Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e41e8a51-a8eb-3a9b-837e-60419af6d2de.roa
File: e41e8a51-a8eb-3a9b-837e-60419af6d2de.roa (raw, json)
Hash identifier: lm/8lSAedjIQuo/eYCHEQfbfafnT0nWUc+tIQsnxebo=
Subject key identifier: BB:2A:D9:91:4F:68:90:11:80:D4:27:82:BB:16:F1:CF:25:E3:D2:AB
Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial: 010D0C9F4328584953C43F58DA83BCBE9D5A9400
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e41e8a51-a8eb-3a9b-837e-60419af6d2de.roa
Signing time: Thu 27 Mar 2025 13:00:52 +0000
ROA not before: Thu 27 Mar 2025 13:00:52 +0000
ROA not after: Wed 25 Jun 2025 13:00:52 +0000
asID: 54113
IP address blocks: 151.101.152.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:53:c4:3f:58:da:83:bc:be:9d:5a:94:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
Validity
Not Before: Mar 27 13:00:52 2025 GMT
Not After : Jun 25 13:00:52 2025 GMT
Subject: CN=6aa39459-365b-4357-a6a4-365b5fdb08bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:46:f8:56:84:ab:c1:e2:e5:64:02:e3:de:64:
50:5d:8e:aa:34:99:ff:87:46:f2:d8:5e:f4:29:86:
03:53:fe:ff:93:fd:34:77:63:cf:20:71:9d:cf:cc:
33:01:bc:bf:2b:95:be:e9:dc:da:cd:8e:3f:b4:73:
ad:e7:45:da:34:82:c1:a6:c7:d8:95:1d:ef:98:c0:
8b:22:38:ed:c2:36:c5:74:8b:b7:bf:9a:41:8a:8c:
a7:eb:32:7c:68:5e:84:ff:0e:e4:da:3c:1a:bd:83:
6f:bd:47:b9:90:ff:2f:2a:c4:d1:4b:4b:43:4b:97:
a9:5b:6c:be:e8:a8:82:3b:de:3d:6e:ce:dd:49:48:
64:ca:7d:79:2c:2c:df:12:53:7e:16:0b:09:74:2f:
df:a1:b1:82:e8:81:b0:1f:eb:08:7b:9e:e8:15:54:
a4:d4:df:31:db:4c:15:2b:cf:69:a5:b9:23:1b:93:
89:bc:4e:a6:0c:5e:3b:5c:72:8d:f3:24:bd:f0:50:
45:c3:7a:38:a5:43:48:08:5c:04:97:8c:dd:eb:36:
e0:f4:6c:a9:96:38:fd:44:a7:f8:63:4a:31:ea:ff:
b8:df:cb:4a:1f:75:c8:1f:07:62:89:2c:f5:6c:7d:
9d:dd:16:15:23:3d:19:8f:17:a3:96:56:cc:fe:76:
7a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:2A:D9:91:4F:68:90:11:80:D4:27:82:BB:16:F1:CF:25:E3:D2:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e41e8a51-a8eb-3a9b-837e-60419af6d2de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
X509v3 Authority Key Identifier:
keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
sbgp-ipAddrBlock: critical
IPv4:
151.101.152.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:c8:bd:83:c5:fc:d5:e1:58:31:70:87:6f:a4:91:95:b6:28:
80:d4:54:00:7a:cd:c6:66:3b:49:dc:3d:ab:0c:c9:8e:16:a9:
27:82:bf:36:b0:bf:21:65:66:e3:18:73:68:dc:dc:c0:b4:ea:
34:35:5b:dc:e7:34:a5:a2:08:58:fc:11:61:ee:42:73:4a:26:
ee:80:0f:a9:64:3c:a1:38:ef:87:63:af:b5:65:37:2c:cc:ac:
4b:61:b2:8c:fa:05:51:6d:36:57:ca:db:1a:22:51:b5:2b:85:
57:02:4f:d3:7f:60:74:23:96:9a:b4:95:fd:8a:90:9c:1b:00:
f4:80:86:71:12:65:ad:fe:14:3f:b9:38:08:c0:05:49:6f:6e:
fe:0e:20:eb:d6:19:2d:bb:da:0e:7a:ad:fd:9c:49:9c:c5:cd:
cd:e1:03:bb:e6:54:fe:e4:d3:36:08:bd:79:25:af:e1:a8:c7:
97:f2:f9:3b:5f:ee:01:b9:87:ea:66:6a:95:a4:ca:5d:bb:c9:
63:1b:64:12:ab:71:29:30:50:42:0c:13:d5:f3:a1:e8:74:2c:
fe:a1:88:1e:18:19:6b:75:59:3b:73:cc:0a:d4:7b:6c:60:1c:
6e:32:e2:b2:b3:6f:12:88:e0:5d:08:a6:f2:aa:92:62:55:c2:
43:69:43:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 02:49:42 2025 by rpki-client