Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e88a4c9a-fc1d-3fc8-9f9f-1e4f27f7cbd0.roa
File: e88a4c9a-fc1d-3fc8-9f9f-1e4f27f7cbd0.roa (raw, json)
Hash identifier: VXd0EuCE+d+iONL0IP/AgZwZVHxmdvhgy/gTgo3xprY=
Subject key identifier: D7:F7:A5:A2:E2:28:AE:C4:AB:C4:39:20:D9:74:A6:AA:AE:62:C5:0D
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C2618479BFC7F1379605FCC0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e88a4c9a-fc1d-3fc8-9f9f-1e4f27f7cbd0.roa
Signing time: Mon 03 Feb 2025 11:10:12 +0000
ROA not before: Mon 03 Feb 2025 11:10:12 +0000
ROA not after: Sun 04 May 2025 10:10:12 +0000
asID: 30036
IP address blocks: 150.195.88.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c2:61:84:79:bf:c7:f1:37:96:05:fc:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 3 11:10:12 2025 GMT
Not After : May 4 10:10:12 2025 GMT
Subject: CN=d104c4c9-96b2-4494-aa24-2641a9c10232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:16:9a:34:10:f1:2b:bd:db:a9:46:a6:17:8b:
85:76:cc:4c:7d:5f:aa:4d:62:e9:02:ee:29:09:8c:
47:6e:22:34:41:e5:ec:9d:21:18:ad:b3:4b:1d:b3:
3a:93:c1:69:ef:84:4c:e0:8c:be:40:79:d1:ac:c8:
c4:ba:9b:58:83:19:bf:71:7b:bf:d8:a9:fd:b8:78:
2a:ba:22:6f:cb:9a:80:3c:77:c0:1e:01:56:39:38:
1e:02:bd:ea:ee:c8:7b:ab:1b:bb:ec:34:0e:2b:32:
f0:c8:c5:3c:71:20:9f:95:41:0e:5c:bc:10:a4:23:
59:d3:9d:a2:c4:ff:73:53:04:c4:15:1a:9e:5a:a4:
ec:49:d8:7f:1f:c6:02:0a:40:fd:96:4c:6c:4c:b4:
31:84:cb:4f:d8:91:b7:f6:52:df:fe:f0:03:09:7c:
e9:1f:eb:5f:f0:3d:ae:32:6f:ac:3e:f3:f7:6c:87:
51:b0:0f:23:a6:62:e0:77:0d:b5:1e:df:46:e7:d7:
77:0e:a5:93:68:7e:fb:4c:2f:b2:eb:8b:ca:b1:e3:
77:b2:23:c2:b5:09:c9:fe:f5:79:7d:09:d7:df:cc:
d7:f7:ad:73:c0:96:6a:4c:39:f2:81:2d:1e:18:56:
67:1b:2e:52:c8:cf:ed:09:34:69:be:87:2a:95:7c:
47:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:F7:A5:A2:E2:28:AE:C4:AB:C4:39:20:D9:74:A6:AA:AE:62:C5:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e88a4c9a-fc1d-3fc8-9f9f-1e4f27f7cbd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
150.195.88.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:ba:7f:b1:40:28:8f:05:1c:84:e2:62:9f:b5:24:bb:c7:5a:
f2:fe:26:58:16:ca:9a:1e:42:79:04:7d:ad:89:69:b4:45:ed:
6a:8a:33:47:2d:6b:81:ba:48:48:42:d5:86:df:c4:c0:61:97:
f8:14:46:2b:b1:50:9d:57:c9:ef:d3:3d:03:f5:19:ea:88:0b:
74:19:e9:dc:ef:a0:fb:bd:b1:50:3a:44:fe:dc:cb:4d:1e:c7:
d2:e1:99:86:e3:09:54:7b:a4:4b:1f:59:35:a2:6d:37:1a:fc:
de:c4:a0:44:b2:3c:09:a7:2c:01:a3:ed:0f:2b:42:21:f5:35:
20:d4:1f:70:c7:83:4d:30:03:e9:66:06:53:99:b2:c2:94:aa:
e5:66:df:19:ab:78:75:17:93:1a:a1:2c:0f:de:f4:60:4d:d9:
1c:79:0d:3d:e0:2b:c4:f2:35:d5:92:4b:7b:3a:44:2e:39:38:
0b:4a:3f:64:bc:6c:24:93:c2:af:e7:aa:ed:34:4d:e3:15:e2:
52:68:f2:de:11:9e:2f:66:6d:0e:c0:db:e9:d3:e5:1f:fd:25:
21:36:2e:d0:af:bc:f6:b4:8f:48:4e:81:5d:61:5e:08:a2:2d:
8a:ee:1b:4e:69:b4:e4:7c:7a:bd:dc:5f:36:96:a5:7f:63:6f:
49:fa:3b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:50:27 2025 by rpki-client