Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/5530f811-421c-3e6a-94f4-ec500c171493.roa
File: 5530f811-421c-3e6a-94f4-ec500c171493.roa (raw, json)
Hash identifier: 65x4ZD74Ei4+RZaci7Z0S/jslWFevZNboMgdSapJbbg=
Subject key identifier: 1F:59:21:86:F6:55:ED:9F:4C:27:F1:FB:44:F9:8C:6E:B5:74:DC:15
Certificate issuer: /CN=d21149ca-bfeb-409c-adbb-e86e751b6f22
Certificate serial: 010D0C9F43285849350EA36750DA25021AD42880
Authority key identifier: 43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/5530f811-421c-3e6a-94f4-ec500c171493.roa
Signing time: Sun 16 Mar 2025 13:00:52 +0000
ROA not before: Sun 16 Mar 2025 13:00:52 +0000
ROA not after: Sat 14 Jun 2025 13:00:52 +0000
asID: 396982
IP address blocks: 152.38.154.0/24 maxlen: 24
152.38.155.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:35:0e:a3:67:50:da:25:02:1a:d4:28:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d21149ca-bfeb-409c-adbb-e86e751b6f22
Validity
Not Before: Mar 16 13:00:52 2025 GMT
Not After : Jun 14 13:00:52 2025 GMT
Subject: CN=6e633110-32dd-42ab-99e2-d0b3b770b179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1c:b6:bb:f2:84:f1:15:53:d7:61:58:69:89:
46:eb:b0:12:e0:ed:36:81:78:b8:a9:a6:34:4b:c8:
2a:56:d5:b3:5b:22:c3:a3:ef:a7:13:70:cb:6d:9f:
5a:1c:f9:77:43:04:c9:fc:d6:a4:3d:ba:f6:6c:f4:
b5:cb:46:e5:61:61:1c:cb:9d:e5:ab:2c:cd:c5:d1:
54:15:0b:4b:78:4c:d5:b7:c3:e1:17:f5:10:3a:56:
82:03:da:6f:5b:fc:5d:08:93:b7:97:05:2a:f6:21:
cf:46:30:bd:f5:5c:1a:dc:aa:5d:a2:8f:66:bc:a1:
71:5b:ad:e7:da:36:1d:a0:a6:54:51:10:9f:52:3c:
49:44:5a:c5:4f:c8:7f:a8:c0:7a:b1:cb:f2:56:a7:
6f:58:9a:3f:d5:7d:0c:b9:ff:fe:6c:4b:78:5f:2e:
fc:06:81:ae:5c:77:af:15:3b:62:86:fd:08:a3:10:
3f:1d:de:c5:6e:5d:e9:fe:d4:41:fb:54:aa:20:3e:
22:ff:c6:78:29:3f:f3:c5:47:65:bc:b4:2f:12:f9:
3e:5f:ef:1d:9c:6d:06:32:31:ae:66:05:8b:59:3f:
b9:7c:e0:93:ac:65:48:d6:aa:89:44:df:9e:b5:df:
a3:05:b8:4e:f5:f8:d8:eb:92:51:9a:2f:4b:32:cd:
88:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:59:21:86:F6:55:ED:9F:4C:27:F1:FB:44:F9:8C:6E:B5:74:DC:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/5530f811-421c-3e6a-94f4-ec500c171493.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl
X509v3 Authority Key Identifier:
keyid:43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer
sbgp-ipAddrBlock: critical
IPv4:
152.38.154.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:19:5f:08:f9:2d:41:ab:b5:45:14:77:de:05:b2:fe:b6:53:
98:6c:f3:4f:01:6f:77:7f:41:8c:a0:2d:64:36:00:e6:99:a6:
ab:88:92:2f:45:56:4a:73:f1:bb:98:17:33:98:44:0e:40:c0:
84:d5:9d:90:5d:17:8b:02:c2:6e:1b:94:ea:21:ef:88:dc:19:
97:72:e3:0d:fc:06:0c:0c:2b:ac:91:29:0e:59:51:bd:0e:ec:
6e:6a:a0:02:30:dd:98:42:c8:f5:2b:b4:88:c4:30:99:9d:63:
b4:c1:c5:98:e9:99:05:d8:47:bc:c4:e5:a5:8c:c8:c8:6a:ec:
41:1b:04:55:67:4f:53:f8:9b:51:e1:94:a5:65:09:77:67:a8:
02:8b:76:da:f4:64:fa:bb:a1:ee:4d:39:ea:f1:9f:35:74:6d:
b9:4c:b7:eb:ca:a4:6a:5a:40:5f:ba:8b:a2:29:3d:28:8d:b1:
e3:a4:b1:21:91:7b:b7:a9:c0:1e:27:fb:97:bb:60:3f:60:99:
10:6b:96:95:2b:a5:55:1f:30:9f:e9:71:1e:c5:52:9b:f9:82:
53:06:9b:99:82:6b:2b:84:6c:91:69:f4:72:aa:4e:f7:14:85:
10:01:2b:f2:01:1c:50:a5:c1:f1:32:22:25:46:b6:6c:9a:8b:
dd:36:4a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:45:33 2025 by rpki-client