Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/fdceb492-c12a-3931-addf-ac9d09f62f70.roa
File: fdceb492-c12a-3931-addf-ac9d09f62f70.roa (raw, json)
Hash identifier: KSLGh765BXdvuyS4+CoslxQzfyr5ZGfW81ZsyVy8fC0=
Subject key identifier: 22:0E:AA:DD:A1:78:C0:B2:AC:8B:8A:99:4E:66:BD:47:30:D5:EB:1A
Certificate issuer: /CN=a2159823-806a-4879-9de9-7be634e8cd31
Certificate serial: 010D0C9F432858493C093C2C753EED5FD1BC1900
Authority key identifier: A5:91:90:9A:88:86:1F:02:DF:2B:CF:08:D4:A4:94:60:FD:84:C5:66
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/fdceb492-c12a-3931-addf-ac9d09f62f70.roa
Signing time: Wed 19 Mar 2025 01:00:40 +0000
ROA not before: Wed 19 Mar 2025 01:00:40 +0000
ROA not after: Tue 17 Jun 2025 01:00:40 +0000
asID: 396982
IP address blocks: 151.193.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3c:09:3c:2c:75:3e:ed:5f:d1:bc:19:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2159823-806a-4879-9de9-7be634e8cd31
Validity
Not Before: Mar 19 01:00:40 2025 GMT
Not After : Jun 17 01:00:40 2025 GMT
Subject: CN=9bf16ab8-5333-4ff8-b096-b888781811e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:b4:64:08:00:60:15:02:5c:71:d0:c1:b1:17:
17:01:2e:2f:34:da:a8:2f:c0:0b:31:1c:88:dc:f4:
43:fa:e9:86:1a:7c:c3:9a:78:8c:61:50:9e:1b:c5:
5e:89:50:17:f7:aa:eb:e0:a4:3b:a7:ed:0b:32:3c:
02:a3:f7:1f:5d:bb:c2:1c:0b:44:4f:5b:23:3f:86:
2f:d5:c6:f0:a1:14:2d:d2:d0:7f:39:6d:8c:77:bd:
d7:2f:a7:c7:0b:e6:2a:35:70:df:29:37:be:56:c9:
56:2f:b5:b1:21:29:5c:b6:3f:12:c6:b8:28:36:fd:
19:88:9d:8c:2d:9c:c9:85:36:e1:61:5b:33:0e:0d:
3b:f9:31:d4:4b:27:85:62:f1:0b:10:6b:0b:49:74:
5c:ce:87:02:5e:02:40:c0:fc:42:d1:fb:62:a7:eb:
97:96:6c:39:bd:8c:c3:f0:3d:cb:1f:4b:1c:a4:fe:
94:70:0f:66:f2:c0:82:4d:15:21:9a:25:f3:44:75:
c7:e8:be:cb:0f:da:25:1d:61:b4:41:d8:12:ea:7e:
81:82:1b:50:70:f9:d4:f1:11:38:5e:f4:c1:db:4b:
55:1b:66:03:93:12:83:d1:5a:ad:82:fd:00:98:42:
61:fb:fb:40:58:1a:fb:eb:a1:f6:e9:9b:50:74:2b:
68:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:0E:AA:DD:A1:78:C0:B2:AC:8B:8A:99:4E:66:BD:47:30:D5:EB:1A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/fdceb492-c12a-3931-addf-ac9d09f62f70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a2159823-806a-4879-9de9-7be634e8cd31.crl
X509v3 Authority Key Identifier:
keyid:A5:91:90:9A:88:86:1F:02:DF:2B:CF:08:D4:A4:94:60:FD:84:C5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31.cer
sbgp-ipAddrBlock: critical
IPv4:
151.193.106.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:ad:22:ff:40:93:f0:86:1e:de:e1:3f:c1:0a:61:ac:34:78:
80:51:45:f2:49:09:13:ef:25:59:20:9c:ce:74:3d:6c:b9:a9:
dd:85:38:1b:1c:89:18:dd:a1:8d:22:35:8a:e7:a3:aa:f2:cc:
39:f8:c8:61:93:1b:04:63:65:22:97:43:10:01:71:3c:ad:85:
5d:64:c1:f8:92:18:dc:76:d9:8b:5d:9a:71:73:d5:1f:a6:46:
7b:40:78:92:4f:ce:69:1f:55:8c:00:a2:ad:b2:0a:07:73:43:
01:b4:22:69:e8:ba:98:10:86:80:a0:ee:1d:58:e0:7f:64:ff:
c1:e7:c3:cf:69:c8:a6:db:43:aa:3e:06:c4:e3:27:e8:6b:fa:
df:78:7d:f2:18:de:b6:93:44:8c:3b:0f:c1:c3:c4:6b:29:68:
5e:9c:22:b4:7f:d5:38:a1:89:b6:d9:ae:a9:9d:16:c9:cf:16:
ef:2f:2f:76:18:fa:80:7a:22:12:e6:b9:87:10:e6:c1:d7:d5:
f9:ae:5d:f7:98:36:bc:90:2d:cf:75:00:f9:12:04:2b:53:44:
b9:37:8f:2a:9e:86:42:a5:13:c1:51:07:9b:27:06:99:e4:01:
3e:13:96:72:b6:55:51:d7:ca:76:b3:80:eb:de:19:90:2d:1d:
8f:7c:aa:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:42:30 2025 by rpki-client