Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfbd5b0f-e06b-409d-a492-aff81175f2cd/ac33e81c-e21e-307e-8679-630443462c2f.roa
File: ac33e81c-e21e-307e-8679-630443462c2f.roa (raw, json)
Hash identifier: cgnA59U3xg4XakMqbwI1SD90RoACvv4VAfa3vGnFqC0=
Subject key identifier: 16:FB:0D:0B:CF:5C:08:69:B1:38:88:34:EC:98:C4:EB:7D:9C:7A:1C
Certificate issuer: /CN=dfbd5b0f-e06b-409d-a492-aff81175f2cd
Certificate serial: 010D0C9F4328584955295620E0746D957A7EE710
Authority key identifier: 8B:F2:33:5D:44:8C:B4:0E:A9:0C:C9:AE:02:A2:0D:59:19:25:69:6A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfbd5b0f-e06b-409d-a492-aff81175f2cd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfbd5b0f-e06b-409d-a492-aff81175f2cd/ac33e81c-e21e-307e-8679-630443462c2f.roa
Signing time: Fri 28 Mar 2025 01:00:41 +0000
ROA not before: Fri 28 Mar 2025 01:00:41 +0000
ROA not after: Thu 26 Jun 2025 01:00:41 +0000
asID: 36081
IP address blocks: 156.108.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:55:29:56:20:e0:74:6d:95:7a:7e:e7:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfbd5b0f-e06b-409d-a492-aff81175f2cd
Validity
Not Before: Mar 28 01:00:41 2025 GMT
Not After : Jun 26 01:00:41 2025 GMT
Subject: CN=d90e6429-126e-443c-9918-8bb25338a4f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f6:d3:78:a9:6b:03:11:b1:f3:f9:65:57:94:
ef:99:e6:fb:25:cd:8e:e9:8e:aa:2a:fb:a3:f6:17:
08:15:eb:fe:8b:6e:ff:fb:c1:8d:dc:3c:d6:47:4f:
99:1f:79:dc:c2:1f:d3:40:1a:72:b1:f5:6b:73:6e:
59:97:db:23:1b:95:14:26:e7:ab:3a:31:a2:29:86:
e9:27:e3:ed:61:75:ca:b9:9a:57:db:b7:98:27:64:
40:97:06:8b:ca:13:f8:f7:38:30:e9:2f:62:89:c0:
9d:04:4a:4b:05:c2:e7:db:19:31:56:2e:ce:41:1e:
5b:9c:e6:09:b8:8a:ef:ef:f3:fa:b7:cd:1a:c2:f6:
b7:6c:f3:eb:24:fe:30:4c:f0:02:1b:ee:fc:7c:a2:
45:e1:54:8c:0f:93:78:f6:09:fc:2d:d8:e5:0a:2e:
7c:4c:ac:dc:42:db:ff:32:eb:bd:ac:eb:c4:a6:4f:
25:bd:6f:44:34:9a:e5:3a:df:e4:72:7c:31:72:74:
ea:38:94:b3:7d:9a:a0:13:08:ff:4a:42:63:9b:05:
fc:ee:cf:0c:7e:f7:65:94:41:54:1f:3e:12:0b:d7:
4b:4e:ce:b1:cf:5e:0b:89:03:2d:31:87:7c:d6:d1:
c9:79:72:d3:51:62:2e:1b:2f:a5:3c:94:ec:3b:9a:
b1:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:FB:0D:0B:CF:5C:08:69:B1:38:88:34:EC:98:C4:EB:7D:9C:7A:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfbd5b0f-e06b-409d-a492-aff81175f2cd/ac33e81c-e21e-307e-8679-630443462c2f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfbd5b0f-e06b-409d-a492-aff81175f2cd/dfbd5b0f-e06b-409d-a492-aff81175f2cd.crl
X509v3 Authority Key Identifier:
keyid:8B:F2:33:5D:44:8C:B4:0E:A9:0C:C9:AE:02:A2:0D:59:19:25:69:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfbd5b0f-e06b-409d-a492-aff81175f2cd.cer
sbgp-ipAddrBlock: critical
IPv4:
156.108.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c2:7e:06:3e:41:6c:b9:e6:69:e8:3e:75:13:1e:97:a7:c5:f3:
9e:60:fe:f0:c0:f9:70:62:d9:a1:d0:12:86:8f:5e:6d:5c:69:
fd:4e:e1:35:be:21:24:4d:f0:11:b3:bc:e2:16:f8:fd:48:3e:
c5:bc:69:f5:ee:e3:f3:12:29:df:4e:52:36:26:9a:60:ed:3f:
fe:63:97:d7:dd:ab:c3:b5:4a:42:7f:0b:1d:93:c6:f9:5e:2a:
b2:e7:12:58:f0:4d:76:b0:c6:e4:96:a4:fc:45:aa:56:64:ce:
98:cc:46:f6:68:24:1d:82:cb:2d:8a:73:13:43:95:e6:06:5d:
08:d7:00:87:f0:84:6b:62:9d:41:dd:f6:ef:27:60:60:34:cd:
9c:e2:69:60:bb:8e:6c:99:67:a2:54:de:e3:29:43:2b:32:a6:
b3:b7:2c:9b:b1:df:ec:32:53:0a:ef:af:cf:9b:dd:44:05:6d:
68:62:0d:13:f8:52:70:77:2b:71:68:90:50:c4:4d:24:80:31:
ce:54:4b:0c:38:a8:36:12:61:7c:23:79:09:15:81:d8:1c:82:
76:10:ab:85:e2:e7:fb:be:19:17:4b:83:8b:58:8e:e7:82:98:
0d:e7:46:cd:32:52:dd:79:e5:53:a3:d0:56:99:8c:75:33:a9:
41:8c:6d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 09:28:21 2025 by rpki-client