Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/886ebbde-d21d-3d71-8347-215aaf18d087.roa
File: 886ebbde-d21d-3d71-8347-215aaf18d087.roa (raw, json)
Hash identifier: 2WdoX7ak0HWPeDLc3wPDnxsCw7G7QBbFL40R7BFAfjU=
Subject key identifier: 73:1F:45:BC:C5:57:39:CB:3A:0B:1F:A8:26:D4:17:FF:9B:9F:79:76
Certificate issuer: /CN=b1898100-f40c-4002-b68a-8a97b548e69d
Certificate serial: 010D0C9F4328584957F4066F6315D35160B6B378
Authority key identifier: 89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/886ebbde-d21d-3d71-8347-215aaf18d087.roa
Signing time: Sat 29 Mar 2025 01:00:39 +0000
ROA not before: Sat 29 Mar 2025 01:00:39 +0000
ROA not after: Fri 27 Jun 2025 01:00:39 +0000
asID: 18526
IP address blocks: 158.51.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:57:f4:06:6f:63:15:d3:51:60:b6:b3:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1898100-f40c-4002-b68a-8a97b548e69d
Validity
Not Before: Mar 29 01:00:39 2025 GMT
Not After : Jun 27 01:00:39 2025 GMT
Subject: CN=0ebe53a0-a19e-4b1a-99e7-df2d826f4986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2c:fb:a2:d5:cd:f2:f4:0f:b6:ff:7a:77:c7:
28:97:d1:b1:f6:2d:12:e2:cd:88:82:d4:e5:a0:38:
bf:55:15:94:9e:79:3e:35:88:e9:c0:fe:7f:eb:a6:
f8:0b:9e:61:1d:f4:73:64:7f:d7:30:88:ab:88:ca:
72:8f:6a:81:00:e9:f0:15:c0:3f:ec:ae:c3:86:2c:
93:47:51:34:d2:75:4b:1a:5a:16:be:ec:d4:8b:b7:
20:79:cc:c5:b1:59:08:ba:e4:ba:f4:b5:09:94:2b:
13:11:63:26:c4:7a:f5:5b:46:fa:6b:95:70:11:37:
2f:ac:9a:c8:a2:81:c4:29:f7:2e:21:17:1f:5b:47:
1f:8f:a4:8c:f6:5b:cc:6c:4c:b6:3e:c4:87:3f:11:
a0:d3:a7:eb:43:cf:5e:9e:a7:d6:e3:e7:a4:b8:28:
e8:0d:c1:be:04:c1:3c:b4:46:38:df:af:89:e4:97:
27:23:ff:69:1d:4d:e2:5b:57:fc:de:a1:2e:37:cb:
66:ae:4b:33:1b:3c:7e:cc:9e:6c:48:8d:bf:91:94:
23:c3:df:8e:8a:b4:0a:d2:76:e8:59:c3:8c:7a:f8:
dc:39:09:44:ab:e6:2e:81:25:ed:91:b6:46:1c:4d:
d9:11:4d:c1:2a:95:cf:69:72:b0:f7:de:3d:02:3b:
a5:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:1F:45:BC:C5:57:39:CB:3A:0B:1F:A8:26:D4:17:FF:9B:9F:79:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/886ebbde-d21d-3d71-8347-215aaf18d087.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl
X509v3 Authority Key Identifier:
keyid:89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
sbgp-ipAddrBlock: critical
IPv4:
158.51.108.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:2a:66:f8:39:9f:47:e5:5e:d5:a0:6f:e3:a5:25:bb:63:29:
f8:5f:3a:4c:c4:ae:ec:7a:c0:66:67:40:af:db:01:20:3d:4c:
a8:c5:ea:b8:fc:3e:f4:dd:30:aa:7f:2b:e5:f9:0e:3a:72:f9:
65:ff:ee:39:cc:60:b7:1b:84:e5:ea:b3:8d:c6:df:4e:43:69:
77:85:42:a0:96:41:d7:ce:70:c0:09:21:01:2e:23:ef:0e:9d:
64:31:e1:cc:7e:42:b9:8c:e0:e5:89:b2:d1:f0:0e:88:53:0c:
c8:98:be:76:b7:fa:82:58:48:85:74:42:26:03:71:ed:ed:c4:
c4:83:95:69:ad:08:9a:ad:08:fa:53:88:1a:1b:bc:e0:7f:98:
ea:56:d2:57:83:ee:2b:c7:9b:75:a5:46:15:53:2c:dc:a1:a2:
7a:47:0a:11:9d:aa:10:91:1c:17:8d:bf:a5:6c:01:5b:0b:2e:
a5:cc:73:21:49:d4:6c:56:75:97:76:d1:64:de:aa:3f:07:18:
92:9f:6b:e5:f8:d8:96:48:6d:36:0f:05:f1:bf:5f:14:d4:53:
38:9a:3f:db:3f:39:2b:20:a7:9b:c1:21:52:f9:ea:b0:75:30:
9d:52:75:ba:81:d9:94:7b:2f:20:70:1b:2b:c7:58:fa:96:a4:
e1:9f:47:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:48:50 2025 by rpki-client