Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/1a9639da-a216-3ece-b327-c09a057856a3.roa
File: 1a9639da-a216-3ece-b327-c09a057856a3.roa (raw, json)
Hash identifier: zmd9/7uJBZKXdoJsSvYa0M0OxF1N7fpTsiGJSJ5TCBs=
Subject key identifier: E6:E0:F0:72:73:12:40:A5:A8:B1:8A:55:28:4A:0D:4A:FD:23:34:8E
Certificate issuer: /CN=628d865a-2d19-4af1-984a-6c443304d9f0
Certificate serial: 010D0C9F43285848D4DB9070C66EDB30624873A0
Authority key identifier: 25:8B:BC:FC:CC:F8:56:36:9E:6B:8D:EE:95:D3:D1:0F:49:98:08:24
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/1a9639da-a216-3ece-b327-c09a057856a3.roa
Signing time: Mon 10 Feb 2025 02:00:38 +0000
ROA not before: Mon 10 Feb 2025 02:00:38 +0000
ROA not after: Sun 11 May 2025 01:00:38 +0000
asID: 81
IP address blocks: 152.30.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d4:db:90:70:c6:6e:db:30:62:48:73:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=628d865a-2d19-4af1-984a-6c443304d9f0
Validity
Not Before: Feb 10 02:00:38 2025 GMT
Not After : May 11 01:00:38 2025 GMT
Subject: CN=0be42d2c-fa91-4259-82c6-65f29fdadd07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:85:cd:91:55:ea:dd:ad:e0:15:b1:5f:12:5c:
ce:05:cf:80:1e:c6:e0:d4:67:99:1a:51:23:7a:7f:
f0:cd:80:2d:60:2e:83:ef:cb:ce:00:00:30:17:7b:
3b:2b:26:e8:1b:06:63:e0:9c:4f:1b:9d:a9:08:2f:
99:a9:63:27:40:a7:eb:33:9b:13:00:e1:4b:3f:e2:
26:3f:29:91:0d:f4:f6:ce:0a:e6:80:37:3a:3b:5e:
c5:71:6d:c3:4b:78:21:cf:7e:94:6c:4a:43:77:a0:
72:90:24:bb:28:f1:71:a0:a6:ff:8f:73:4f:0f:03:
0c:3e:66:a5:df:8d:3b:a8:57:1b:1d:90:a9:53:ff:
13:b0:fc:a6:1f:45:df:9c:2c:f6:fa:b4:8c:1c:e1:
36:ce:d4:16:4b:88:b6:c4:1d:ad:f8:b6:03:00:32:
c8:1c:52:e3:56:5e:64:52:1b:0b:5e:b5:6f:73:85:
5a:6d:63:57:85:d1:49:72:69:5c:d0:e2:3d:ff:f9:
fd:cc:e0:b6:96:0e:6b:9b:3b:c4:27:05:f2:de:45:
9d:c1:be:4a:51:d3:5b:a2:e7:da:bf:48:0d:f0:fb:
fd:44:e1:bd:f8:18:85:4d:f9:a3:de:4f:b8:7b:03:
dc:8a:23:0c:63:37:01:a9:53:2e:93:8a:59:b8:29:
3d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:E0:F0:72:73:12:40:A5:A8:B1:8A:55:28:4A:0D:4A:FD:23:34:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/1a9639da-a216-3ece-b327-c09a057856a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/628d865a-2d19-4af1-984a-6c443304d9f0.crl
X509v3 Authority Key Identifier:
keyid:25:8B:BC:FC:CC:F8:56:36:9E:6B:8D:EE:95:D3:D1:0F:49:98:08:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0.cer
sbgp-ipAddrBlock: critical
IPv4:
152.30.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:4e:3c:b8:58:d2:68:8f:1e:41:29:98:41:dc:e4:be:11:24:
36:81:e1:11:24:82:cd:4f:b9:1b:c0:31:a1:a4:9a:9b:fa:11:
a0:22:1e:4b:bd:53:04:7f:87:cf:a8:34:9b:89:76:68:b1:ff:
d2:1b:92:30:9e:0e:6a:38:78:e0:7b:4f:46:ed:9b:8b:af:b7:
53:d1:a4:94:1b:e6:7f:fc:88:f2:ff:95:72:d6:bc:aa:e5:52:
4f:9b:c7:0a:b4:ff:77:79:20:07:69:6a:48:9c:b7:43:8f:6a:
fc:1d:41:ae:f5:ee:e8:d5:b8:70:c2:fe:32:fa:52:cd:8e:50:
8c:26:49:15:79:8c:86:5a:df:47:6d:e0:a3:3e:c6:99:35:b3:
43:a3:42:b4:4c:6b:7a:69:76:10:2e:25:63:e1:24:54:3a:8e:
8f:b8:3e:1c:db:38:c7:a7:41:30:d1:85:a9:69:92:5c:fd:ae:
f5:0d:bb:a7:75:91:9a:06:c9:64:2b:90:a1:0a:cd:5d:b1:8f:
9c:b1:cc:e4:ca:04:c8:53:db:8e:d4:94:8b:b4:fe:cb:78:58:
45:d2:54:47:37:94:e4:aa:cb:9d:d7:81:18:aa:eb:a9:a5:c7:
1e:28:98:74:11:59:f8:2b:2e:a7:11:87:19:83:09:1f:58:78:
ae:ce:a3:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 05:07:56 2025 by rpki-client