Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/0409d953-fb93-3031-9957-e0cd196421fa.roa
File: 0409d953-fb93-3031-9957-e0cd196421fa.roa (raw, json)
Hash identifier: gR+92rRaUMHny1jaQUs/x8c0V4B0Q/GTv+4U8o35j1U=
Subject key identifier: 4D:9B:98:50:1F:2C:56:45:A3:1F:6B:9B:3D:A5:CB:E8:58:F8:E2:D5
Certificate issuer: /CN=c7fd25a2-3041-431d-a6a9-c409b42835a1
Certificate serial: 010D0C9F43285848F92692897D98C5C548A53880
Authority key identifier: 35:71:0A:C3:D7:71:79:A1:73:83:DE:67:0A:48:A8:E0:20:EF:E8:85
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/0409d953-fb93-3031-9957-e0cd196421fa.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 16509
IP address blocks: 159.143.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:92:89:7d:98:c5:c5:48:a5:38:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7fd25a2-3041-431d-a6a9-c409b42835a1
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=8972dd01-e0c1-49b8-8d8b-beaeb931f042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:64:fb:2d:09:49:c5:54:d4:84:21:6a:e5:26:
ad:5a:8d:e0:e1:aa:d5:82:68:89:4a:5f:e7:b1:8c:
a9:9d:bd:99:c7:e5:b9:bd:03:9a:a5:11:b6:d7:f9:
aa:38:f4:36:10:e8:8c:24:f8:c5:8c:ac:d2:77:85:
c7:9a:22:1e:8e:fd:c0:28:b3:0d:9a:77:e9:fd:ad:
9f:d7:68:ab:2c:72:ba:8f:9b:37:40:63:0d:83:64:
de:0c:2a:20:40:21:79:29:69:1a:0f:9a:df:44:9b:
9f:20:a0:2b:89:99:2a:87:31:6e:98:20:e3:90:ab:
d6:f4:aa:29:ce:fb:23:e8:3b:23:b5:bb:9e:78:c7:
f4:dd:09:8a:1f:58:55:5a:c6:bc:86:93:ac:61:56:
b9:98:82:c6:3a:e9:4a:b8:d2:1d:0d:41:82:91:bd:
d6:12:04:f6:2a:8f:31:1c:38:d9:b1:80:34:8b:1c:
49:0d:83:a6:15:8b:c8:68:83:57:3a:94:3e:6a:97:
36:69:d8:cc:eb:f8:4e:d2:a3:ba:cf:30:7e:37:b7:
1f:f4:f9:92:31:78:54:ef:bf:59:65:6f:8e:99:09:
ec:f5:2b:e9:ef:40:86:b7:9d:dc:23:f3:2b:f3:38:
02:72:8a:e2:92:2d:19:de:c0:15:29:82:ce:6d:e5:
17:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:9B:98:50:1F:2C:56:45:A3:1F:6B:9B:3D:A5:CB:E8:58:F8:E2:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/0409d953-fb93-3031-9957-e0cd196421fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.crl
X509v3 Authority Key Identifier:
keyid:35:71:0A:C3:D7:71:79:A1:73:83:DE:67:0A:48:A8:E0:20:EF:E8:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer
sbgp-ipAddrBlock: critical
IPv4:
159.143.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:35:57:d8:54:b1:a4:ef:60:4e:44:0a:fa:b1:63:62:a7:a2:
a0:c3:31:26:ac:ae:fd:6f:3d:5b:79:15:41:63:d7:19:23:58:
25:e8:c8:d1:81:70:d0:06:56:36:eb:be:f0:d0:98:0f:11:2b:
43:d9:f4:06:ff:08:36:b2:0d:9d:28:0d:53:cc:ee:a7:6a:00:
75:cf:79:93:0f:78:00:0a:39:82:f8:c8:24:74:8c:08:4c:a1:
6c:22:22:02:84:31:ed:c9:c2:7a:9c:0a:a5:7d:fd:0b:42:e7:
0c:1d:df:15:14:12:93:a2:68:c0:be:70:f1:49:05:76:c0:d5:
fd:bd:a0:9f:a9:05:aa:e2:34:98:35:46:f4:76:f7:fd:fd:d3:
7e:92:f9:f3:db:53:94:51:6d:76:08:c5:9e:c7:1d:20:e6:95:
1c:6b:54:7d:8b:34:b1:82:63:d5:b0:21:fe:f4:c8:39:0d:5a:
0f:33:56:13:db:71:1a:b3:2f:11:b3:c4:70:c2:32:c4:18:3d:
03:1f:f1:9c:f9:02:34:22:29:89:90:80:32:9d:b4:e5:a6:54:
46:ff:a7:9d:c4:97:56:39:95:2a:c6:f0:4f:44:b1:b8:db:87:
a5:93:c1:c1:c9:db:55:24:72:69:25:75:bf:51:35:05:9a:e5:
6a:29:41:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:20:31 2025 by rpki-client