
Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/08701de5-6e7f-35ea-94a1-468c45f69919.roa
File: 08701de5-6e7f-35ea-94a1-468c45f69919.roa (raw, json)
Hash identifier: aohagOFko2RkaBboTwI//7bU9dWE6AhEqaqEZRw62mQ=
Subject key identifier: D4:C7:D9:9E:CD:20:2C:36:B4:9C:2F:26:8D:D2:1F:39:F1:27:6C:6A
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C57686A5D3B3B002BFCB58E0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/08701de5-6e7f-35ea-94a1-468c45f69919.roa
Signing time: Tue 04 Feb 2025 13:39:57 +0000
ROA not before: Tue 04 Feb 2025 13:39:57 +0000
ROA not after: Mon 05 May 2025 12:39:57 +0000
asID: 30036
IP address blocks: 150.195.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:76:86:a5:d3:b3:b0:02:bf:cb:58:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 4 13:39:57 2025 GMT
Not After : May 5 12:39:57 2025 GMT
Subject: CN=4fada3c8-a20a-433a-874e-b1ea4f9cd7c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ed:85:ff:15:a9:86:81:06:a4:66:a8:ac:dd:
f8:1e:8d:78:46:22:70:66:ea:d3:15:c1:60:de:d0:
b0:b8:20:9e:9d:26:61:3a:11:a7:fa:87:66:33:5c:
62:de:f6:34:ca:f5:66:10:89:0a:38:06:86:7d:06:
46:3b:eb:3a:65:58:ed:cc:05:45:8e:e7:c7:b7:3a:
90:21:87:b5:2b:45:c2:0b:48:7a:d5:b9:2c:be:7a:
e5:2c:87:18:b9:f4:71:48:b9:a9:a4:71:61:b6:3d:
32:86:c3:27:c5:ec:95:11:ff:58:b4:e9:24:42:81:
d3:a3:bc:72:66:31:39:b6:66:c1:e3:62:69:fe:a0:
84:09:ab:d0:48:ba:98:b0:ab:f3:e4:f0:11:c2:cc:
3e:a9:a3:e2:ef:7b:9f:7c:9a:79:52:03:cb:1c:95:
85:51:c7:2b:bc:56:e0:13:02:d3:da:41:6f:3e:27:
6a:e0:55:7f:58:78:52:9b:aa:29:8c:c3:fd:ae:97:
19:5a:7e:45:16:c8:54:38:2f:8f:5a:49:39:4c:fc:
8f:ca:29:4c:15:11:b3:b1:7c:58:92:56:53:c1:ee:
6e:ec:8a:17:b8:81:a5:0b:ad:74:04:5f:8f:dc:93:
ee:9c:8f:b8:eb:90:10:d9:91:55:ca:83:91:69:84:
dd:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:C7:D9:9E:CD:20:2C:36:B4:9C:2F:26:8D:D2:1F:39:F1:27:6C:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/08701de5-6e7f-35ea-94a1-468c45f69919.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
150.195.2.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:4a:d0:7d:46:45:94:9d:7a:f9:6b:56:50:4d:3c:e8:24:95:
82:e9:bb:6a:d4:ea:72:62:73:de:a9:2a:84:6b:64:38:33:c6:
5c:8f:15:82:af:e4:ea:5a:cc:60:65:a8:d0:a3:97:b1:c7:21:
04:46:e0:12:b7:de:7b:a8:86:bf:74:41:45:b1:f5:41:81:c4:
72:18:c3:d0:63:ec:25:70:6b:f8:a9:dd:8a:15:8e:65:1c:09:
97:c7:d6:cc:06:f6:b3:c7:3c:d0:63:3f:d5:d7:59:56:25:ab:
3d:1f:95:54:f5:66:1f:3f:dd:ee:c8:fc:34:9b:33:d5:0f:1d:
b6:e1:47:8d:e2:cf:46:fb:14:6b:f7:d6:45:92:42:58:26:62:
92:b5:f3:d4:a0:7b:b7:f6:9e:72:5a:3e:07:11:ad:61:32:a3:
c2:7a:14:32:d5:d3:53:c2:e7:e6:3e:73:3e:50:48:4b:04:a2:
9b:b6:8a:d1:16:f3:4b:14:63:47:c1:60:ea:38:6e:4b:52:5a:
fb:c8:f8:0e:f9:b6:ac:29:cb:84:59:0d:f9:e0:11:8a:a6:fb:
89:ec:e6:e0:0a:a2:6f:00:cf:53:7c:ea:9f:2f:74:89:87:c3:
0c:77:f6:fd:d1:b0:01:0c:00:2c:c5:1c:58:f7:0e:45:d6:58:
4d:4d:6d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:58:27 2025 by rpki-client