Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/a43b6364-88c1-3c94-9372-57bf5e1cfcd8.roa
File: a43b6364-88c1-3c94-9372-57bf5e1cfcd8.roa (raw, json)
Hash identifier: L2I2tZAdFED10kPPXO7lR8/dGDauBi6ohtyPbaY4cYM=
Subject key identifier: 1A:81:DB:51:D5:29:03:41:B4:95:CE:B4:59:0B:5D:09:22:BE:30:F8
Certificate issuer: /CN=15115143-11c8-4b06-80a1-a991fa50f2fa
Certificate serial: 010D0C9F432858494E2EB4FBC5DFE8547EEE3300
Authority key identifier: 57:16:FD:A1:1D:1A:0A:99:4E:6E:27:9D:28:B9:72:96:F9:BD:86:44
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/a43b6364-88c1-3c94-9372-57bf5e1cfcd8.roa
Signing time: Tue 25 Mar 2025 13:00:51 +0000
ROA not before: Tue 25 Mar 2025 13:00:51 +0000
ROA not after: Mon 23 Jun 2025 13:00:51 +0000
asID: 211535
IP address blocks: 128.254.224.0/24 maxlen: 24
128.254.226.0/24 maxlen: 24
128.254.227.0/24 maxlen: 24
2602:fbec::/36 maxlen: 36
2602:fbec:224::/48 maxlen: 48
2602:fbec:226::/48 maxlen: 48
2602:fbec:227::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4e:2e:b4:fb:c5:df:e8:54:7e:ee:33:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15115143-11c8-4b06-80a1-a991fa50f2fa
Validity
Not Before: Mar 25 13:00:51 2025 GMT
Not After : Jun 23 13:00:51 2025 GMT
Subject: CN=756bb8e6-be14-43bb-be33-e7075b544b9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:54:d3:93:ad:37:f0:94:bb:1a:ed:10:21:d0:
f0:ee:fa:8f:c3:33:d5:a3:69:07:a3:73:04:dc:89:
cb:5a:7c:c2:89:6f:0b:e9:3e:4f:8c:3a:d5:9e:67:
a0:09:79:db:a2:45:ca:e4:7b:34:ba:e6:48:53:5c:
20:1b:7c:eb:ea:23:36:c3:6b:75:04:d6:4f:6d:58:
ae:d6:3e:3b:a1:8c:91:6c:db:35:0e:e5:01:6d:4c:
de:b5:3a:9c:37:4a:62:9e:5b:a6:7e:99:98:7f:74:
34:59:7d:6b:db:22:ec:3d:d0:18:b6:a2:45:0e:59:
08:8d:3c:cb:ca:2d:95:b0:00:84:8b:38:99:98:4a:
be:45:15:d4:c5:5b:b9:92:e2:da:98:80:5b:ee:0c:
02:8f:de:65:b2:35:d8:bc:f8:35:31:34:25:62:c1:
e7:78:24:c0:5c:d9:de:73:52:f9:db:59:36:09:c9:
5e:21:2f:74:1d:2b:60:05:66:18:8e:a9:d1:55:9c:
a1:7a:72:58:ef:7b:52:df:93:0a:d8:11:34:86:61:
64:bd:4c:cd:b6:c6:77:19:27:38:ac:88:6e:ae:c4:
65:01:85:95:e5:b1:92:c7:c3:55:c9:f2:f7:4b:07:
a4:6d:1c:7f:ad:fe:42:e8:f1:aa:dd:cf:96:6f:3a:
2c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:81:DB:51:D5:29:03:41:B4:95:CE:B4:59:0B:5D:09:22:BE:30:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/a43b6364-88c1-3c94-9372-57bf5e1cfcd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/15115143-11c8-4b06-80a1-a991fa50f2fa.crl
X509v3 Authority Key Identifier:
keyid:57:16:FD:A1:1D:1A:0A:99:4E:6E:27:9D:28:B9:72:96:F9:BD:86:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa.cer
sbgp-ipAddrBlock: critical
IPv4:
128.254.224.0/24
128.254.226.0/23
IPv6:
2602:fbec::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:ae:44:25:1f:81:ef:14:31:f9:8c:5c:52:19:ed:b7:9e:a5:
4e:9c:b0:b9:07:dd:8e:7c:36:4c:dd:35:1f:4a:46:ee:ba:dd:
66:4f:1d:5e:cd:6b:af:68:85:cf:62:52:36:b8:25:cb:0f:e9:
22:f6:81:6e:d3:10:aa:3e:5c:b7:48:9e:50:cb:09:d9:8a:98:
75:24:f5:f6:15:b0:2f:a6:eb:f1:29:5c:69:6d:58:c6:55:74:
55:ed:f9:66:c5:15:27:5c:bc:3d:9c:63:54:31:c1:7e:e5:7e:
c7:61:e2:87:70:bd:2c:a8:01:6a:aa:40:df:e2:aa:fb:4f:d1:
e1:6f:a6:22:e1:08:04:4e:6b:ad:00:36:d5:6d:bd:70:16:4c:
97:78:84:09:2e:63:fa:94:1f:23:45:cc:8e:7f:06:96:4d:81:
08:39:03:0b:c3:2b:79:d8:5f:a3:36:4a:b4:5c:29:0e:14:58:
7e:c6:a2:53:e0:ce:ed:7b:3c:27:4d:73:f7:28:fa:93:19:5c:
b1:7f:f8:f1:96:97:6c:5f:40:b9:91:56:04:31:82:fc:fe:d2:
24:a8:8c:bf:a0:65:c6:46:c1:2e:bb:e4:59:c1:ba:74:0c:6b:
3e:1d:8f:5d:b3:11:f0:52:e8:ac:e6:6e:29:b3:d4:47:16:f1:
49:f7:cd:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:10:45 2025 by rpki-client