Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/e967b58d-661e-3cf2-9702-981573d9fd6a.roa
File: e967b58d-661e-3cf2-9702-981573d9fd6a.roa (raw, json)
Hash identifier: nsv1j2yBbvSrGDCOdcMP5B9kYB5c0SH2i3xC7pjiK50=
Subject key identifier: E1:B9:0D:14:E6:1F:14:25:12:4D:DC:B9:64:A8:99:B4:E5:A4:11:2F
Certificate issuer: /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
Certificate serial: 010D0C9F432858493243E42C12D422CAEE5516E0
Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/e967b58d-661e-3cf2-9702-981573d9fd6a.roa
Signing time: Sat 15 Mar 2025 13:00:52 +0000
ROA not before: Sat 15 Mar 2025 13:00:52 +0000
ROA not after: Fri 13 Jun 2025 13:00:52 +0000
asID: 26744
IP address blocks: 150.252.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:32:43:e4:2c:12:d4:22:ca:ee:55:16:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
Validity
Not Before: Mar 15 13:00:52 2025 GMT
Not After : Jun 13 13:00:52 2025 GMT
Subject: CN=ce47eafd-8255-435d-8d56-c601a1385384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d8:29:a0:91:db:83:b4:c9:43:00:aa:fd:06:
03:04:34:2b:f6:da:9a:05:ce:69:c3:ca:f0:96:ba:
d0:bd:b5:0a:d5:67:6c:e6:17:b4:1e:a7:08:47:66:
8b:12:d9:cb:c0:b9:4c:16:56:5d:ea:88:95:5d:05:
be:cd:ba:bb:4e:ed:b0:44:8d:80:bc:1e:05:f2:88:
bc:83:da:32:09:64:3c:92:bd:68:c8:9b:5c:e6:75:
42:d2:c7:79:3a:cc:88:0a:cd:8c:1e:cb:da:ba:9a:
e1:9f:24:b7:75:0d:c6:c8:79:df:67:a5:3d:9c:d2:
dd:e0:9a:d9:14:c9:e8:a4:58:41:e1:15:3c:f2:2e:
ae:5e:1a:da:87:d1:ed:d4:f2:68:94:32:21:2a:dd:
4c:82:d7:96:73:88:5c:86:a3:87:d4:01:0f:f6:a0:
34:25:35:7f:81:ee:32:41:07:5a:f1:27:54:f9:0c:
7c:04:cd:a9:db:4e:e9:75:8a:5a:0e:6e:d0:8f:6f:
07:85:31:b1:a1:cf:6d:10:92:8a:6e:be:60:14:c7:
55:07:c0:6e:52:bd:1d:bc:c9:cb:94:4d:5c:3e:3f:
5e:5c:e8:c4:3f:0d:dd:3b:84:b2:ac:3f:3c:4a:11:
76:b0:73:99:05:3e:24:56:44:c0:df:04:5b:25:5d:
d1:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:B9:0D:14:E6:1F:14:25:12:4D:DC:B9:64:A8:99:B4:E5:A4:11:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/e967b58d-661e-3cf2-9702-981573d9fd6a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl
X509v3 Authority Key Identifier:
keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
sbgp-ipAddrBlock: critical
IPv4:
150.252.202.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:e3:a9:bc:9e:be:9d:c7:45:3e:6b:a6:1d:9e:f4:b0:72:c8:
fa:33:8b:62:19:f9:94:51:a2:2c:d4:94:89:6d:8f:6f:a4:47:
9e:db:f1:94:79:6b:05:a7:47:61:93:91:1b:2c:a2:a3:59:3e:
71:ed:fe:03:f1:b9:81:af:40:c3:ba:a5:52:64:59:92:60:a9:
6f:f7:56:9e:6e:01:18:ad:25:e1:bf:1d:ca:d2:3a:0a:58:36:
de:fb:49:43:6e:75:b2:76:c7:7f:da:20:57:e1:a9:3f:31:4f:
63:a8:ac:6c:f2:92:a1:63:5a:07:51:31:91:20:fc:b4:12:1c:
9d:7e:88:af:60:49:c5:ce:fe:2e:f2:7d:f0:4f:b8:ae:e6:9d:
1d:22:0a:29:84:a1:1a:7f:3a:df:07:bf:d7:17:5c:e5:fc:ef:
bc:b9:d7:a5:39:09:57:db:b5:e9:20:50:b1:33:bb:e2:2d:8e:
dc:f7:bc:78:f6:63:92:c3:70:fc:1e:0e:90:0c:55:d6:2e:47:
b8:80:0b:9d:e0:d2:4f:ae:aa:d1:9d:9a:b3:a6:42:6b:e8:e3:
f5:f4:89:61:56:f6:0e:9b:69:fb:e6:13:64:9d:85:8a:75:07:
2f:d8:79:02:39:c3:c7:fd:c3:f4:b9:b9:0a:f9:c6:62:b6:27:
28:2a:64:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:37:07 2025 by rpki-client