Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/dd6bcb4a-b00a-30d9-aee1-f1f87ebfcac8.roa
File: dd6bcb4a-b00a-30d9-aee1-f1f87ebfcac8.roa (raw, json)
Hash identifier: FpagDyEHT/Gk9bO0LAHagIiIRMkPksHw+SLSNICN6Cg=
Subject key identifier: 0F:EC:34:DE:08:40:92:78:09:87:88:26:B9:56:B2:10:89:7A:DE:8D
Certificate issuer: /CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311
Certificate serial: 010D0C9F432858488AE0A5B3639C557270E39780
Authority key identifier: 0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/dd6bcb4a-b00a-30d9-aee1-f1f87ebfcac8.roa
Signing time: Tue 14 Jan 2025 14:00:51 +0000
ROA not before: Tue 14 Jan 2025 14:00:51 +0000
ROA not after: Mon 14 Apr 2025 13:00:51 +0000
asID: 25697
IP address blocks: 209.151.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8a:e0:a5:b3:63:9c:55:72:70:e3:97:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311
Validity
Not Before: Jan 14 14:00:51 2025 GMT
Not After : Apr 14 13:00:51 2025 GMT
Subject: CN=c7e8b66e-1051-4cac-8d46-c6c6cb8cebf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7d:0f:19:4d:02:96:81:d1:ca:1a:98:49:b3:
56:a9:57:8a:e5:6c:b6:7d:63:89:66:a5:38:b3:d3:
19:02:b5:87:78:54:90:41:ff:74:79:cc:57:b2:3e:
cc:57:f4:0d:d7:c9:5e:f6:cb:d2:62:7c:0b:1e:3d:
e4:7e:37:12:c1:fc:7c:ce:74:1a:b2:c6:c7:5c:a6:
85:c3:b6:3e:e0:ba:77:ae:da:d2:89:ee:8e:f3:32:
08:4a:34:55:42:75:db:b8:cd:bf:15:92:d7:80:60:
93:6f:14:0f:34:b4:e6:7d:db:81:ef:18:58:ec:97:
c0:ed:f0:b7:b7:0e:80:4d:5e:25:05:b6:7a:ae:24:
5f:13:e7:43:c4:41:13:ba:37:bd:31:13:d6:e4:72:
ad:6e:90:fe:be:11:d0:81:a4:28:43:34:48:69:5d:
4c:1e:40:25:91:ff:53:09:bf:32:9b:2b:21:a4:ae:
1c:c6:c3:ea:0c:19:e3:dc:ca:2d:71:d2:2b:14:6f:
e9:b5:4a:6a:1f:34:d3:e4:b7:7e:f0:bd:4c:bd:43:
45:af:d9:5f:98:46:95:65:d6:6d:f7:8b:df:a2:0e:
07:78:ee:28:15:f1:47:f0:c4:2d:e8:ed:cc:b7:5c:
e5:95:13:3f:d3:b4:92:4b:6c:45:ac:af:af:d9:c6:
5a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:EC:34:DE:08:40:92:78:09:87:88:26:B9:56:B2:10:89:7A:DE:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/dd6bcb4a-b00a-30d9-aee1-f1f87ebfcac8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl
X509v3 Authority Key Identifier:
keyid:0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer
sbgp-ipAddrBlock: critical
IPv4:
209.151.158.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ba:1c:1d:95:33:82:69:88:d8:b9:93:37:c4:5b:e5:2b:d8:1b:
68:4e:23:68:36:e9:1f:53:20:5b:33:5b:b5:82:3a:89:83:7a:
92:1c:3d:76:a3:32:89:27:cc:b2:87:f6:aa:85:53:05:d1:e3:
f6:64:c8:7b:92:ba:a3:c3:d5:b6:4a:a0:71:4e:ba:ba:ff:9f:
23:80:a2:8f:ca:bd:28:d2:23:bd:a6:60:87:b2:0a:f8:fb:ac:
3b:42:37:7a:85:ce:6d:ee:9e:3c:76:58:82:cb:76:2f:8d:8b:
c3:00:2d:b5:69:26:c2:b7:91:95:6c:4c:e1:89:70:95:b7:e3:
56:90:b3:17:84:15:19:56:eb:2b:59:67:7c:99:dc:55:f2:26:
0a:fe:d9:16:d1:58:bb:55:af:e1:95:a3:82:89:10:a8:69:76:
68:97:35:39:a0:2f:13:b5:00:01:f3:a9:a3:88:c1:81:19:ce:
5a:33:9c:34:ea:42:23:d8:2e:ce:c8:a2:99:9a:34:6e:2d:8f:
ce:e9:58:f8:7c:d7:72:0d:ef:b8:30:e3:fc:d3:86:ad:37:ec:
1f:8e:01:26:3d:63:89:b3:61:67:0a:fa:3d:2e:7c:58:38:12:
85:c9:18:e4:72:d0:34:25:00:64:ec:77:ce:32:a9:b0:75:9d:
6c:8e:25:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:09:17 2025 by rpki-client