Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/3611eb1d-586a-3087-8c7c-45e34fe9b737.roa
File: 3611eb1d-586a-3087-8c7c-45e34fe9b737.roa (raw, json)
Hash identifier: VeF26w7DktFzvAJfKmKY3RzeMei23Qaf7oD1k10W1qI=
Subject key identifier: 96:E4:1D:17:50:CF:89:EE:EA:31:34:84:84:73:7C:42:C4:3C:AE:99
Certificate issuer: /CN=628d865a-2d19-4af1-984a-6c443304d9f0
Certificate serial: 010D0C9F43285848D4DB90574C8EC5CB364862E0
Authority key identifier: 25:8B:BC:FC:CC:F8:56:36:9E:6B:8D:EE:95:D3:D1:0F:49:98:08:24
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/3611eb1d-586a-3087-8c7c-45e34fe9b737.roa
Signing time: Mon 10 Feb 2025 02:00:38 +0000
ROA not before: Mon 10 Feb 2025 02:00:38 +0000
ROA not after: Sun 11 May 2025 01:00:38 +0000
asID: 81
IP address blocks: 152.30.92.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d4:db:90:57:4c:8e:c5:cb:36:48:62:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=628d865a-2d19-4af1-984a-6c443304d9f0
Validity
Not Before: Feb 10 02:00:38 2025 GMT
Not After : May 11 01:00:38 2025 GMT
Subject: CN=b8f2c9c9-82ba-4682-a142-5dd0af2791a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:8a:97:4c:4e:9e:e0:aa:ff:65:04:13:ca:c1:
f8:ac:53:9d:b7:4e:f0:2b:f8:14:95:49:94:a2:17:
c9:06:52:6e:fa:e6:a3:2c:ee:c2:d8:cf:0e:6f:cb:
55:8a:5d:6d:54:c5:c6:18:26:74:07:4c:86:26:a7:
e6:38:ad:3c:0b:ef:fe:a7:ce:2c:c1:0b:0f:82:80:
39:f4:f5:10:ad:06:16:2d:2a:11:b1:c0:20:ee:38:
1a:f0:8b:bd:f7:c9:f9:f6:46:f1:c8:2e:ef:f5:c3:
a7:c0:53:cd:41:04:49:78:79:c3:17:03:53:35:b3:
90:b0:c5:85:a8:77:71:a8:37:8c:ab:db:17:27:15:
bd:9c:aa:7b:d9:33:08:0e:a9:a3:bb:e5:c5:08:de:
4e:c0:5a:d5:00:5e:78:f4:ed:c5:b6:03:c1:ee:84:
fa:2b:08:14:e1:3e:7b:7c:83:44:d6:dc:65:ea:81:
3c:ed:d0:90:35:73:68:2f:96:0a:b7:93:98:30:cc:
3b:00:a5:6d:0e:6d:86:e7:52:84:cb:8d:6f:33:aa:
51:b3:c1:ed:be:5e:7d:9a:f4:20:45:b0:ba:5b:d2:
e6:29:b9:9b:a0:1a:30:2e:5b:a5:2f:ba:d4:09:18:
80:e5:54:04:4a:4e:3d:5a:7c:5e:ea:f4:d6:e9:f8:
11:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:E4:1D:17:50:CF:89:EE:EA:31:34:84:84:73:7C:42:C4:3C:AE:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/3611eb1d-586a-3087-8c7c-45e34fe9b737.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/628d865a-2d19-4af1-984a-6c443304d9f0.crl
X509v3 Authority Key Identifier:
keyid:25:8B:BC:FC:CC:F8:56:36:9E:6B:8D:EE:95:D3:D1:0F:49:98:08:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0.cer
sbgp-ipAddrBlock: critical
IPv4:
152.30.92.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:3e:df:c9:be:27:4d:59:78:7a:5d:84:65:80:e8:b8:39:07:
23:a0:cb:f8:ab:7c:c7:5e:83:00:0b:23:40:b3:8e:e5:22:12:
53:0c:94:c1:8c:a1:96:94:0e:72:ee:dc:64:cc:8c:0d:64:a1:
43:1f:50:db:75:62:2e:b2:0e:71:92:59:28:51:d6:d4:2f:53:
7d:72:db:53:85:95:35:1b:99:a2:3e:f8:62:f5:c7:17:6e:cf:
0f:61:0f:89:b9:f2:2c:f4:c4:bf:86:51:ec:21:22:de:a2:3e:
d5:99:77:ee:e9:95:c6:d7:c4:96:98:b2:9a:8d:62:37:18:06:
72:98:c5:e3:bf:20:26:05:88:5b:c9:4c:8b:6e:8e:cd:8d:9e:
66:d6:09:65:30:bb:69:76:cb:d6:00:21:3c:24:3b:10:4b:29:
57:c5:0f:0f:25:3f:76:cc:29:60:ac:6e:2b:22:1b:67:a0:40:
c8:ed:01:e8:7b:11:ac:98:34:d3:e1:8e:92:bf:b2:b3:25:b0:
4c:09:35:8e:80:58:a9:3a:2c:b0:6d:79:29:33:df:cf:a7:8a:
d1:ce:f0:d4:01:e9:8c:73:35:e6:ed:65:f9:d6:f8:72:ad:08:
38:9d:9f:94:47:49:05:00:40:5f:94:f8:cb:94:ca:a1:1e:a8:
bd:c6:35:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 05:19:17 2025 by rpki-client