Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/72649f6a-49e5-3dcf-9640-8ec76e4300bd.roa
File: 72649f6a-49e5-3dcf-9640-8ec76e4300bd.roa (raw, json)
Hash identifier: iSS5HHoeZKES2289Aaq31pXDzwFNpdAEdgMnt3/nVr0=
Subject key identifier: E3:DA:5D:76:E9:81:F3:77:DA:4C:20:2B:6D:AD:B1:25:1E:67:73:D8
Certificate issuer: /CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e
Certificate serial: 010D0C9F432858424E60B3E2E527CE288DC44800
Authority key identifier: F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/72649f6a-49e5-3dcf-9640-8ec76e4300bd.roa
Signing time: Wed 21 Jun 2023 12:00:00 +0000
ROA not before: Wed 21 Jun 2023 12:00:00 +0000
ROA not after: Sat 09 Aug 2025 04:00:00 +0000
asID: 11892
IP address blocks: 159.182.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:4e:60:b3:e2:e5:27:ce:28:8d:c4:48:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e
Validity
Not Before: Jun 21 12:00:00 2023 GMT
Not After : Aug 9 04:00:00 2025 GMT
Subject: CN=a76aaa07-38df-4109-a469-4aedde9d0dd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:73:a3:35:ee:5e:d6:ef:dd:ae:1e:58:cb:b2:
f4:0e:69:9a:82:43:78:0a:9f:e1:8c:bd:a8:21:33:
0b:05:52:b8:c0:58:ce:fb:6a:e8:02:b5:67:f2:94:
5e:f7:b8:1a:14:1f:a0:a4:31:73:8a:40:33:6d:36:
d0:32:e6:0f:f6:9e:fb:72:7d:d1:06:c2:c6:ea:60:
26:96:6a:5a:19:2a:20:38:4d:60:2b:85:81:5c:0a:
b9:e6:6c:ea:91:43:b7:fa:c2:0b:da:7e:81:92:63:
d8:35:a7:5d:93:e7:5b:98:fb:c3:39:83:ab:6d:9d:
cc:e1:78:e1:40:0b:c4:eb:61:18:9e:50:46:e7:a8:
02:ca:7f:fe:e1:3c:95:04:01:58:a4:80:69:a2:50:
8e:1d:ae:46:1e:34:6e:ee:77:73:98:c5:88:e6:da:
88:b6:c6:da:77:dd:4d:7f:e0:d4:66:ea:d5:c5:06:
aa:74:89:bf:b1:ad:91:c2:bd:8e:76:e1:18:be:f1:
e8:51:e5:d6:57:2e:4e:60:5e:70:12:22:5c:c0:94:
0c:a3:62:78:ac:68:ef:91:9d:ef:98:7d:f9:ee:c9:
db:15:2b:cc:26:6f:33:de:88:e9:a0:01:04:bc:1f:
96:1d:5f:96:55:f1:fa:66:3b:2b:2a:d6:47:03:e6:
97:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:DA:5D:76:E9:81:F3:77:DA:4C:20:2B:6D:AD:B1:25:1E:67:73:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/72649f6a-49e5-3dcf-9640-8ec76e4300bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.crl
X509v3 Authority Key Identifier:
keyid:F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer
sbgp-ipAddrBlock: critical
IPv4:
159.182.115.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bd:ca:56:b4:df:48:3a:69:60:97:0d:80:d9:45:d6:53:a8:20:
28:4f:cd:38:c3:b2:28:1a:d7:51:90:d2:8b:cd:bd:d0:f7:62:
2f:19:9a:d0:d8:fb:2f:9f:8f:0f:6a:de:19:10:eb:bf:cc:5a:
a6:d2:97:ab:35:26:08:a3:88:44:f2:a7:49:41:68:60:a9:a7:
d4:b0:9c:0e:11:9a:8d:bb:7e:62:df:5f:af:8b:39:86:24:a5:
38:fc:a3:8b:f4:8b:17:0c:e7:e3:23:9d:9a:aa:3e:13:9b:1b:
27:aa:96:d7:bd:49:84:52:72:72:05:46:fd:5d:b6:a7:78:6f:
8b:75:a4:06:20:f0:45:89:a5:0e:e9:ef:f0:16:dd:61:66:1f:
b7:a8:94:1f:15:3e:05:41:2c:1a:44:82:c9:45:7d:fb:83:f0:
ad:3c:35:b7:6b:50:f9:9b:87:3b:8e:1e:70:01:79:b2:6b:da:
0c:96:93:57:73:83:d7:31:d2:15:5b:41:10:6d:95:66:0f:1f:
07:56:1d:06:5f:96:da:2d:4b:05:ad:61:66:6f:04:af:5b:af:
77:db:8e:64:c6:5b:73:76:44:0f:47:dc:ee:27:e0:7f:3a:75:
c6:05:71:78:00:2c:a4:e4:bb:95:da:8c:1f:a3:9b:7e:41:a3:
95:52:5a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:21:14 2025 by rpki-client