Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/4d0e32dc-4a57-3c1c-9e8f-04ad397fcd95.roa
File: 4d0e32dc-4a57-3c1c-9e8f-04ad397fcd95.roa (raw, json)
Hash identifier: 9ldXAadW2K2d17k9BwJi9iVBEJEoR6PeS2jLGBsWeGE=
Subject key identifier: 0F:5E:70:53:53:C9:95:1E:AC:47:E5:21:FF:69:ED:00:83:0D:5B:73
Certificate issuer: /CN=8e52f155-d56d-401a-89c5-76d2d44d8b68
Certificate serial: 010D0C9F432858490CB1439C859E29C60138FAC0
Authority key identifier: D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/4d0e32dc-4a57-3c1c-9e8f-04ad397fcd95.roa
Signing time: Sun 02 Mar 2025 02:00:40 +0000
ROA not before: Sun 02 Mar 2025 02:00:40 +0000
ROA not after: Sat 31 May 2025 01:00:40 +0000
asID: 16789
IP address blocks: 104.156.166.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0c:b1:43:9c:85:9e:29:c6:01:38:fa:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e52f155-d56d-401a-89c5-76d2d44d8b68
Validity
Not Before: Mar 2 02:00:40 2025 GMT
Not After : May 31 01:00:40 2025 GMT
Subject: CN=add2e563-9eeb-461d-a892-ed18d2ac47de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:53:aa:14:6e:9c:a8:af:00:e9:78:93:aa:9c:
ba:22:71:d7:6f:a9:c5:cd:c6:e5:8b:e4:7e:e9:06:
09:9b:44:9a:3a:73:a5:92:59:00:80:e4:66:57:b2:
95:3a:14:75:28:e9:f7:3a:00:a9:5d:59:0d:ba:55:
ae:9d:f1:64:f6:69:54:de:ce:67:8b:b8:3d:96:9a:
00:a3:7e:51:78:c9:fa:33:c7:5e:49:62:df:f7:02:
73:34:2a:e1:7b:c7:14:08:70:b0:1b:db:67:38:ee:
4d:86:21:68:82:41:a9:3c:90:2c:da:87:bd:09:55:
34:fd:ba:bd:6d:ad:41:c9:e6:15:97:dd:eb:12:99:
4b:17:76:58:d4:6f:56:65:b2:f9:2b:83:dc:05:66:
b0:63:52:d8:72:ba:ea:5f:57:a0:e7:b3:22:46:1b:
27:eb:6b:e2:19:3e:bc:dc:53:d4:3b:44:e2:09:6f:
08:2b:64:ad:a4:0d:20:e6:1f:78:f6:f7:e3:57:66:
fc:94:32:27:ee:48:92:fb:5d:13:38:c4:fd:fa:35:
6e:f4:e8:2b:ab:f8:bb:eb:89:2a:74:79:50:30:b2:
04:03:5d:d8:87:7f:4b:4d:e3:d3:e0:10:3a:f9:2e:
fc:0f:b1:96:67:04:cc:f2:3d:bf:58:98:ae:3a:a9:
4a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:5E:70:53:53:C9:95:1E:AC:47:E5:21:FF:69:ED:00:83:0D:5B:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/4d0e32dc-4a57-3c1c-9e8f-04ad397fcd95.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl
X509v3 Authority Key Identifier:
keyid:D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer
sbgp-ipAddrBlock: critical
IPv4:
104.156.166.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a9:ae:37:d5:88:3a:9d:96:61:7e:4b:86:2d:26:bc:7f:13:a3:
dc:a3:f7:9b:e9:eb:d9:d5:c6:15:39:64:af:f8:a0:71:4b:45:
54:2d:57:92:a5:45:1b:39:ee:33:70:d5:d5:a3:0d:98:f0:1e:
be:29:c3:6f:d9:78:01:4f:19:a7:d5:4f:ee:f1:6d:91:2d:ce:
32:e4:f1:3a:4a:7c:b6:47:ad:2a:93:96:7b:b8:d9:72:06:1b:
c9:ac:fa:65:38:28:68:61:db:f3:d3:b7:87:f1:ff:30:2e:6a:
97:f3:5d:f6:84:a9:70:11:16:fa:a8:48:64:bc:88:5f:5a:77:
f7:70:a8:02:41:87:17:7d:d8:39:4c:89:de:c7:83:b2:ca:23:
cb:37:29:5a:e7:b6:ce:96:d0:88:ba:79:43:62:6a:0b:78:a9:
be:58:fd:4f:70:78:c4:0b:01:af:41:e2:c3:14:8b:62:c1:3f:
0c:ab:4b:63:0f:25:9a:f4:69:2c:f8:e5:2b:e1:0d:8a:8b:67:
aa:3c:4e:dc:5f:8f:49:13:12:a3:6d:68:d5:6c:87:2c:9c:68:
31:13:4e:c3:6e:2b:73:e9:a5:f1:9b:1e:40:d0:11:2f:e1:1e:
65:52:4d:98:90:ec:8a:51:32:a9:ae:07:4e:d7:cc:b2:c4:69:
e2:94:52:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:09:50 2025 by rpki-client