Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/796bba95-b159-4867-a648-a9ff88973be1/a2f030d3-c47c-3d37-bea3-00ec7bfde892.roa
File: a2f030d3-c47c-3d37-bea3-00ec7bfde892.roa (raw, json)
Hash identifier: LeEMR8Tb0p2iND9HuRJ90p4B4sO+1y/6t5diLA3TJUI=
Subject key identifier: 39:1D:A7:61:55:AA:8C:09:BC:A8:CB:0F:26:FB:FD:9F:75:83:5E:86
Certificate issuer: /CN=796bba95-b159-4867-a648-a9ff88973be1
Certificate serial: 010D0C9F43285848D0ABB46ED3AD92570A169F00
Authority key identifier: B6:EB:25:F4:B7:AB:73:FB:89:E9:A8:1B:DD:22:28:DA:A7:7B:5C:73
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/796bba95-b159-4867-a648-a9ff88973be1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/796bba95-b159-4867-a648-a9ff88973be1/a2f030d3-c47c-3d37-bea3-00ec7bfde892.roa
Signing time: Sat 08 Feb 2025 14:00:52 +0000
ROA not before: Sat 08 Feb 2025 14:00:52 +0000
ROA not after: Fri 09 May 2025 13:00:52 +0000
asID: 17161
IP address blocks: 205.156.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d0:ab:b4:6e:d3:ad:92:57:0a:16:9f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=796bba95-b159-4867-a648-a9ff88973be1
Validity
Not Before: Feb 8 14:00:52 2025 GMT
Not After : May 9 13:00:52 2025 GMT
Subject: CN=2a8dbb0c-0dcf-46e3-8407-8d73d764e0b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f2:46:8e:82:1e:61:f7:e2:b3:1c:27:7c:e3:
3f:3e:08:41:9e:0b:20:39:46:5e:db:0b:d7:09:63:
3a:01:db:2d:3b:eb:59:f3:c9:00:99:0c:a9:94:57:
88:19:83:c3:5d:01:b2:7b:fa:f2:4d:4d:02:c0:7d:
62:58:5c:13:f4:67:84:a1:86:73:c7:19:e5:7f:7b:
30:35:0d:7b:8c:ff:26:2e:7d:8d:8e:fc:67:58:8b:
e6:c7:c9:75:56:45:63:18:76:a9:41:4e:3a:ca:d9:
14:8f:3c:37:be:a2:69:55:e2:77:17:2c:5f:8b:60:
ef:5c:ac:4a:89:1b:5d:fb:e4:d8:a1:82:94:27:46:
d5:08:e7:79:73:f8:7c:14:2d:3d:f2:f8:75:75:12:
85:c4:de:ae:9e:d5:50:09:11:2b:b7:98:d1:2e:44:
3d:35:9b:01:bc:c4:a4:67:1e:ae:7e:2d:ea:e5:69:
a6:a3:02:69:e1:df:66:08:57:e6:d7:80:07:aa:79:
fb:9e:03:d0:b4:32:fb:d2:7b:61:96:a9:6e:a8:0b:
ea:c1:6a:65:91:77:0a:ed:01:03:6a:2c:e3:4e:f0:
84:44:56:c5:fc:5d:54:f0:93:fa:68:45:64:32:11:
9c:7f:77:18:a0:26:40:7e:dc:33:46:a9:94:c2:ae:
ac:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:1D:A7:61:55:AA:8C:09:BC:A8:CB:0F:26:FB:FD:9F:75:83:5E:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/796bba95-b159-4867-a648-a9ff88973be1/a2f030d3-c47c-3d37-bea3-00ec7bfde892.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/796bba95-b159-4867-a648-a9ff88973be1/796bba95-b159-4867-a648-a9ff88973be1.crl
X509v3 Authority Key Identifier:
keyid:B6:EB:25:F4:B7:AB:73:FB:89:E9:A8:1B:DD:22:28:DA:A7:7B:5C:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/796bba95-b159-4867-a648-a9ff88973be1.cer
sbgp-ipAddrBlock: critical
IPv4:
205.156.72.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:c8:48:62:be:95:bb:65:9d:5a:49:cf:0d:1b:36:81:6d:7a:
3a:1a:66:29:f0:7b:5b:d7:c6:e3:cd:1e:c8:86:d4:28:db:df:
53:15:14:1b:ed:62:ec:9c:9b:16:46:2f:5f:68:e4:78:a2:4e:
35:72:6c:16:79:59:93:7f:db:7c:e4:b2:24:b4:2c:05:f5:bb:
7b:ad:0d:03:40:f5:c4:ac:8e:c1:a1:5d:0c:ce:72:73:47:1e:
79:d0:19:5e:31:ea:a2:88:b4:cf:0b:b2:5d:e1:58:fe:32:1a:
25:a0:76:ae:94:8d:35:65:fd:da:9e:33:87:79:77:b6:a4:85:
2f:be:f6:73:3e:e4:fd:3c:bd:57:c1:1b:45:29:b4:d0:9e:c3:
94:77:c9:be:fe:f2:09:75:02:41:90:0d:c2:4d:4b:0b:34:63:
ad:de:31:71:0f:ba:d3:da:82:94:51:9b:93:5f:87:ed:43:5e:
04:38:37:e7:ab:62:ab:d0:6e:c6:cd:0a:21:42:42:94:da:e9:
42:6d:08:06:ed:86:34:f0:70:8b:62:7f:67:c9:55:4e:d0:ce:
39:c7:61:35:0d:77:ba:14:77:47:3d:41:b8:50:59:72:60:da:
82:bd:67:b1:33:16:5b:de:5e:4e:36:5c:d7:4c:3e:55:7c:d7:
ed:c0:80:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:01:59 2025 by rpki-client