Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/b7d6b64d-3bc0-31ea-8917-39a0e3149f3f.roa
File: b7d6b64d-3bc0-31ea-8917-39a0e3149f3f.roa (raw, json)
Hash identifier: 8MzR8OUHVp66u1aq3HkHOK7l5rncxZwIEGd1ZNtO7KE=
Subject key identifier: B0:58:90:2A:E1:DF:B6:70:D4:3A:B8:E6:F6:4E:AB:89:BD:07:E6:F5
Certificate issuer: /CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311
Certificate serial: 010D0C9F432858488AE0A5D2CF3CF24E25CC1C00
Authority key identifier: 0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/b7d6b64d-3bc0-31ea-8917-39a0e3149f3f.roa
Signing time: Tue 14 Jan 2025 14:00:51 +0000
ROA not before: Tue 14 Jan 2025 14:00:51 +0000
ROA not after: Mon 14 Apr 2025 13:00:51 +0000
asID: 25697
IP address blocks: 209.151.152.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8a:e0:a5:d2:cf:3c:f2:4e:25:cc:1c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311
Validity
Not Before: Jan 14 14:00:51 2025 GMT
Not After : Apr 14 13:00:51 2025 GMT
Subject: CN=f81ad225-6afb-48e1-8c93-ccaab6057d68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c9:a1:5a:a2:ad:38:f1:04:a5:b2:b9:e0:bb:
79:8e:14:ad:03:f3:8c:52:93:f3:d0:2d:d7:29:80:
f1:e3:2b:95:e1:16:b4:bb:51:1e:d7:a8:e8:42:82:
d7:b9:83:d9:b0:81:be:4e:df:07:55:dd:9b:e2:83:
35:ff:af:c1:7c:ff:1c:92:a2:b3:79:1d:45:ff:94:
49:c0:c9:f5:33:09:eb:7d:ea:f8:0b:da:c6:43:85:
4e:01:19:54:42:9a:82:f7:c3:be:79:8c:6f:aa:1b:
53:bf:8b:0b:7a:62:af:cb:56:94:23:2c:d9:4f:b7:
7e:3e:bd:72:85:24:21:fe:39:44:0b:94:8a:f0:f7:
03:cf:22:65:d5:46:17:9c:e2:13:86:e2:a3:7d:62:
a1:4e:90:9b:a5:89:28:4a:c9:e2:15:11:a2:b5:25:
42:5d:ea:09:48:52:3f:1e:21:0b:7c:d0:9a:a8:e6:
1a:1d:2d:12:57:f5:84:5b:ba:9c:2b:39:2e:c1:b4:
92:d9:51:25:32:4a:ec:57:21:a7:5c:7f:25:20:01:
a5:46:4f:67:77:74:2d:13:20:90:ac:eb:d8:29:dc:
bb:a0:31:90:4e:16:30:fe:9b:20:b7:ba:6d:60:4e:
16:d0:b2:0b:a6:1e:85:58:f2:4f:7f:93:87:28:80:
ae:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:58:90:2A:E1:DF:B6:70:D4:3A:B8:E6:F6:4E:AB:89:BD:07:E6:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/b7d6b64d-3bc0-31ea-8917-39a0e3149f3f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl
X509v3 Authority Key Identifier:
keyid:0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer
sbgp-ipAddrBlock: critical
IPv4:
209.151.152.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:74:bb:8a:3d:fd:0d:f5:fe:65:8d:27:f4:3b:f0:9e:57:c9:
e8:84:1a:dc:a9:05:d6:ee:92:b3:95:10:59:e6:74:2c:1a:fd:
07:53:aa:dc:b9:67:cf:5f:24:09:ef:c1:65:35:e5:f5:76:a7:
be:65:7e:97:14:0c:86:f8:4a:6f:1f:66:d1:5f:1e:e7:ea:9b:
41:90:f5:bb:7a:f6:46:76:4b:76:52:40:c7:dd:23:ac:20:a0:
ae:ac:4f:e6:a0:8c:3f:93:d2:86:b4:76:5c:b0:d8:dc:a2:a1:
fe:b0:32:20:c6:4e:d3:68:a6:af:55:e0:46:61:60:b8:b8:9f:
8d:a5:62:a2:18:88:2a:10:e2:ef:d7:88:d3:e3:7a:f1:2b:e2:
b2:1f:3c:f5:64:7d:8e:b2:14:f3:e9:8c:7d:06:bc:3c:cf:4e:
11:a7:4a:44:b3:8d:ac:d3:31:f5:47:c1:b4:90:06:aa:85:6b:
10:08:09:e7:95:5a:12:8b:ab:bb:03:f4:a6:0e:44:4e:3a:52:
97:b8:d7:74:23:43:9f:31:9d:e1:f7:b4:0d:12:0e:1c:86:a9:
63:79:bf:63:8b:74:be:b0:a1:6a:61:42:4a:9f:ea:bf:f5:23:
92:23:19:9c:9d:74:7b:cc:e9:36:bd:cb:df:cd:38:61:d0:ad:
93:20:3e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:10:58 2025 by rpki-client