Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0bc9081b-126a-363c-a2e5-1fe6c48e95fa.roa
File: 0bc9081b-126a-363c-a2e5-1fe6c48e95fa.roa (raw, json)
Hash identifier: SNnkm91Jv2Egpo7QYKNeWG+yk3C/DZSO7sH9f3x8tHc=
Subject key identifier: C8:69:3D:D4:07:A3:B5:BA:A3:CA:42:4B:86:99:2A:5F:0B:48:D2:5A
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492184195171D13B33FC67BA80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0bc9081b-126a-363c-a2e5-1fe6c48e95fa.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 33490
IP address blocks: 162.150.159.144/28 maxlen: 28
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:84:19:51:71:d1:3b:33:fc:67:ba:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=db6438cc-a9a8-44d1-b051-701bc74cc02b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:51:08:f7:ba:35:7f:e3:b5:ff:38:27:ba:34:
63:08:cd:bd:e9:40:8e:38:5f:18:52:52:28:46:1f:
54:2f:1a:de:04:2c:d6:79:57:d2:f9:3c:a3:f5:7e:
53:d6:7d:59:b6:44:1f:2b:2e:40:6f:35:ab:75:cb:
64:ac:80:1e:60:94:58:b0:70:86:42:25:ab:d9:1d:
eb:2c:39:a6:8a:a9:0f:f8:19:4f:01:bc:a3:e1:89:
c4:c7:53:5c:52:9e:06:67:cf:34:de:c5:5c:b1:3b:
26:83:29:eb:85:c2:56:19:97:1c:1d:0e:01:eb:b1:
a0:11:c2:72:55:02:e5:65:5c:e7:21:49:31:7d:6d:
df:2f:27:3b:e4:30:61:07:4b:8d:08:8c:c9:dc:9a:
43:89:de:91:8e:f8:54:50:2b:be:10:4f:e8:ba:20:
eb:90:df:0d:21:ba:38:02:a9:a6:af:8a:19:18:ae:
f8:a5:60:37:1c:e1:47:ee:d6:6d:a7:26:e9:be:4e:
3a:41:50:b9:9c:97:30:2b:09:34:81:61:77:1c:f6:
01:3e:77:5e:71:97:e1:ef:90:00:89:32:34:c8:06:
2d:d1:7b:6c:7b:b3:19:15:fd:ab:87:11:ac:dd:d1:
4a:d2:0f:fb:b7:ce:70:91:71:f2:76:3f:a5:a3:81:
87:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:69:3D:D4:07:A3:B5:BA:A3:CA:42:4B:86:99:2A:5F:0B:48:D2:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0bc9081b-126a-363c-a2e5-1fe6c48e95fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
162.150.159.144/28
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bc:a9:7b:67:45:4c:10:e8:54:8a:52:f4:da:31:2d:10:04:f5:
ab:b2:92:c1:11:04:4c:5c:f2:a3:5c:52:06:54:1c:af:75:51:
c2:ea:35:04:3e:99:ae:47:c0:f1:17:76:0d:5f:ae:a7:e6:8f:
a1:00:6f:de:03:49:2e:9b:24:1a:d4:92:10:7a:f1:40:2f:d6:
b9:fe:67:46:02:44:0d:d6:ce:ab:36:39:d7:64:03:33:67:a0:
2a:a2:12:ea:10:e6:11:b2:f5:58:99:97:3d:ed:41:b4:d6:ce:
e7:c7:e2:50:30:54:29:30:a1:77:c1:f9:09:5b:fc:1f:f8:a7:
c6:2b:38:3d:a6:37:1f:40:04:6b:8e:a6:49:ce:b8:42:13:0c:
54:5b:68:b6:8d:15:bc:13:83:67:2e:31:4c:a1:2d:4a:91:49:
49:db:62:0c:0f:35:b8:84:f1:f9:a2:e9:1e:d4:6c:5a:35:8a:
f5:24:c2:b5:05:a4:03:db:20:10:56:6c:d4:d3:66:0b:75:80:
57:4c:98:69:69:81:d4:9c:d0:f8:26:b5:b6:73:59:3b:8b:dd:
2b:0b:72:3e:a1:e0:11:73:cf:dd:50:d3:a4:4c:e7:6b:39:23:
74:b5:67:5e:bc:ed:13:1d:a1:19:a0:6b:93:da:ca:f3:ff:a8:
d0:4d:9d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:09:08 2025 by rpki-client