7:07:85:e7:de:f4:31:64:58:8b:07:
a1:cc:07:09:eb:6a:93:65:be:d5:a0:1e:6f:2e:bf:
a7:1d:9d:59:51:39:13:c6:d1:74:49:80:a4:41:9b:
a3:cf:b1:71:e6:40:d9:e5:ae:65:dd:7b:5a:af:e6:
3b:b4:8d:13:9a:ce:aa:0e:47:da:e2:87:a3:74:d8:
ef:9d:59:d9:f9:04:d7:ac:b2:ac:4c:6a:5e:f1:c2:
e5:e2:38:60:d0:2d:a3:7e:83:1d:3e:a6:09:57:18:
cf:bf:58:31:20:34:e5:a5:a4:f7:cc:5f:15:27:bf:
18:6a:f9:11:f7:3e:e7:47:41:a9:b9:e8:23:49:21:
10:b7:60:0e:d1:bf:e9:b1:ba:6b:ec:c2:74:e4:90:
2b:46:dd:c3:48:79:89:89:c2:70:f3:3a:f2:a4:84:
43:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:CE:CD:74:CD:7E:C5:7D:7B:6D:CA:FC:5C:93:3E:4E:4D:F5:7B:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aa8794aa-575d-368e-8d1e-fd1f141bb911.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
97.150.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:86:9f:ba:b4:ba:ec:ac:57:52:56:7d:82:15:7e:95:25:27:
ce:53:00:29:c7:93:aa:87:ca:b0:0b:75:6a:ed:82:1d:4e:87:
fd:37:9b:bf:eb:62:83:64:39:3e:91:73:02:21:a0:df:59:f4:
24:27:33:ce:cf:b9:7b:00:12:bf:d8:ab:4c:88:34:e3:fa:a9:
15:eb:af:14:dd:3c:37:5c:79:f3:87:11:60:d4:5d:08:dd:dc:
52:10:75:d2:b6:41:a3:a5:a2:c2:8e:01:1d:20:bc:0a:87:ae:
30:0d:0b:4f:8f:a7:92:b9:54:ed:5f:0e:87:c1:ca:e3:df:0b:
1e:20:99:47:0d:7e:de:5b:29:a4:04:75:fe:32:7a:bc:55:d1:
ce:ff:14:dc:a1:5c:83:61:9b:59:3d:62:b4:99:8d:cd:26:14:
41:94:fd:90:6e:21:08:55:54:78:2f:96:30:1d:32:8b:e1:21:
97:a0:1a:b0:c4:3a:e5:cd:bb:fe:39:b0:ae:49:67:dd:19:9d:
55:bc:a9:a4:11:dc:9d:9f:24:7b:48:63:bd:6e:6c:c4:8e:56:
0a:4d:3b:fb:53:33:51:5a:4a:50:90:fe:84:b4:92:f8:5b:db:
bf:aa:a8:03:df:1e:13:c7:a1:08:e5:a4:82:39:8c:30:c8:d0:
f0:29:91:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:49:42 2025 by rpki-client