Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/c1beb45d-0a3d-33f9-911f-d29bafacb3db.roa
File: c1beb45d-0a3d-33f9-911f-d29bafacb3db.roa (raw, json)
Hash identifier: CSYf7vX5xiE7gwHh6FgJeEAvNcCVtcZ18jEfQ1xRlZU=
Subject key identifier: 53:96:0E:CB:42:17:B0:1C:FE:C8:67:3B:7A:DA:0D:E5:D7:87:96:96
Certificate issuer: /CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311
Certificate serial: 010D0C9F432858488AE0A0B404C852CBE0253400
Authority key identifier: 0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/c1beb45d-0a3d-33f9-911f-d29bafacb3db.roa
Signing time: Tue 14 Jan 2025 14:00:51 +0000
ROA not before: Tue 14 Jan 2025 14:00:51 +0000
ROA not after: Mon 14 Apr 2025 13:00:51 +0000
asID: 25697
IP address blocks: 152.44.40.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8a:e0:a0:b4:04:c8:52:cb:e0:25:34:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311
Validity
Not Before: Jan 14 14:00:51 2025 GMT
Not After : Apr 14 13:00:51 2025 GMT
Subject: CN=93b8c742-0802-4569-9138-a05f4b9d7e62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:74:8c:ee:4d:f0:e7:69:c7:c4:f6:03:00:6a:
6b:12:b4:a0:38:c8:c3:aa:19:7d:10:fd:24:75:6f:
c4:ee:07:98:b9:83:ed:f6:af:a0:2b:cf:8c:e6:03:
60:2e:ff:ff:d3:f3:51:43:f9:ca:4a:e5:55:5f:79:
6c:67:6a:fb:19:51:1a:a8:6b:7c:56:84:66:84:ac:
b1:fc:95:0b:88:31:7b:4f:78:22:01:b1:b5:8f:4f:
20:10:ef:c0:3d:88:7f:7d:87:4a:c6:75:59:be:e4:
b1:af:75:4a:74:68:d7:3a:3e:fb:c2:74:c1:41:13:
49:5d:d3:1a:5c:f2:e0:cd:fe:d1:69:7b:7f:3e:4a:
61:ba:90:55:49:f3:ee:ba:60:ef:72:b5:97:1e:eb:
50:5e:dd:7e:ab:83:41:2e:23:1d:c6:11:fb:a1:9e:
d5:99:e4:0b:40:65:1e:0b:1b:d8:26:75:ca:cc:6b:
8b:f0:8c:71:38:c2:9f:74:a5:c2:0a:8b:5b:63:f0:
a4:73:cf:39:a8:1b:9c:a8:f8:9a:79:c4:57:06:8d:
40:cb:35:ca:4a:fa:d8:c7:e5:4e:90:52:5f:91:a9:
1b:8c:ff:72:ca:3c:87:38:6c:d9:c7:ce:a0:89:43:
3d:c1:a9:a1:4e:cc:fd:d5:03:ab:d1:f8:0f:e1:4f:
1c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:96:0E:CB:42:17:B0:1C:FE:C8:67:3B:7A:DA:0D:E5:D7:87:96:96
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/c1beb45d-0a3d-33f9-911f-d29bafacb3db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl
X509v3 Authority Key Identifier:
keyid:0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer
sbgp-ipAddrBlock: critical
IPv4:
152.44.40.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:ae:fa:66:28:24:07:d1:93:07:49:60:02:3d:2e:2e:ff:98:
f9:a6:f0:ed:d0:93:1c:5c:23:1d:97:8f:81:73:c4:ac:2f:69:
6c:6d:d9:7a:70:86:87:bd:d8:c4:0f:3b:b4:86:d7:d4:97:b5:
63:5d:f7:1f:11:af:5b:82:38:83:da:bb:0e:38:96:55:4b:4a:
51:9c:67:0f:ce:e4:b1:fb:aa:90:02:34:3a:fd:38:dd:c2:0c:
32:6b:85:a7:eb:4d:c8:81:c9:0d:fe:e0:1b:60:22:ea:cc:5e:
d2:b7:90:93:2d:c5:87:67:84:d1:ac:29:1f:6e:f7:65:eb:cb:
b9:99:46:60:5e:85:85:7e:fe:cd:6e:65:e1:8f:c2:2e:05:71:
fb:c4:2d:d7:55:79:11:4a:4b:86:a6:9e:87:1f:1d:48:66:58:
a5:48:b5:96:0d:af:7b:1f:8c:e6:d4:b3:a0:93:3e:52:25:f4:
ee:37:3c:37:f6:76:6c:e7:50:da:09:04:ef:a2:ee:bc:26:8a:
dc:cb:01:47:44:a4:6e:f8:d8:94:1b:59:17:12:39:a6:b4:5f:
ee:cc:a1:4e:5b:dd:7c:62:e7:a1:60:e9:58:eb:87:5a:1c:b9:
a6:d6:b4:6b:94:94:f2:f1:4d:e7:ab:15:31:22:00:54:c3:cf:
89:13:86:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:01:34 2025 by rpki-client