Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/51ebef56-4abf-3ef7-bc55-1a8d74621254.roa
File: 51ebef56-4abf-3ef7-bc55-1a8d74621254.roa (raw, json)
Hash identifier: 1pHBxuCEb7plkyZkuGQGeJfNuq5u5qbKPXy/yIx5HvA=
Subject key identifier: AD:94:28:13:28:F5:66:06:3B:28:10:62:E1:C4:6A:F9:8F:6C:A0:F4
Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial: 010D0C9F43285849218412C2025501BAB006A940
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/51ebef56-4abf-3ef7-bc55-1a8d74621254.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 64267
IP address blocks: 152.44.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:84:12:c2:02:55:01:ba:b0:06:a9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=8bb42987-3d17-48bd-a715-854f922241b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:5f:cc:c1:cc:0e:3c:a7:4e:15:89:de:4b:4b:
a2:46:a4:bc:62:d6:f6:d9:a0:a3:0a:c4:5a:19:89:
00:4e:02:be:5e:73:93:cb:ac:06:f9:5c:f2:15:49:
06:11:fb:04:c8:63:c2:85:b1:d9:62:5e:56:7e:68:
71:e2:ad:f5:65:1a:9e:ad:14:45:da:3b:4a:ef:bb:
ee:91:d8:9e:47:a2:4e:64:39:cf:5e:6b:e1:97:92:
73:9e:8f:99:33:88:9b:c4:7f:24:73:e5:6b:a6:bb:
f0:2b:b3:56:ed:bc:41:29:c6:f3:aa:0b:2e:a8:17:
42:23:25:6f:3e:9f:2b:69:11:41:7d:34:0d:36:e2:
44:2d:9d:c4:17:58:21:67:f3:bc:71:ba:eb:48:ec:
a5:c5:d1:e9:c3:f4:ae:31:40:51:08:e2:b6:96:1d:
57:53:98:d4:05:c6:06:84:d4:ff:49:ce:e7:b8:96:
43:d7:61:28:df:b2:cc:dd:f2:2e:3d:7d:94:ee:b7:
64:0e:83:d4:99:c2:4b:c8:61:7d:b8:23:ca:bd:30:
c3:ff:33:6c:63:96:c4:cb:60:58:37:68:a2:e6:b0:
c6:bd:58:4a:f2:07:ae:64:74:e4:45:1a:55:04:0f:
b1:7b:3c:0f:10:62:1c:60:bd:4f:96:0c:2e:21:6f:
05:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:94:28:13:28:F5:66:06:3B:28:10:62:E1:C4:6A:F9:8F:6C:A0:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/51ebef56-4abf-3ef7-bc55-1a8d74621254.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
X509v3 Authority Key Identifier:
keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
sbgp-ipAddrBlock: critical
IPv4:
152.44.101.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:a9:4e:c6:bd:75:41:4a:ef:91:54:61:35:af:80:23:d8:9e:
8a:4c:7c:63:6b:69:b7:ce:dc:19:61:85:57:ec:3d:05:dc:02:
de:99:34:84:3a:e6:dc:e0:0f:76:04:ff:0b:74:ea:cf:f0:6c:
f0:e7:de:a8:15:a7:37:cc:e3:eb:78:83:4c:b2:94:7e:03:80:
b0:e7:11:78:90:64:10:cc:3f:cd:be:04:8a:9e:96:fa:d8:98:
56:e3:49:42:e3:5d:b9:74:95:69:d3:5c:df:d1:b4:ba:d1:29:
57:9a:c3:6c:2e:b2:28:c8:c4:7d:ba:78:a0:2d:4c:fd:68:05:
10:ad:3e:6b:63:a9:2b:d1:83:7c:ea:46:f4:36:4b:a4:c5:59:
0a:88:fc:27:8e:9a:59:3a:31:84:13:65:c8:21:ca:f5:61:38:
86:59:70:9d:2f:bf:cc:0d:ec:51:51:fc:14:23:15:40:f3:42:
b2:33:6f:43:f4:68:f3:61:82:18:ca:b9:32:fa:32:2f:7b:0a:
28:ae:e5:0e:6c:a2:13:d1:67:fa:0a:b7:d0:08:c0:ea:38:36:
c4:29:fc:8d:d9:87:63:aa:04:42:b1:b2:f0:f8:15:31:5c:f8:
64:ec:3c:f2:45:97:74:a6:86:70:68:92:ee:01:64:e0:e9:53:
8b:3f:5d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:25:40 2025 by rpki-client