Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf963f50-7ff6-3bb9-abe3-0a38f87bf387.roa
File: bf963f50-7ff6-3bb9-abe3-0a38f87bf387.roa (raw, json)
Hash identifier: E3rID0yCAb7TwuaWYB1pXv5Dqfckir8Ilvz3mdeUHf0=
Subject key identifier: 91:D4:FD:3B:A9:23:3D:B3:23:0F:F2:9E:A4:34:20:A5:6D:6C:65:E5
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6D56FE2DC486F0473DF680
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf963f50-7ff6-3bb9-abe3-0a38f87bf387.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 33490
IP address blocks: 162.150.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6d:56:fe:2d:c4:86:f0:47:3d:f6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=71e27b3f-aba0-4aa5-b69a-b2f25ddec7ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9b:a7:d9:60:a3:5d:07:6f:14:70:92:fb:56:
56:34:bd:03:f9:d8:f7:86:94:2c:6b:7f:56:d1:21:
df:57:c9:1f:1e:3a:90:85:7d:e6:b4:d4:c8:08:c7:
9e:0b:75:3e:91:1a:e5:7f:92:ad:31:b9:94:09:82:
e0:c4:14:80:a7:10:ba:d4:76:b1:fd:ea:2c:64:b1:
a2:cc:fd:87:0a:a8:10:f2:b2:8a:45:49:12:cf:3d:
87:4d:70:8c:1f:36:88:26:6a:ed:b9:9b:5d:e4:cc:
d7:eb:cb:31:2c:42:c3:56:a9:23:f8:a8:d9:89:d7:
e2:b5:fe:5f:48:e2:68:ec:e3:a4:b1:fe:79:09:fa:
ae:53:e1:d6:45:36:20:10:a0:86:b9:a7:0f:cd:7f:
20:a6:b2:3f:66:23:e3:59:92:89:b0:a7:d1:9f:ef:
24:eb:c0:14:8d:19:19:91:2b:fc:49:ae:b6:54:3f:
07:ec:98:01:fc:40:67:2a:4a:33:ba:80:7b:0f:65:
15:e9:10:1c:f4:94:07:28:f1:88:fb:4e:91:e2:f3:
19:4a:7d:94:ad:67:2a:81:7b:c5:a6:0b:27:ac:4c:
68:f1:da:9e:72:84:3c:36:da:28:77:ee:49:48:8c:
4d:8d:c0:3c:7a:8b:2e:c6:da:2e:96:5f:fd:fe:75:
23:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:D4:FD:3B:A9:23:3D:B3:23:0F:F2:9E:A4:34:20:A5:6D:6C:65:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf963f50-7ff6-3bb9-abe3-0a38f87bf387.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
162.150.154.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ae:52:e4:0f:b2:8f:05:f5:e7:f9:d6:06:6e:2b:1b:90:65:70:
4e:d6:5e:a3:cd:b6:71:84:35:87:bd:39:ad:a0:54:c0:6e:23:
0a:7e:c3:aa:de:da:26:41:83:39:aa:4a:1a:fc:b8:fa:a7:50:
bd:e9:a7:d6:b0:8f:86:c0:09:2a:a1:1c:5c:89:64:2a:9d:6d:
d8:d9:23:8d:64:b5:92:42:67:75:b3:1b:17:c9:89:7e:71:c4:
1a:1b:b2:13:3e:a1:8a:04:ca:fd:3e:aa:f9:15:15:fd:c5:37:
5a:83:39:4e:ee:26:11:46:a3:c1:5d:c0:7e:73:2f:d8:71:0a:
50:5e:04:70:eb:b2:75:c3:cc:7f:29:a7:54:a1:e4:c5:ec:c7:
15:e3:c9:52:b7:d6:5d:be:82:17:38:b6:49:56:c3:1e:a7:0e:
2e:12:aa:26:36:46:b3:6b:c1:c3:77:d3:79:f1:c4:6b:ff:bd:
31:14:4c:9e:82:b2:e2:3d:f0:05:50:c1:40:55:d9:19:dc:3a:
c1:19:02:04:62:7b:63:0c:0d:d2:20:ed:84:ae:28:b2:4f:57:
36:e5:e4:24:0f:bd:6e:7b:30:33:41:dd:d7:1c:01:ad:0d:5a:
cd:45:92:08:24:cc:d3:bb:97:f7:b2:41:0d:69:37:13:14:14:
56:97:3e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:10:57 2025 by rpki-client