Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d/0cb34fe9-1cce-3cca-bc49-f58f1b2f3f70.roa
File: 0cb34fe9-1cce-3cca-bc49-f58f1b2f3f70.roa (raw, json)
Hash identifier: sUZRCDJDy4VvYdxaAgouVs//gSfPZ5eEuywJlbVE+ZA=
Subject key identifier: 31:8A:C2:63:25:D5:F7:CA:41:97:4F:13:28:A2:67:82:58:0A:C6:15
Certificate issuer: /CN=3767dced-4e89-4965-b8de-50e421201b4d
Certificate serial: 010D0C9F43285848BE862F9EE09FEED319EBDA40
Authority key identifier: 49:2A:5A:7A:A5:AC:FD:22:58:F5:E4:46:90:9D:05:72:ED:A6:80:C6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d/0cb34fe9-1cce-3cca-bc49-f58f1b2f3f70.roa
Signing time: Sun 02 Feb 2025 02:00:39 +0000
ROA not before: Sun 02 Feb 2025 02:00:39 +0000
ROA not after: Sat 03 May 2025 01:00:39 +0000
asID: 33189
IP address blocks: 151.159.220.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:be:86:2f:9e:e0:9f:ee:d3:19:eb:da:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3767dced-4e89-4965-b8de-50e421201b4d
Validity
Not Before: Feb 2 02:00:39 2025 GMT
Not After : May 3 01:00:39 2025 GMT
Subject: CN=bf32feb9-46fb-4f1f-ba6a-cd17c45e85a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c6:8e:65:87:55:48:65:41:d9:dd:7d:79:f2:
ef:c6:26:e6:7d:5b:b4:8e:6e:d4:ce:6f:e0:13:e0:
1c:92:9f:8a:4f:16:14:b6:6b:28:72:40:d0:d7:5c:
51:f3:40:11:bd:3d:3f:85:aa:31:13:49:3c:aa:86:
83:2b:48:9e:1b:d5:17:9f:39:df:35:2e:fa:45:a0:
cd:39:d7:95:0a:9e:8f:fe:1d:2f:6a:fe:7c:ac:34:
9a:5c:38:56:dd:92:94:41:66:ec:3d:6f:e4:75:ca:
fa:dd:c0:47:7f:3d:78:81:35:a2:32:8e:fc:dd:5c:
95:05:4e:78:a4:dc:99:3f:41:62:a0:be:ca:bc:2b:
b6:50:48:c0:b6:10:6b:e5:6d:ed:91:33:7b:4d:a0:
76:b3:09:c2:02:e4:5c:da:9e:e5:a6:f6:ec:f8:e5:
89:58:9e:fd:2e:e9:fb:1a:a4:45:26:22:96:ff:3c:
4d:b7:8d:21:6a:c7:e0:17:ad:bc:04:cd:28:3e:6b:
b5:2f:71:91:15:61:e0:14:d2:87:91:47:d8:42:35:
4a:a0:b8:59:9c:31:f4:c3:3d:56:05:4d:d0:9b:db:
fb:aa:2d:01:c9:b9:b0:a5:f6:73:00:cd:84:81:8e:
45:ed:74:37:2d:b0:7d:ab:ba:c6:1e:02:24:20:9e:
f7:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:8A:C2:63:25:D5:F7:CA:41:97:4F:13:28:A2:67:82:58:0A:C6:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d/0cb34fe9-1cce-3cca-bc49-f58f1b2f3f70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d/3767dced-4e89-4965-b8de-50e421201b4d.crl
X509v3 Authority Key Identifier:
keyid:49:2A:5A:7A:A5:AC:FD:22:58:F5:E4:46:90:9D:05:72:ED:A6:80:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d.cer
sbgp-ipAddrBlock: critical
IPv4:
151.159.220.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:06:c2:a4:ec:11:b8:39:cc:df:8f:4f:83:4e:97:3a:93:2b:
74:16:42:b5:bf:7b:4c:39:b0:93:5b:9f:4f:26:fa:7c:02:bd:
65:70:ef:a7:b7:e7:8f:45:f1:f6:9e:34:36:24:e7:16:c0:ad:
a7:f3:38:be:f3:fa:32:92:70:1d:05:a1:78:04:60:90:fb:ca:
b0:1a:30:68:76:f4:4d:ad:56:ae:52:db:a8:a6:86:a8:d7:6a:
2e:6f:cb:2c:5d:0d:d5:1c:e4:e9:c8:28:a8:52:94:3c:a2:4e:
28:7a:de:6d:0d:50:86:76:9e:ac:a3:05:e1:28:ea:f7:fe:20:
ac:46:02:ed:3b:f0:c6:a1:34:4f:1e:68:58:4d:23:c5:ae:88:
74:fe:3b:d2:a4:31:5b:f8:3b:aa:d2:1b:ac:ca:f3:14:ed:46:
c7:7f:e0:c2:84:91:fb:19:82:53:53:08:3f:66:d8:ef:75:44:
32:5e:b2:a7:94:0d:97:a9:3f:ce:d9:c8:cc:44:d3:49:4a:26:
93:5a:b1:b9:9d:b2:56:13:c3:6f:d1:7f:90:c5:6e:88:7c:23:
57:14:60:c1:09:2f:93:a5:63:a9:7a:96:3c:97:31:6b:05:b0:
f4:9d:b6:39:61:a0:64:d2:a3:1c:e0:7f:1f:a4:d1:79:a2:43:
b4:f3:ce:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:10:10 2025 by rpki-client