Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/2cc04503-14ed-35b4-9a02-dc0cc4bb99a4.roa
File: 2cc04503-14ed-35b4-9a02-dc0cc4bb99a4.roa (raw, json)
Hash identifier: 3jwyCwvE0EWmHLtdjo9gUdS282lOL/WwwPQbG6PJ0Cw=
Subject key identifier: 54:95:35:FF:F1:0D:99:5B:81:21:9C:55:4B:3D:90:98:0B:18:CC:64
Certificate issuer: /CN=c43335db-c55b-443e-b20c-5c74e1c256c9
Certificate serial: 010D0C9F43285848313237A0C274D3A539BCC2C0
Authority key identifier: C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/2cc04503-14ed-35b4-9a02-dc0cc4bb99a4.roa
Signing time: Fri 13 Dec 2024 11:02:41 +0000
ROA not before: Fri 13 Dec 2024 11:02:41 +0000
ROA not after: Thu 13 Mar 2025 10:02:41 +0000
asID: 54535
IP address blocks: 156.37.196.0/24 maxlen: 24
156.37.197.0/24 maxlen: 24
156.37.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:31:32:37:a0:c2:74:d3:a5:39:bc:c2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c43335db-c55b-443e-b20c-5c74e1c256c9
Validity
Not Before: Dec 13 11:02:41 2024 GMT
Not After : Mar 13 10:02:41 2025 GMT
Subject: CN=3095ab75-d741-4d70-9988-8c36f5da37b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:f3:f3:b4:02:66:9c:97:f1:1d:e9:33:10:e9:
86:f7:d3:2b:66:40:d6:38:03:12:d7:86:e2:f1:b1:
43:44:73:2c:98:f1:c7:a5:1c:e1:6d:af:15:a8:21:
5e:50:b9:2c:e6:fa:c7:1d:0f:56:56:d8:96:77:ad:
dd:6c:3a:72:de:9e:18:a3:b3:fd:70:a7:67:d8:0a:
85:40:1d:2b:fb:ca:e6:f4:22:c1:0e:15:7e:b3:16:
e7:ba:9e:03:75:30:25:e4:82:6c:f7:89:84:a1:af:
b7:bc:3a:2e:d2:08:88:f3:68:39:03:fc:b5:f9:01:
1b:5e:c0:42:26:a6:22:f0:f6:e1:0a:b0:59:77:81:
de:fc:3c:1e:25:61:cd:98:f4:c3:7f:18:df:f6:45:
3e:ec:10:31:77:b7:ec:7d:d3:47:0f:eb:b4:06:7c:
ed:88:87:b4:c7:65:17:18:be:c0:80:9f:a8:27:b6:
c6:06:65:a1:f3:4a:0d:6e:ac:50:23:3e:47:4b:1e:
25:06:db:d6:ac:ed:1b:bd:67:17:d5:25:dc:f2:2d:
9a:ee:53:8c:87:9d:7c:b8:46:2f:2c:16:fc:d3:60:
f4:fb:09:ba:8c:92:02:f7:bc:57:92:b2:bb:03:09:
92:9c:a9:f2:69:6a:59:5e:83:d6:8b:69:d2:bf:66:
fb:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:95:35:FF:F1:0D:99:5B:81:21:9C:55:4B:3D:90:98:0B:18:CC:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/2cc04503-14ed-35b4-9a02-dc0cc4bb99a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl
X509v3 Authority Key Identifier:
keyid:C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer
sbgp-ipAddrBlock: critical
IPv4:
156.37.196.0-156.37.198.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:27:0d:66:fc:c6:99:32:5c:cf:65:36:e6:5d:2b:79:15:ba:
30:b6:fc:56:3e:f6:d9:fd:4f:19:d4:4d:b9:fb:0a:8b:fd:f5:
2e:6c:59:8d:05:be:3b:65:e7:b2:65:f0:07:aa:07:0a:1e:97:
61:f5:01:99:74:49:f9:d5:57:9a:61:78:87:a6:bf:f1:82:92:
a0:63:5d:67:79:a3:89:e0:cd:0f:0b:1c:a2:1b:5d:16:69:3d:
07:f6:3e:49:14:6d:a5:b8:bf:92:51:1f:48:67:e2:1b:f4:d1:
90:f1:dc:89:0b:db:48:05:c4:a6:aa:c6:dc:be:0a:59:b7:eb:
7a:82:de:32:f2:6f:67:1c:31:c0:68:c8:dc:9c:f9:30:4a:5b:
b4:06:4a:f2:4a:8f:e5:f1:b1:b9:88:88:42:b8:ef:aa:fc:76:
5e:7a:97:58:12:45:93:3a:d5:33:69:e1:ae:b2:1d:46:b4:03:
40:47:d9:1c:04:6b:2f:73:8c:fa:4e:fa:c3:84:c4:87:16:8f:
dd:af:f3:83:c7:58:89:24:75:ea:1b:fd:e7:b9:48:dc:f0:e1:
e2:70:5e:16:ac:ae:f4:fa:cf:03:c9:d6:99:f3:4f:75:91:a3:
fa:8f:b8:db:bd:82:66:81:13:c3:42:00:40:27:d3:41:de:13:
50:d1:8d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:43:28 2025 by rpki-client