Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/c5f43895-6bc9-3894-bdb7-b3b636b3683f.roa
File: c5f43895-6bc9-3894-bdb7-b3b636b3683f.roa (raw, json)
Hash identifier: wiJYXre9XHH7KhHlhbvD6tsI2+qZtge6Vh8/Fe7suBM=
Subject key identifier: 8D:DD:B8:C0:12:93:2C:35:24:AC:83:12:55:77:CD:25:3D:93:13:17
Certificate issuer: /CN=73f2847d-53ab-4abb-a5e5-26b998c7ff98
Certificate serial: 010D0C9F4328584950F96A7DA517332F0ED4DE50
Authority key identifier: E3:3F:43:4B:85:C3:26:0D:9C:56:B0:BB:C8:3F:B6:4D:E8:3B:7D:CB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/c5f43895-6bc9-3894-bdb7-b3b636b3683f.roa
Signing time: Wed 26 Mar 2025 13:00:53 +0000
ROA not before: Wed 26 Mar 2025 13:00:53 +0000
ROA not after: Tue 24 Jun 2025 13:00:53 +0000
asID: 7992
IP address blocks: 24.150.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:50:f9:6a:7d:a5:17:33:2f:0e:d4:de:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73f2847d-53ab-4abb-a5e5-26b998c7ff98
Validity
Not Before: Mar 26 13:00:53 2025 GMT
Not After : Jun 24 13:00:53 2025 GMT
Subject: CN=b29e08c5-43b2-404d-9ca8-7cc8f5c30a88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:3d:ea:0a:0f:6d:66:4a:45:66:2d:31:a4:e1:
25:a0:58:49:9d:84:a4:cf:ad:a5:32:db:78:f2:57:
9a:da:e3:3e:5f:22:5e:e0:e3:58:42:3c:4b:ea:a4:
46:11:1b:f2:f8:17:27:63:3c:2c:ee:f3:9e:c2:34:
c9:da:ee:f0:22:44:95:b9:ce:94:49:cb:ce:62:6b:
c1:9d:6d:f3:e1:d6:af:95:1f:be:df:af:aa:00:af:
46:35:36:f4:fd:d1:41:a4:06:3a:26:7f:62:0f:24:
a4:f9:0c:f3:d1:b6:00:00:da:c8:5c:e3:cc:cd:16:
3d:95:b9:dd:f1:db:da:1a:d8:12:cf:07:7a:a7:53:
fe:58:b9:eb:bb:85:28:76:c1:d7:a1:e2:96:52:c5:
86:3d:6c:26:98:66:3b:41:6d:c9:7a:b7:bf:09:35:
47:26:ef:58:3a:00:dc:7c:60:91:e7:35:b7:e4:5d:
0d:cc:c7:8c:d4:d2:18:f3:3b:14:1e:73:3d:45:f3:
2e:5f:0a:bd:df:5a:da:9d:dd:7b:ec:d7:93:58:ed:
ac:43:68:18:65:49:37:06:f7:41:83:5c:2e:7c:d0:
eb:4d:5e:c5:ba:0a:bb:be:bf:46:7b:31:67:6f:63:
2b:7a:fb:10:41:4b:c6:32:2b:a1:3a:05:fe:3d:03:
f9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:DD:B8:C0:12:93:2C:35:24:AC:83:12:55:77:CD:25:3D:93:13:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/c5f43895-6bc9-3894-bdb7-b3b636b3683f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.crl
X509v3 Authority Key Identifier:
keyid:E3:3F:43:4B:85:C3:26:0D:9C:56:B0:BB:C8:3F:B6:4D:E8:3B:7D:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer
sbgp-ipAddrBlock: critical
IPv4:
24.150.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:9c:58:7f:d3:42:b5:af:66:29:eb:79:f5:f7:6d:ec:d7:db:
7c:dc:6b:4d:71:2b:ff:75:85:09:2a:48:10:83:af:d7:0d:44:
08:b6:88:06:67:63:da:1e:a1:f8:e3:b4:ea:ae:c3:8a:71:e1:
1d:d3:4a:19:9a:85:a8:a8:2a:8b:f7:c7:f9:e1:4a:b3:d0:81:
0f:1f:d7:f2:a1:e0:1d:bd:c8:a9:7e:2f:c2:5a:69:a9:d4:b1:
ac:6b:e9:ff:89:6c:b9:df:f2:76:5d:c3:14:2a:3f:59:2b:4f:
73:1f:bc:5e:bf:85:a2:41:57:b2:df:89:e5:94:71:22:9e:64:
77:5d:ca:85:3f:da:f6:01:23:33:c8:4c:13:6f:f1:0d:ca:3d:
33:08:b9:d9:b1:e0:32:ac:79:b2:57:9a:b5:42:d3:1b:65:ee:
19:89:5e:4f:a9:3f:e5:b8:34:f1:56:ef:fd:6c:5f:74:38:26:
02:7e:ac:7b:14:67:52:9a:47:ee:35:a7:b2:32:3b:65:94:ce:
b3:ea:56:98:5d:d2:9c:16:f1:84:7b:14:f7:16:bd:47:43:18:
97:4f:38:34:42:bd:7d:32:6c:82:4e:4d:ff:b4:73:ba:de:6b:
1a:61:13:65:da:73:93:59:ae:9f:df:12:47:c0:c9:d2:77:47:
e1:91:8e:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:51:18 2025 by rpki-client