Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/7e0c136f-58ee-3e77-bfe1-433cde15afb7.roa
File: 7e0c136f-58ee-3e77-bfe1-433cde15afb7.roa (raw, json)
Hash identifier: w/5epgB5L+z75PypY4MLpXfbRiSdPTuEd5X27n9ToK4=
Subject key identifier: EA:A0:A5:3A:74:99:F6:14:06:7D:38:79:38:F1:83:D3:43:C4:88:96
Certificate issuer: /CN=61e7cca0-e65d-417d-a651-371c91be9c95
Certificate serial: 010D0C9F43285849244E85C10FB68A62CAEDA0E0
Authority key identifier: 64:A2:9F:B0:12:A3:74:F2:09:E2:03:8E:EB:E2:C6:D3:63:24:57:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/7e0c136f-58ee-3e77-bfe1-433cde15afb7.roa
Signing time: Mon 10 Mar 2025 13:00:52 +0000
ROA not before: Mon 10 Mar 2025 13:00:52 +0000
ROA not after: Sun 08 Jun 2025 13:00:52 +0000
asID: 1448
IP address blocks: 156.146.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:24:4e:85:c1:0f:b6:8a:62:ca:ed:a0:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61e7cca0-e65d-417d-a651-371c91be9c95
Validity
Not Before: Mar 10 13:00:52 2025 GMT
Not After : Jun 8 13:00:52 2025 GMT
Subject: CN=433a10d9-619c-4a20-80a9-e403554f984d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:7f:1c:46:f3:9c:03:30:9c:6f:87:d5:29:b4:
7a:44:7a:07:a4:ed:c7:b4:39:13:5b:f9:05:18:fc:
6a:28:0f:be:23:42:c8:40:17:05:93:39:78:1c:56:
c0:4d:5a:dc:5d:09:65:0d:02:0c:15:da:f4:2f:2b:
fa:40:1a:ae:10:74:ca:60:17:64:e0:33:0a:20:99:
21:39:2c:97:9e:a3:39:97:1a:aa:da:f5:45:2a:f1:
ec:c2:08:30:2f:a2:57:4e:8b:e5:6a:18:db:b0:aa:
67:a6:d7:ff:c1:a2:c0:9a:5d:c6:d7:05:fa:c9:20:
24:2b:9a:a6:2e:97:0a:b4:62:1e:63:3e:fa:8f:bb:
66:af:e2:de:ad:2b:4d:cb:f2:4e:44:3a:86:26:34:
99:4a:d7:e2:8b:23:ae:48:ff:f6:67:8e:aa:34:da:
f7:61:6d:e6:fe:8b:fe:29:86:c8:41:30:13:cf:a3:
d4:df:c1:cd:e0:10:b9:95:2c:3a:d4:0f:b5:9c:b2:
6d:78:ab:20:eb:a6:80:78:70:0d:36:20:e9:70:1b:
36:e3:15:70:1c:97:ac:d3:13:4d:d6:fa:4f:ce:0d:
6a:8d:43:cd:b0:a4:a8:b3:a7:53:3e:9c:c1:ae:f4:
43:79:42:d9:20:66:45:e4:04:77:c7:ed:a0:0f:9d:
58:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:A0:A5:3A:74:99:F6:14:06:7D:38:79:38:F1:83:D3:43:C4:88:96
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/7e0c136f-58ee-3e77-bfe1-433cde15afb7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/61e7cca0-e65d-417d-a651-371c91be9c95.crl
X509v3 Authority Key Identifier:
keyid:64:A2:9F:B0:12:A3:74:F2:09:E2:03:8E:EB:E2:C6:D3:63:24:57:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95.cer
sbgp-ipAddrBlock: critical
IPv4:
156.146.216.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ab:a3:92:f5:f6:c0:16:e1:c5:ec:67:80:c7:7c:29:3b:3c:d5:
8a:4d:45:7e:f6:3e:08:6b:14:e2:01:ed:39:28:c5:29:33:30:
d6:c8:bd:1c:9e:84:c6:31:53:7f:40:52:e3:4f:09:b0:2f:b0:
fb:d4:b8:45:0a:54:76:9f:93:97:4b:ba:99:d0:51:82:3f:42:
42:78:5b:05:40:7d:52:61:bb:bb:b9:06:a2:82:d6:f5:b3:1f:
d4:19:5f:bf:32:d3:d7:3c:8f:eb:d4:43:1f:55:17:4e:71:45:
dc:f2:7b:0a:0b:04:e6:53:12:3e:12:8b:91:35:ab:45:84:1f:
72:93:b2:4f:c5:0e:70:a5:bb:64:d8:7d:fc:29:e7:5b:da:f9:
63:b9:35:32:19:d4:0b:b8:94:68:b2:35:dc:7b:8a:ea:de:8a:
a5:d4:29:90:53:e1:42:0c:2e:15:b0:a5:e5:33:26:a0:f2:a6:
4a:32:c0:a7:b5:dd:18:b4:99:06:c9:2c:ec:e3:ff:b2:84:58:
77:e6:19:fd:1e:51:72:45:cf:a7:19:b0:b8:0a:53:51:77:89:
cb:ec:07:32:56:7a:8c:4c:92:89:d9:a4:b0:2d:48:da:9a:ea:
51:dc:fa:5c:98:99:0e:4f:21:ee:12:25:d2:8d:1b:09:90:71:
40:1e:53:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:37:13 2025 by rpki-client