Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119/09c19d50-c067-3e65-81fb-cf90c34ff493.roa
File: 09c19d50-c067-3e65-81fb-cf90c34ff493.roa (raw, json)
Hash identifier: ogR4DfvtCedqVJStmfsNcKcF32vnWg/uXljTuVbUjJY=
Subject key identifier: 3F:3F:FF:39:E8:B9:D6:33:A7:C4:FB:8D:80:FB:AF:32:DB:E9:3A:62
Certificate issuer: /CN=a29e3674-acc6-4858-b0f1-7a2daaaed119
Certificate serial: 010D0C9F4328584949FE9744E9B7B3FCB27A6600
Authority key identifier: 9A:5D:6D:33:5A:76:3A:7A:D8:7D:3C:A2:27:F9:F9:0C:8D:6C:3B:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119/09c19d50-c067-3e65-81fb-cf90c34ff493.roa
Signing time: Mon 24 Mar 2025 01:00:38 +0000
ROA not before: Mon 24 Mar 2025 01:00:38 +0000
ROA not after: Sun 22 Jun 2025 01:00:38 +0000
asID: 21693
IP address blocks: 151.215.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:49:fe:97:44:e9:b7:b3:fc:b2:7a:66:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a29e3674-acc6-4858-b0f1-7a2daaaed119
Validity
Not Before: Mar 24 01:00:38 2025 GMT
Not After : Jun 22 01:00:38 2025 GMT
Subject: CN=5d101a70-eb14-4685-aa56-71052ba9e7d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:2e:8d:3e:59:78:ce:5c:c3:4a:f0:98:9a:fa:
b0:02:4e:df:16:27:3d:a1:ca:71:b2:95:76:1e:80:
d6:37:89:ca:a3:61:a0:a9:10:a0:d0:3f:7a:c0:5f:
01:2a:24:f1:32:cc:1a:f7:ff:93:f6:5b:d2:17:5c:
82:1d:7a:d5:9d:03:f1:76:a0:07:3e:cc:b6:9d:aa:
08:9a:a5:98:e9:e9:95:7f:f5:fa:9b:f0:f6:06:06:
2b:9a:5f:ee:7c:ec:c1:ec:91:d0:c9:28:d5:9d:c1:
18:65:ed:2b:17:0f:31:15:44:36:3b:37:ec:54:49:
10:d2:01:80:27:ff:4a:10:5d:c1:2c:85:e5:90:55:
67:68:bd:e6:0f:6e:8e:61:89:28:ab:17:df:6e:82:
08:0f:9c:36:70:b6:8b:04:1b:14:e4:f5:da:71:bf:
e4:ee:17:a6:dd:3f:bc:0a:8b:da:0e:a6:15:d8:55:
be:08:af:94:e9:57:c5:fe:52:19:25:d6:f4:13:b6:
8e:98:3e:ff:9d:5a:d9:b7:b3:5b:66:cd:c6:09:84:
e6:d4:28:c4:08:d0:47:17:06:88:3c:26:f6:7b:3b:
94:b9:06:a9:22:ca:30:62:39:6e:70:ee:92:73:2a:
e7:ba:35:c4:55:e4:51:7f:9f:a0:76:ac:59:82:7f:
31:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:3F:FF:39:E8:B9:D6:33:A7:C4:FB:8D:80:FB:AF:32:DB:E9:3A:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119/09c19d50-c067-3e65-81fb-cf90c34ff493.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119/a29e3674-acc6-4858-b0f1-7a2daaaed119.crl
X509v3 Authority Key Identifier:
keyid:9A:5D:6D:33:5A:76:3A:7A:D8:7D:3C:A2:27:F9:F9:0C:8D:6C:3B:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119.cer
sbgp-ipAddrBlock: critical
IPv4:
151.215.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:ce:a6:16:72:13:5c:d9:0d:e7:49:6b:7b:65:d0:33:b6:fd:
3d:cc:e9:08:86:ea:a1:98:2e:f2:54:75:65:77:ff:97:af:be:
d1:2a:92:7a:78:32:27:d7:46:58:b7:23:5e:d9:e7:fc:5a:74:
c9:5d:3d:b5:63:db:cd:e7:ad:1f:03:d8:f8:06:de:7a:f4:49:
ca:23:e7:a7:11:35:ec:c0:44:c5:87:2b:ad:51:1e:99:fd:a0:
e9:84:7e:dc:67:27:24:28:78:f8:6f:5a:6c:cd:4b:bc:7c:4d:
ce:5c:bb:9a:cd:d2:5d:21:9e:ee:9f:43:56:19:17:6f:c0:fe:
36:3c:ad:4f:4d:76:28:50:b3:06:f3:07:e9:e0:63:de:af:44:
0a:b4:44:70:b4:67:02:d6:8a:92:61:59:e5:8f:b6:76:2f:6b:
3a:2a:af:ab:46:59:6c:e3:9b:bd:81:62:2b:0e:8c:c1:33:35:
dd:2e:f2:2e:db:ce:56:e6:af:a6:72:71:0c:50:e9:81:2d:6c:
33:8f:ee:15:98:87:4e:00:a9:46:60:2d:33:99:eb:94:35:90:
32:f3:ff:76:87:74:90:12:d6:e2:8e:b7:1a:ff:60:26:7f:36:
e6:40:7b:78:02:78:4e:2f:6b:d0:78:5a:b0:70:0c:0e:d6:e6:
a9:b2:2c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:01:36 2025 by rpki-client