Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b4648fdc-ac99-31eb-8591-7ffa3ffc4150.roa
File: b4648fdc-ac99-31eb-8591-7ffa3ffc4150.roa (raw, json)
Hash identifier: vmLIDK5nh/p58bmTbHQM7pY0ZXJ2+s+TqcvxnK+3nIE=
Subject key identifier: 10:16:11:EA:A1:4B:CE:96:38:3E:19:70:D5:88:C8:C3:4E:88:BF:1D
Certificate issuer: /CN=b02dc6e7-fa1a-4acf-a036-5b4487100de9
Certificate serial: 010D0C9F432858494CC94F11649A1B350F1F0100
Authority key identifier: CD:A8:CE:37:4F:36:4A:E1:38:F6:F0:7E:CF:6D:76:B1:CA:C4:E8:3E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b4648fdc-ac99-31eb-8591-7ffa3ffc4150.roa
Signing time: Tue 25 Mar 2025 01:00:40 +0000
ROA not before: Tue 25 Mar 2025 01:00:40 +0000
ROA not after: Mon 23 Jun 2025 01:00:40 +0000
asID: 852
IP address blocks: 43.245.236.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4c:c9:4f:11:64:9a:1b:35:0f:1f:01:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b02dc6e7-fa1a-4acf-a036-5b4487100de9
Validity
Not Before: Mar 25 01:00:40 2025 GMT
Not After : Jun 23 01:00:40 2025 GMT
Subject: CN=158d4fe8-a603-4b6b-a87a-5c7967a18d8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:af:91:98:b4:f9:6e:8b:94:e4:ad:c2:02:e5:
ff:c9:9c:2f:a1:3c:54:71:d8:f7:b4:75:87:61:ed:
dc:5e:d2:7d:05:03:ed:ce:4b:40:ec:4b:1e:c3:b5:
f3:81:f7:08:54:1c:d1:cc:ae:8a:1e:6f:d0:8d:1d:
67:40:ab:60:08:c3:ad:f9:38:cd:68:ae:12:76:87:
f8:dd:97:44:85:26:de:d9:2d:d0:d9:14:3a:e2:ec:
92:c1:76:b3:37:12:83:a9:42:9d:6b:ca:96:2a:dd:
47:2b:9c:83:f0:f9:d4:91:00:a8:80:a9:11:b1:60:
84:61:2c:88:ee:52:d6:0f:85:96:1a:a3:eb:5a:b0:
66:ed:72:51:ab:48:41:2d:f2:53:3c:31:b4:f4:dc:
18:78:02:dd:90:3a:03:a8:88:7f:19:99:43:51:c9:
af:91:c5:f1:90:6b:0f:ca:99:31:12:82:7f:3d:56:
77:f9:3e:93:22:ad:05:3d:ac:93:e3:6f:ac:5e:47:
f1:88:cb:79:8a:25:76:6d:96:ff:fb:85:b9:e7:9a:
b7:93:45:72:cb:e4:74:70:3a:b7:2a:a7:5f:ab:21:
00:62:35:fa:2d:01:6c:36:db:40:32:40:c9:c3:07:
6c:8f:b2:57:b1:94:00:67:6a:d0:11:29:d1:cb:19:
b5:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:16:11:EA:A1:4B:CE:96:38:3E:19:70:D5:88:C8:C3:4E:88:BF:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b4648fdc-ac99-31eb-8591-7ffa3ffc4150.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.crl
X509v3 Authority Key Identifier:
keyid:CD:A8:CE:37:4F:36:4A:E1:38:F6:F0:7E:CF:6D:76:B1:CA:C4:E8:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer
sbgp-ipAddrBlock: critical
IPv4:
43.245.236.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:6e:4b:bd:d0:79:77:79:3f:31:ae:b4:c9:f6:ef:c8:b3:c3:
2b:c3:84:0c:61:41:07:2f:79:18:95:b4:53:6d:54:86:4d:f6:
84:0c:28:b5:9e:4b:b0:63:bc:15:60:dc:49:28:19:8c:6d:76:
b4:52:8d:f1:4e:a5:f2:7a:bc:6f:2e:99:3c:cb:35:58:c7:41:
ab:d5:20:d1:95:17:a4:2f:98:8a:65:ee:4b:d8:0a:b8:7c:72:
2f:1a:4e:ab:3e:e0:34:4c:96:a3:c2:a4:80:75:30:fb:44:a7:
82:88:1f:4d:df:21:64:d5:a3:e7:15:13:93:80:d4:63:ed:f5:
54:ad:a3:88:b4:c6:cf:c6:28:32:0a:05:5b:79:b0:77:b6:55:
e4:d1:46:cd:ed:e3:75:f8:70:7a:81:5c:db:96:09:6c:df:30:
b5:be:6f:44:89:aa:fe:aa:28:49:52:2e:bd:48:bd:94:1b:c2:
9c:94:20:9f:71:b6:9b:e1:5a:92:a2:df:77:ac:05:06:8f:ae:
45:30:5d:88:df:4d:c0:41:55:75:06:94:03:f6:66:03:ad:2f:
ba:0a:aa:3d:7c:a6:15:62:f3:38:39:77:73:05:38:2c:58:6b:
b4:e7:25:ce:bb:95:0b:bb:74:b0:a1:7e:9c:a5:bc:31:0a:33:
34:5b:c2:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:01:12 2025 by rpki-client