Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/5a5236fa-372e-334f-bc5c-2fc8b6ec894b.roa
File: 5a5236fa-372e-334f-bc5c-2fc8b6ec894b.roa (raw, json)
Hash identifier: tfipVSI6/8KDTeRYI8ECVMyYHFMpCCvx/+Bif03vavY=
Subject key identifier: B1:D7:06:8F:6C:BF:17:24:98:8D:11:C5:BA:91:CF:B2:5D:1F:5B:2F
Certificate issuer: /CN=7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf
Certificate serial: 010D0C9F432858492E13BBE8839F88CBA07F3500
Authority key identifier: 90:25:00:D5:D4:81:50:60:54:00:7C:D6:30:FD:71:A6:4F:93:46:AF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/5a5236fa-372e-334f-bc5c-2fc8b6ec894b.roa
Signing time: Fri 14 Mar 2025 01:00:39 +0000
ROA not before: Fri 14 Mar 2025 01:00:39 +0000
ROA not after: Thu 12 Jun 2025 01:00:39 +0000
asID: 63023
IP address blocks: 104.156.156.0/24 maxlen: 24
104.156.157.0/24 maxlen: 24
104.156.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2e:13:bb:e8:83:9f:88:cb:a0:7f:35:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf
Validity
Not Before: Mar 14 01:00:39 2025 GMT
Not After : Jun 12 01:00:39 2025 GMT
Subject: CN=1a0dc252-3f2e-4e6b-86a2-889a1d0d0b4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d4:92:9e:30:85:4b:5e:a9:c6:33:18:9f:bb:
ec:e5:e6:e3:cf:66:0d:d9:23:f5:4a:08:c7:c6:27:
c6:e0:9e:fc:8e:56:f5:41:76:9a:26:ee:72:d2:53:
46:d8:32:7e:a2:63:4d:07:cc:0b:f8:b2:b9:fc:f1:
b6:55:35:43:4d:e1:c4:c4:d4:a2:e4:4b:a8:7f:36:
de:50:00:f2:e1:71:a1:4c:97:3c:c4:83:ef:b6:f5:
e2:c5:57:ab:94:6b:7f:a4:2e:35:6f:ff:bd:be:44:
37:d1:59:77:ae:37:b0:a4:05:4b:81:64:ea:81:f8:
d2:c0:91:f6:10:b1:1d:e3:6e:6e:89:26:ff:90:20:
33:2f:4f:87:6a:5e:6b:2e:11:78:2f:c2:a8:ad:b0:
86:ba:7b:29:8b:23:09:85:bd:63:d7:ae:ff:b0:bf:
8d:a0:13:4a:b5:57:36:ba:1f:7e:ce:64:73:f5:f3:
90:8c:32:5d:40:36:b9:e9:5f:57:65:4a:2f:1e:aa:
5d:c6:4f:f6:35:69:01:53:d2:c8:5d:fc:4b:e3:e0:
da:69:ec:0b:08:60:69:b5:60:89:57:aa:ff:6f:7a:
61:08:1d:c9:c3:9c:8d:88:41:32:fa:cf:7e:ad:2e:
30:24:d9:7a:df:bc:54:bb:c1:b8:c3:e5:51:ef:9b:
17:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:D7:06:8F:6C:BF:17:24:98:8D:11:C5:BA:91:CF:B2:5D:1F:5B:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/5a5236fa-372e-334f-bc5c-2fc8b6ec894b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.crl
X509v3 Authority Key Identifier:
keyid:90:25:00:D5:D4:81:50:60:54:00:7C:D6:30:FD:71:A6:4F:93:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer
sbgp-ipAddrBlock: critical
IPv4:
104.156.156.0-104.156.158.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:aa:bd:ff:2f:c9:13:44:c3:62:6b:03:3c:0c:86:8a:12:a7:
d2:c7:f3:ec:22:68:de:41:10:f8:65:c5:bc:b4:3d:11:1c:84:
2e:30:51:93:08:73:a3:ef:29:5c:b2:a2:4b:ed:c0:a4:92:f9:
1a:65:88:99:09:c0:7d:a2:97:55:55:6f:d7:d1:01:19:2c:95:
7a:90:c6:40:d0:dc:4f:30:25:4f:66:5e:48:34:57:ed:f8:6d:
50:a4:d6:d4:c0:3b:c5:eb:60:2e:1f:70:3d:53:d5:75:99:d7:
57:21:04:fb:05:b2:a1:e2:8b:a2:b6:43:98:5a:68:c1:b9:5c:
b3:4b:fa:b7:fd:5b:6e:30:75:6e:dc:2d:3a:ca:b6:01:0b:b6:
36:9f:e2:af:76:85:cc:59:ad:f6:bd:77:40:60:dc:57:26:dd:
84:dc:95:25:f5:aa:3c:27:c1:7f:e2:f8:5f:67:46:94:76:96:
c3:7d:05:c3:a2:0d:62:8b:1c:a3:2c:2f:e8:fe:20:03:ae:85:
b1:d5:5a:47:da:5d:0d:b7:26:1f:01:b4:36:4d:d4:e7:0c:7c:
81:ce:20:a2:54:78:e9:ab:3f:ef:3b:b5:15:19:9c:7d:52:30:
94:fa:7f:35:90:bf:5d:fc:a7:fc:67:6f:7c:5b:2c:d7:05:87:
89:1c:10:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:34:04 2025 by rpki-client