Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/0a6bd38b-5dd6-3f28-aac3-eeb508b69e51.roa
File: 0a6bd38b-5dd6-3f28-aac3-eeb508b69e51.roa (raw, json)
Hash identifier: CCNeKc0kpLUnDYBZ3MKu+6LRuJECH5tCQ5qHUl7eWIk=
Subject key identifier: 30:27:77:25:E8:6A:D5:9F:4E:2A:AE:3D:0B:02:D9:BE:7A:41:FF:D1
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F43285848BBBB77B496B3F4EAD5940C60
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/0a6bd38b-5dd6-3f28-aac3-eeb508b69e51.roa
Signing time: Sat 01 Feb 2025 02:00:39 +0000
ROA not before: Sat 01 Feb 2025 02:00:39 +0000
ROA not after: Fri 02 May 2025 01:00:39 +0000
asID: 852
IP address blocks: 154.5.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bb:bb:77:b4:96:b3:f4:ea:d5:94:0c:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Feb 1 02:00:39 2025 GMT
Not After : May 2 01:00:39 2025 GMT
Subject: CN=c6e46e02-d275-4c47-913a-3a185048f9b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:6b:f5:c5:c1:3d:61:cc:79:77:6f:2b:8b:8f:
45:33:5b:35:e1:fe:03:1b:3e:a9:c8:e6:bc:e5:95:
9f:b7:07:fb:af:a6:41:20:05:fe:2a:25:9d:54:cb:
6f:d1:81:d1:d7:d7:e0:1d:42:bb:42:ba:10:51:a5:
0c:49:41:86:e1:25:d8:52:b7:25:8d:99:d5:4d:ee:
b0:74:b5:96:61:31:3d:d6:b3:8d:f8:c3:f8:d9:7e:
64:03:c0:39:43:47:39:25:03:98:f8:00:cf:9f:98:
12:ba:02:fb:ed:34:6e:ea:5b:3e:f3:0a:c9:42:a3:
d2:49:b7:9a:c5:6c:99:c7:34:ce:44:e7:4e:68:7e:
28:99:78:82:29:52:3c:78:d6:87:ae:e4:9b:fd:1a:
95:a6:c5:7d:40:ae:af:df:f0:5f:a0:71:a3:8c:ed:
d1:92:15:c1:2e:54:43:c3:ce:27:92:8f:92:3c:6a:
6b:e2:67:06:b3:c1:bd:10:71:d8:48:2d:cd:f3:7b:
45:23:46:af:ef:00:f6:c7:9d:7b:a1:bc:a1:ea:7b:
76:62:39:02:c5:f5:e1:b9:09:e4:01:a0:7e:39:02:
ed:9a:b0:e8:1c:90:ae:3e:a7:53:2b:79:c2:dd:25:
b1:2e:14:dc:d0:3e:f4:6b:14:8e:d0:ce:23:05:7d:
d5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:27:77:25:E8:6A:D5:9F:4E:2A:AE:3D:0B:02:D9:BE:7A:41:FF:D1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/0a6bd38b-5dd6-3f28-aac3-eeb508b69e51.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
154.5.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:78:64:e6:fb:35:de:62:e5:a3:a4:11:02:15:18:50:9d:57:
26:90:3a:ba:44:73:3a:05:d7:d7:70:9a:47:17:a3:7a:81:87:
f7:96:4c:40:dc:5f:d1:90:23:3b:60:02:ad:91:54:42:5a:97:
f9:f2:4c:09:5a:cc:e6:2b:49:65:7c:f5:60:09:39:a5:c1:77:
2a:4f:82:e6:e6:59:6d:39:b2:13:5e:e7:e5:13:40:03:14:04:
c9:9f:99:2f:1b:84:f0:e6:8e:d3:c9:59:a0:8f:3f:0d:46:2d:
ce:4e:0f:7d:58:6e:40:d0:6d:22:e4:94:34:2e:21:12:a0:d9:
e9:8f:53:f3:67:cb:f3:80:87:62:66:46:13:1e:0d:c4:20:38:
22:6c:cb:83:69:85:2c:5d:50:5b:bd:f8:56:19:18:5e:65:c0:
fb:01:3a:db:fb:c7:13:02:c7:3a:d8:ce:f4:56:e1:dc:62:2d:
36:2f:6a:71:4e:a4:23:84:18:56:81:d1:2e:eb:7f:2f:ed:e0:
99:8b:db:5f:67:05:2a:97:2d:93:34:b2:a7:95:1a:4c:50:39:
ff:f6:48:12:a6:e4:27:eb:56:ad:ef:81:fb:f3:39:0b:f5:dd:
7f:22:85:e5:15:85:9f:75:a6:7e:bc:38:c9:c5:00:ae:2e:df:
bf:d0:a3:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:01:11 2025 by rpki-client