Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/9d5705dd-b91d-33d0-870e-6b3a8fa2c096.roa
File: 9d5705dd-b91d-33d0-870e-6b3a8fa2c096.roa (raw, json)
Hash identifier: HaxMcV5RvxbgIljnlRyd++5zENCPLWdnp37EqfGLkUU=
Subject key identifier: 73:AD:17:BE:43:05:94:84:1A:64:FF:37:87:5A:FC:94:31:DB:B6:DA
Certificate issuer: /CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
Certificate serial: 010D0C9F432858494E2EA971D9A71E8D7A837D00
Authority key identifier: 57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/9d5705dd-b91d-33d0-870e-6b3a8fa2c096.roa
Signing time: Tue 25 Mar 2025 13:00:51 +0000
ROA not before: Tue 25 Mar 2025 13:00:51 +0000
ROA not after: Mon 23 Jun 2025 13:00:51 +0000
asID: 18434
IP address blocks: 156.55.233.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4e:2e:a9:71:d9:a7:1e:8d:7a:83:7d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
Validity
Not Before: Mar 25 13:00:51 2025 GMT
Not After : Jun 23 13:00:51 2025 GMT
Subject: CN=6d22f9a9-b014-423c-9866-af47f2f9151e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:78:f4:bf:7a:3a:18:5c:15:63:99:eb:03:d0:
a3:64:62:49:1d:f5:43:ac:4b:f7:bb:47:0c:4d:b1:
2e:ce:a1:7f:ba:12:c8:08:ba:b6:85:cc:0b:3d:fc:
c7:c6:ba:50:18:20:85:bb:19:c8:88:d8:0e:f3:28:
f8:4c:bd:1c:61:7c:87:07:64:00:71:03:40:aa:a0:
ee:c1:dc:97:b3:6d:61:84:78:e9:83:0b:07:51:8f:
39:43:a6:89:6b:0d:03:04:2a:0b:01:94:9b:dc:6b:
dd:a2:26:ff:b3:cc:09:07:62:f3:03:c8:e1:fa:ae:
a2:d0:d1:43:d9:a1:2a:30:20:ae:2b:58:2d:3e:aa:
7e:cf:75:a1:ac:bb:53:58:1c:a6:78:fd:1d:96:d3:
a8:4b:79:87:55:1f:e6:6f:7d:a0:71:f5:c1:9c:23:
c6:43:c9:56:66:b8:42:c2:9b:a8:5d:48:68:0a:b2:
fb:23:3c:fd:fe:af:41:d1:ce:c8:0d:4d:74:78:c1:
9d:da:a1:58:0e:a6:b4:78:df:76:7e:22:86:08:d5:
d0:9c:aa:9e:ca:72:54:b2:8b:d1:92:8f:90:34:71:
27:cf:7e:5d:76:40:82:05:63:b6:a4:53:cc:29:32:
2e:4b:8a:43:93:54:b7:d2:18:b9:53:f6:59:a6:b2:
8f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:AD:17:BE:43:05:94:84:1A:64:FF:37:87:5A:FC:94:31:DB:B6:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/9d5705dd-b91d-33d0-870e-6b3a8fa2c096.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl
X509v3 Authority Key Identifier:
keyid:57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
sbgp-ipAddrBlock: critical
IPv4:
156.55.233.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:c2:d7:eb:ee:ea:3f:a1:73:44:ed:7b:fa:e9:eb:48:29:26:
89:c2:64:44:8e:51:72:26:8b:b5:a8:ce:8e:63:35:c6:4f:2c:
e4:65:6a:08:86:b2:39:4e:ce:94:7a:e0:c0:04:10:e9:50:d0:
0a:06:1a:5e:0e:65:71:cd:8b:82:9c:f9:aa:87:7d:8a:d3:fe:
dc:f4:89:12:cd:95:4a:51:a0:81:65:0c:91:dc:30:31:a6:2b:
da:46:fd:d3:a2:c6:08:8e:e5:b1:5b:d2:d0:5f:62:e6:e3:0e:
23:6f:d7:d9:28:41:23:36:ee:67:d4:54:7e:67:f9:b0:16:88:
74:d0:a3:ab:dd:e2:12:a5:b2:dc:18:49:55:86:98:75:d5:f4:
a9:5c:c2:82:3c:bd:a7:40:75:72:85:9e:10:4c:f6:45:7d:01:
b1:1e:e6:bf:64:80:18:85:1b:cb:10:2f:37:41:0f:eb:2f:78:
43:7f:d4:76:41:e7:60:48:a5:6a:40:27:85:80:81:3d:23:04:
1d:44:9f:1b:70:6b:39:63:41:87:f6:7a:27:4e:f4:10:10:7f:
07:8c:bf:f0:25:c4:47:d1:28:ab:38:41:19:f0:ab:0d:e1:7a:
37:09:8a:3b:c1:59:3e:6e:fc:7c:19:ae:51:50:b1:8b:a4:69:
2d:b3:36:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:21:24 2025 by rpki-client