Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/5b3df956-3ed4-3b6a-92c7-21d17a0e2142.roa
File: 5b3df956-3ed4-3b6a-92c7-21d17a0e2142.roa (raw, json)
Hash identifier: rb9FAoApIXumN3U3fvYLgEsNHSHOoDQN4nmY3aO3kQ4=
Subject key identifier: 0E:CC:80:6A:4E:5A:90:6E:47:E4:43:27:BC:AF:43:45:BF:83:0C:21
Certificate issuer: /CN=c43335db-c55b-443e-b20c-5c74e1c256c9
Certificate serial: 010D0C9F43285848313237CDC58787445A56AF80
Authority key identifier: C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/5b3df956-3ed4-3b6a-92c7-21d17a0e2142.roa
Signing time: Fri 13 Dec 2024 11:02:41 +0000
ROA not before: Fri 13 Dec 2024 11:02:41 +0000
ROA not after: Thu 13 Mar 2025 10:02:41 +0000
asID: 54535
IP address blocks: 156.53.198.0/24 maxlen: 24
156.53.199.0/24 maxlen: 24
156.53.224.0/23 maxlen: 23
156.53.240.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:31:32:37:cd:c5:87:87:44:5a:56:af:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c43335db-c55b-443e-b20c-5c74e1c256c9
Validity
Not Before: Dec 13 11:02:41 2024 GMT
Not After : Mar 13 10:02:41 2025 GMT
Subject: CN=23e26380-209a-42c9-a7af-ccdf6da3d5ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:19:be:a6:0f:a5:e8:5d:31:b3:f7:5b:68:ba:
c9:32:be:b5:09:fc:15:55:41:81:2c:43:8f:0f:dc:
e7:5d:0d:12:7b:eb:aa:90:06:41:dc:e8:6e:0a:1e:
68:3e:4a:b7:ad:b4:0d:d8:97:1a:bc:01:74:bf:06:
9a:4a:8a:9d:54:ac:b0:1f:61:0d:d1:95:48:e4:b8:
f6:f5:ee:70:89:35:c4:04:2e:dd:9a:e9:27:37:49:
87:a9:43:46:ef:7c:cb:aa:8f:b6:7a:c1:73:45:89:
c5:df:83:c3:b2:a5:63:2b:38:ab:a6:4c:45:22:90:
5c:01:3b:7e:eb:11:6c:16:c9:2c:42:03:28:46:c4:
0c:89:94:74:b6:be:58:d6:c2:95:8e:f6:ae:c7:c3:
9e:e0:cc:61:c7:c6:29:26:b4:04:2e:39:df:44:2b:
90:5d:8f:f4:d2:ce:79:a1:9d:0f:65:48:ea:f5:d0:
46:b1:55:96:4f:d7:79:71:39:93:6b:bc:22:1e:1f:
6d:02:ea:29:30:4b:22:f6:3b:8b:ef:40:c9:fe:75:
06:d3:3c:ba:ba:50:90:0e:5b:f5:1c:fb:ea:04:c5:
29:82:24:01:3d:a0:4c:56:a5:ea:e1:7d:17:a7:7d:
06:f1:33:26:ea:98:b9:18:02:cc:5d:1c:ad:57:12:
ba:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:CC:80:6A:4E:5A:90:6E:47:E4:43:27:BC:AF:43:45:BF:83:0C:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/5b3df956-3ed4-3b6a-92c7-21d17a0e2142.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl
X509v3 Authority Key Identifier:
keyid:C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer
sbgp-ipAddrBlock: critical
IPv4:
156.53.198.0/23
156.53.224.0/23
156.53.240.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:cb:9b:40:6c:bd:27:de:cb:25:ab:86:d6:e1:41:c5:39:fb:
dc:a5:23:7d:e2:32:dd:f7:65:99:61:3b:6b:0d:ce:12:86:56:
be:1d:08:da:75:ad:c5:66:1d:5a:72:87:86:0f:1b:f0:36:0d:
98:21:06:39:f1:7d:eb:92:79:fc:6d:f0:86:66:32:de:1e:4e:
23:2f:42:72:ca:cb:d7:d4:55:9d:f8:44:63:10:e9:46:e3:52:
3a:10:96:01:11:07:ca:ff:3b:5c:d6:15:fc:a6:78:d2:2b:8d:
4b:29:b9:c7:a6:bf:cb:b4:13:2c:92:0b:90:70:57:85:9d:d3:
e5:f3:66:af:3e:5c:71:1a:86:02:75:dc:6d:9f:3d:9c:0d:62:
3b:e2:f4:6f:d9:d3:4f:98:7d:41:19:47:22:0d:a0:f7:f3:31:
d4:f9:f5:42:49:81:f1:6d:4a:b9:22:60:12:34:79:b9:1a:02:
f2:23:79:04:5c:4e:16:f0:e6:03:82:cc:8c:3a:8c:42:ad:7b:
a3:68:63:81:86:18:54:e1:0c:0b:bf:ae:dd:2f:da:9f:e8:f6:
6c:a8:59:28:6e:51:d0:7c:07:c3:e1:94:c2:fb:9b:f7:25:79:
0f:dc:e2:31:c7:36:e9:38:9f:e1:42:3d:25:a6:62:43:c7:ad:
96:63:08:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:34:16 2025 by rpki-client