Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/851c445c-2c16-3df1-8933-2d6f96ac1698.roa
File: 851c445c-2c16-3df1-8933-2d6f96ac1698.roa (raw, json)
Hash identifier: 2lOhuaAJbBuDLjbXijn1UTQGe/N7jkcoEYaCLsmbQuo=
Subject key identifier: B3:82:0D:1B:EC:D8:B7:00:75:A4:BC:F5:23:F2:AB:AB:E0:6D:AA:86
Certificate issuer: /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial: 010D0C9F432858491AA6C121E9EB8A5F332C9080
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/851c445c-2c16-3df1-8933-2d6f96ac1698.roa
Signing time: Fri 07 Mar 2025 02:00:39 +0000
ROA not before: Fri 07 Mar 2025 02:00:39 +0000
ROA not after: Thu 05 Jun 2025 01:00:39 +0000
asID: 15290
IP address blocks: 209.146.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1a:a6:c1:21:e9:eb:8a:5f:33:2c:90:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
Validity
Not Before: Mar 7 02:00:39 2025 GMT
Not After : Jun 5 01:00:39 2025 GMT
Subject: CN=85da9f75-3d18-4fd5-aa5f-709ee7a20334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d6:14:69:1f:6e:63:ce:1e:9f:6f:c9:7a:be:
ae:c6:6a:f5:e4:97:3b:fa:ed:44:02:8e:9b:e5:64:
a3:06:ac:a0:2a:7c:08:19:81:19:f3:fe:98:fa:8a:
e7:42:43:cb:5f:59:40:4c:0a:4c:bf:80:f6:ee:61:
b0:85:94:37:25:02:de:fe:9a:e7:f6:c0:fe:b2:6b:
bc:a1:5f:49:2f:f6:e6:96:bb:1a:ea:37:46:e4:f5:
d6:ba:f3:41:07:69:9e:8e:31:d0:ad:f0:58:a1:87:
3e:12:cf:7e:07:38:f6:89:d6:b5:93:32:ab:25:14:
77:07:bb:9b:0c:a4:8f:16:02:8e:3e:ad:4e:fc:9a:
49:74:00:6c:21:fc:38:3e:d9:c6:e5:dc:d6:86:81:
74:ab:6c:73:10:48:9b:54:58:e5:d0:69:63:5f:0d:
12:a8:17:12:d0:72:f6:f0:9c:f1:5d:17:27:80:00:
83:26:ea:2a:0a:50:04:05:d2:40:c1:18:e1:02:71:
61:a0:bf:47:6a:a5:66:6d:6b:ed:7f:b2:f2:db:67:
57:37:fd:8d:94:8b:4e:5b:3e:84:75:50:d8:3a:6d:
7b:82:3f:b2:74:a1:33:99:28:55:67:29:18:6b:81:
39:68:89:95:96:81:20:71:f3:57:4b:d3:bf:3b:b9:
de:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:82:0D:1B:EC:D8:B7:00:75:A4:BC:F5:23:F2:AB:AB:E0:6D:AA:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/851c445c-2c16-3df1-8933-2d6f96ac1698.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
X509v3 Authority Key Identifier:
keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
sbgp-ipAddrBlock: critical
IPv4:
209.146.153.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:81:8c:27:b4:37:f7:e4:77:97:fa:89:c2:0a:1d:c7:03:c1:
85:c4:c1:31:85:08:09:d6:0b:b8:75:e3:91:7b:bf:c6:90:7c:
57:c5:a7:30:f3:6e:ee:31:06:44:6a:5d:15:14:73:59:d8:41:
c6:f2:e8:30:97:c6:38:88:d8:fd:61:a0:16:a8:a5:1e:32:26:
66:3b:dc:77:dd:a4:38:0f:d1:02:bc:8f:9e:54:d8:54:59:59:
76:1b:68:fd:6c:1f:14:5d:fd:7e:3f:36:7a:c4:b2:53:fb:14:
7d:f3:68:62:9c:a8:b0:e2:e8:ef:11:3b:e5:f4:56:b4:c0:b4:
0d:55:fc:08:4a:4f:cc:6c:65:9e:8d:98:82:98:1a:bd:43:86:
64:21:82:c8:4e:aa:a7:00:1c:57:b4:89:c2:ef:24:3d:4b:4e:
a9:ab:64:ee:6e:b9:3e:ca:e2:15:55:c2:0d:3d:ae:d3:be:90:
66:4e:6f:33:a0:23:46:d2:7e:ea:31:ac:c8:e0:19:18:f7:77:
55:c2:41:a8:10:e8:6c:43:2f:ad:7c:d9:43:3b:2e:b5:44:8c:
b0:f0:f3:ed:99:45:e4:6d:8b:ad:80:c5:9e:84:6f:84:1a:57:
17:05:1a:0f:bb:91:08:a7:76:cd:b2:7e:20:17:9e:0f:3a:a8:
50:c2:37:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:17:31 2025 by rpki-client