Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/a60a9b00-d731-38a8-8ec7-2870a2014055.roa
File: a60a9b00-d731-38a8-8ec7-2870a2014055.roa (raw, json)
Hash identifier: QZS1vbiSOppIWskMczgac0+sXNZ2HcaKNbGZtF71GaU=
Subject key identifier: 89:78:AA:45:97:FC:C8:8E:74:43:42:0C:7B:79:17:B2:68:1F:3B:79
Certificate issuer: /CN=63817736-7e5e-4740-8ee1-ac6f2317f08d
Certificate serial: 010D0C9F432858494CC95071323CF9D611F1FAA0
Authority key identifier: B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/a60a9b00-d731-38a8-8ec7-2870a2014055.roa
Signing time: Tue 25 Mar 2025 01:00:40 +0000
ROA not before: Tue 25 Mar 2025 01:00:40 +0000
ROA not after: Mon 23 Jun 2025 01:00:40 +0000
asID: 20473
IP address blocks: 155.138.128.0/17 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4c:c9:50:71:32:3c:f9:d6:11:f1:fa:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63817736-7e5e-4740-8ee1-ac6f2317f08d
Validity
Not Before: Mar 25 01:00:40 2025 GMT
Not After : Jun 23 01:00:40 2025 GMT
Subject: CN=ba9ad981-b63a-4e8b-9c6e-6a8d9a526915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:e9:12:1b:30:01:9b:a0:26:dc:d6:13:1b:0c:
bf:81:17:d9:d4:11:8a:e9:61:fe:3d:71:5c:ec:49:
83:d4:a7:eb:1e:b2:86:be:78:22:2f:7f:66:66:31:
9d:71:94:a7:76:a7:ee:f3:d8:74:30:61:3e:ca:a2:
c9:26:7a:97:ad:f7:00:bf:5e:ff:79:dc:33:62:cf:
59:7f:0b:ea:c4:7a:2a:04:c7:70:4e:dc:dd:a8:19:
e1:34:48:64:89:37:ff:4c:e8:b6:92:93:64:6c:98:
98:ce:1f:07:e9:e3:99:1e:ba:b8:a0:b3:e4:be:cc:
bc:a1:7f:67:b7:ca:24:1f:3c:17:dc:2d:78:1b:ee:
2f:36:08:96:7d:6b:c5:26:74:2c:05:87:14:0d:cd:
22:a7:da:c4:73:ea:53:3a:ff:ff:e9:ae:82:07:5a:
0a:6c:1c:98:f6:78:c0:6a:30:ec:7f:c8:5a:ad:ff:
3c:7b:9c:2f:95:2d:62:be:4a:99:90:0d:c9:c5:0a:
98:e3:c0:7d:2e:e7:3b:de:b2:84:8b:13:1a:a3:81:
1d:14:18:76:d0:20:da:7d:14:90:aa:75:87:18:3f:
d1:c3:a9:28:f2:d3:71:07:f7:dc:a6:15:16:17:e5:
71:37:a5:dd:91:1f:c4:a8:b5:5e:5d:09:7f:0d:e2:
86:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:78:AA:45:97:FC:C8:8E:74:43:42:0C:7B:79:17:B2:68:1F:3B:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/a60a9b00-d731-38a8-8ec7-2870a2014055.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.crl
X509v3 Authority Key Identifier:
keyid:B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer
sbgp-ipAddrBlock: critical
IPv4:
155.138.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:26:a5:2e:5c:15:d0:e2:1c:bc:e1:66:2b:1c:34:43:80:8c:
7b:73:77:15:b6:19:19:65:60:cb:48:d3:ce:83:62:dd:f9:f0:
e9:b1:ac:f7:03:e2:f1:cd:c9:47:0d:ff:1b:72:0d:93:6a:1d:
10:e7:5e:5e:8a:d5:fc:59:87:5e:a4:35:e2:5d:ed:62:6e:3d:
58:e0:a7:52:6c:07:07:bd:ad:7a:7c:c6:85:b3:6e:4a:65:0f:
2a:10:84:da:fc:8a:ab:f4:10:21:f7:ce:fa:f9:3f:65:3b:ab:
58:83:73:7d:32:87:f8:09:4a:c3:4e:01:d1:8d:aa:ff:52:08:
44:6a:58:89:e3:95:12:8e:74:3a:4a:7e:6c:bc:42:0b:20:5f:
c4:63:02:0f:c7:24:85:dd:4b:29:1d:0f:75:8a:36:91:b7:97:
f5:be:cb:62:bd:0f:e4:e1:76:1b:4c:9f:85:52:1b:c8:98:23:
e9:29:6a:73:84:09:c4:05:f1:2c:39:a0:47:96:3a:e3:1b:ba:
6e:2d:b4:ff:f9:ab:18:b3:a5:4a:b8:5a:ce:3b:1a:e7:ef:e7:
b5:33:2e:c5:72:75:b2:48:99:58:df:f8:46:5d:52:3f:1e:85:
d5:8d:04:9e:68:94:e4:40:01:1f:38:75:e9:95:5d:46:72:07:
bf:4a:59:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:15:19 2025 by rpki-client