Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/6b8ed1bb-bc5a-39ea-80d0-61c0ce3707c4.roa
File: 6b8ed1bb-bc5a-39ea-80d0-61c0ce3707c4.roa (raw, json)
Hash identifier: unUj3CETNDH6DDKWh5nLujgBqLWr5lqh7qEPMGupTto=
Subject key identifier: 29:54:FD:2A:36:9B:45:40:A5:F2:97:17:92:D4:46:50:6E:03:CC:8B
Certificate issuer: /CN=c7910a08-9cef-446d-8b36-1ad473d3fb84
Certificate serial: 010D0C9F43285848C2B64C4251E90EFC4774EE00
Authority key identifier: EB:A6:60:A0:D3:2B:C7:47:9C:AE:D1:E2:0D:85:EB:46:93:B2:AA:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/6b8ed1bb-bc5a-39ea-80d0-61c0ce3707c4.roa
Signing time: Mon 03 Feb 2025 14:00:52 +0000
ROA not before: Mon 03 Feb 2025 14:00:52 +0000
ROA not after: Sun 04 May 2025 13:00:52 +0000
asID: 198100
IP address blocks: 23.156.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c2:b6:4c:42:51:e9:0e:fc:47:74:ee:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7910a08-9cef-446d-8b36-1ad473d3fb84
Validity
Not Before: Feb 3 14:00:52 2025 GMT
Not After : May 4 13:00:52 2025 GMT
Subject: CN=0165868c-a5a8-4feb-9298-9879d4a97073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c0:a1:16:1b:5b:28:d6:74:1d:15:90:87:8a:
5c:25:a5:37:27:e9:62:2a:f3:c5:00:05:f1:2f:ad:
96:5d:ed:32:fe:9c:78:1c:80:84:79:dc:f2:ef:75:
e5:8e:a2:9e:3d:7d:5a:b5:7d:ed:80:90:01:69:4e:
ad:c4:86:42:b4:2c:3f:0e:8f:e5:56:75:6e:52:11:
8b:3f:c5:87:b0:e4:be:6a:4f:65:4e:60:27:7e:11:
b9:cf:fb:cf:1f:74:c3:c2:a6:d4:90:50:4b:5e:ce:
13:44:66:55:e4:05:62:42:f4:57:16:85:ca:72:29:
24:a4:82:c8:7b:4a:14:c9:68:af:e6:6b:a0:7d:30:
99:4f:e1:6e:e8:42:eb:fc:42:13:56:f4:60:fc:41:
0a:f4:d7:19:88:07:ea:65:16:a4:eb:33:93:ae:ce:
89:16:21:fb:30:3e:d4:94:79:41:62:ee:61:9a:98:
ae:0a:55:58:97:a8:48:55:c0:e6:df:a0:56:fe:11:
c1:20:c6:18:3d:25:d8:ed:a4:70:61:f9:2b:06:ba:
d1:7a:da:4a:ae:46:57:ce:7c:d9:ca:f6:39:75:d7:
21:90:a8:fe:a6:72:ff:cb:40:c2:1b:34:c8:2c:e1:
6f:6a:ce:1c:a8:52:c0:17:1c:a0:d7:fe:06:2a:d9:
5e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:54:FD:2A:36:9B:45:40:A5:F2:97:17:92:D4:46:50:6E:03:CC:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/6b8ed1bb-bc5a-39ea-80d0-61c0ce3707c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/c7910a08-9cef-446d-8b36-1ad473d3fb84.crl
X509v3 Authority Key Identifier:
keyid:EB:A6:60:A0:D3:2B:C7:47:9C:AE:D1:E2:0D:85:EB:46:93:B2:AA:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84.cer
sbgp-ipAddrBlock: critical
IPv4:
23.156.152.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:0b:46:73:b4:fb:ef:62:cb:32:cf:2d:80:d6:48:8f:9f:d2:
24:e4:1a:27:2f:de:05:86:b0:8b:ba:bc:5a:10:f2:1d:8d:7c:
a4:96:6b:19:5f:12:a7:c9:37:29:ab:65:3e:bb:d3:48:35:6d:
b7:71:0a:c3:dd:6d:47:68:eb:2e:a7:2f:de:f6:07:d6:36:81:
d6:b1:bf:53:f8:c8:30:1a:89:d9:ef:02:d4:ef:09:4c:c1:c1:
41:07:35:93:9c:e8:2f:e5:5a:8f:75:5e:e7:f4:ba:00:fb:6d:
d9:99:c9:33:a8:4a:b0:0b:74:3d:b6:0f:ab:ad:d9:0b:16:8c:
1d:f6:3c:bc:7e:af:95:bd:7a:06:ee:1f:c7:a3:66:e4:58:08:
56:52:3e:5b:99:17:23:00:a8:b4:86:b3:54:57:71:d2:e5:16:
85:ba:1f:eb:89:57:19:24:9e:b9:8b:db:ae:8f:71:02:a3:5c:
2a:df:67:a8:a9:9b:b6:e2:7b:84:95:bf:55:63:51:68:88:3c:
23:52:e0:28:e4:6b:b8:a7:51:e9:e0:7d:16:5f:a5:12:2f:1b:
a3:1e:07:ea:1b:45:bb:29:04:89:0e:f7:d8:48:72:a4:7d:97:
7b:8c:1b:33:3e:64:ba:8d:4b:2b:76:d7:03:22:10:36:8e:c5:
71:b3:26:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:00:08 2025 by rpki-client