Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00825d1b-b873-4e21-a614-f945938c5194/07139b64-7ebd-38d0-9bf3-5174c7e14861.roa
File: 07139b64-7ebd-38d0-9bf3-5174c7e14861.roa (raw, json)
Hash identifier: wZiVdm15S1MLB9ladmWvw+as/ZCy+z2mlLFvAMtTDW0=
Subject key identifier: D2:99:47:8F:43:79:F0:93:67:2E:09:11:A9:9D:4B:ED:7E:C4:09:62
Certificate issuer: /CN=00825d1b-b873-4e21-a614-f945938c5194
Certificate serial: 010D0C9F432858487A207D71BBC7358510603700
Authority key identifier: 85:72:DF:E5:55:AC:90:E8:B6:69:54:94:21:8F:16:FA:38:DC:51:88
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00825d1b-b873-4e21-a614-f945938c5194.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00825d1b-b873-4e21-a614-f945938c5194/07139b64-7ebd-38d0-9bf3-5174c7e14861.roa
Signing time: Wed 08 Jan 2025 14:00:51 +0000
ROA not before: Wed 08 Jan 2025 14:00:51 +0000
ROA not after: Tue 08 Apr 2025 13:00:51 +0000
asID: 36850
IP address blocks: 152.2.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7a:20:7d:71:bb:c7:35:85:10:60:37:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00825d1b-b873-4e21-a614-f945938c5194
Validity
Not Before: Jan 8 14:00:51 2025 GMT
Not After : Apr 8 13:00:51 2025 GMT
Subject: CN=f4e5d823-cf3f-44e8-84f9-e7cdb023e55e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:be:ab:e4:aa:f4:df:0e:3a:c1:00:87:75:bd:
78:8b:59:b9:7c:1a:4a:2f:69:49:09:71:5c:a1:68:
f7:0e:16:f0:ca:fe:02:56:16:27:10:f7:76:6a:3f:
d6:1d:f8:74:64:0e:a8:09:3d:10:a0:41:6d:92:92:
a4:09:b6:f0:43:6b:95:a4:49:a3:a0:c8:fd:d6:f8:
21:6b:d3:1e:3c:73:2b:ce:ef:38:d3:92:45:0a:a3:
bf:ad:55:46:17:a7:b3:3c:46:61:e5:1d:a7:17:02:
16:c7:c1:aa:99:cd:e1:f1:85:1c:2e:e5:bf:1e:bd:
9c:ec:13:f9:a2:1c:f0:3f:ee:c5:cd:79:27:c9:fe:
46:c1:73:6b:43:50:43:75:c8:0d:e5:f5:b1:1f:6a:
f8:e0:7b:1a:2a:79:81:a6:dd:b6:ac:91:2d:b6:2b:
58:09:96:45:ef:a6:ca:05:92:eb:55:0d:1e:51:ad:
15:ba:b1:5b:02:e9:04:31:84:f8:e6:5b:38:3b:d6:
03:d6:ce:ea:fe:ea:75:53:c0:d3:8e:80:1e:18:ef:
cf:36:a7:cf:72:73:93:3b:0c:04:9e:d1:7d:b6:dc:
5b:cd:4b:3e:f9:3a:b7:fd:e6:2a:7a:0d:3b:1b:b8:
e5:7f:a1:10:97:91:a6:3e:59:e0:c1:05:70:b3:93:
2e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:99:47:8F:43:79:F0:93:67:2E:09:11:A9:9D:4B:ED:7E:C4:09:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00825d1b-b873-4e21-a614-f945938c5194/07139b64-7ebd-38d0-9bf3-5174c7e14861.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00825d1b-b873-4e21-a614-f945938c5194/00825d1b-b873-4e21-a614-f945938c5194.crl
X509v3 Authority Key Identifier:
keyid:85:72:DF:E5:55:AC:90:E8:B6:69:54:94:21:8F:16:FA:38:DC:51:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00825d1b-b873-4e21-a614-f945938c5194.cer
sbgp-ipAddrBlock: critical
IPv4:
152.2.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:02:34:45:55:17:7e:73:3b:95:6d:a7:0e:6e:78:65:05:ee:
a5:e1:55:c9:b3:3d:fe:06:d4:b0:4c:fa:4b:27:dd:26:d4:42:
b7:f4:0e:83:42:35:df:35:8d:f0:a5:d1:e9:49:94:91:17:04:
0b:67:2a:ea:24:d0:4f:b3:57:eb:bc:4d:ab:34:46:7b:8e:77:
75:b7:03:67:0c:75:08:c2:6f:8e:2f:ac:c2:44:b0:0f:c7:48:
9c:8c:f1:ef:81:2c:e9:fd:5b:39:96:cf:e7:60:1b:76:20:7c:
2c:b2:6e:46:a5:42:6c:6e:a7:1d:87:85:e0:27:2c:1e:57:da:
2d:c4:77:f3:79:87:a0:ba:0a:63:5b:84:c9:c4:72:ec:97:65:
b4:50:73:5f:9f:b0:8e:f3:fc:3f:91:4f:52:2e:19:b7:5a:bc:
49:44:03:27:a0:6f:9f:72:8a:a2:ed:72:af:5b:9e:7a:e9:9b:
6e:79:b7:56:e8:48:b7:d0:4e:44:ae:fa:ab:80:16:d6:8f:7f:
58:96:44:a6:49:94:41:3a:7d:c2:34:7a:32:31:e0:4c:ed:f0:
dd:28:81:c8:14:fa:cb:b3:7f:d6:0f:96:74:ec:0b:f5:32:1c:
c7:01:06:3a:20:63:ca:8e:f6:4a:f8:b3:69:43:08:6f:7d:4a:
74:d1:00:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:29:15 2025 by rpki-client