Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/3732cd29-d59f-37c4-897e-eb3fd1528fe8.roa
File: 3732cd29-d59f-37c4-897e-eb3fd1528fe8.roa (raw, json)
Hash identifier: bsYFAPBdUZXwKV1vfj8DPv+b7j/cY6EGxBIWd8VQg6Y=
Subject key identifier: B3:B5:B5:91:12:17:BB:B7:6F:12:D7:75:D5:97:89:B7:77:3E:8F:2E
Certificate issuer: /CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6
Certificate serial: 010D0C9F4328584902EC04130E89EE5B3CD62200
Authority key identifier: 24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/3732cd29-d59f-37c4-897e-eb3fd1528fe8.roa
Signing time: Wed 26 Feb 2025 14:00:51 +0000
ROA not before: Wed 26 Feb 2025 14:00:51 +0000
ROA not after: Tue 27 May 2025 13:00:51 +0000
asID: 14618
IP address blocks: 155.63.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:02:ec:04:13:0e:89:ee:5b:3c:d6:22:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6
Validity
Not Before: Feb 26 14:00:51 2025 GMT
Not After : May 27 13:00:51 2025 GMT
Subject: CN=b39a2dc9-bed5-49c5-96ab-45185982707e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:db:fa:f5:20:e4:cd:07:a5:d7:e8:8b:a8:8f:
5b:6a:f3:a3:90:6e:87:46:cf:8c:4e:e5:b0:97:c1:
11:a6:3e:9e:6e:2a:e6:9e:79:09:89:70:2b:60:ea:
fd:aa:ea:ec:cf:fd:55:03:9b:aa:56:f7:17:5a:65:
80:e7:c2:32:06:d0:93:f6:e2:8d:93:3d:ba:85:28:
a0:a7:27:3b:c2:16:22:f4:2c:bc:f2:96:a6:90:41:
5b:47:e6:ca:11:f6:88:9b:42:0e:c5:5f:19:eb:75:
96:7d:12:28:1b:7f:45:86:bb:c4:99:05:ee:dc:a7:
41:2b:a9:7d:9f:32:96:3e:39:f8:57:cd:db:ed:95:
d9:b2:d2:7e:62:92:66:41:5a:df:63:63:0e:e4:13:
9d:d8:f9:06:ba:be:f1:b4:46:e5:fc:f9:fb:2a:26:
ab:5c:d1:79:a7:22:8c:0a:6c:95:a9:bb:84:84:8a:
d7:79:97:98:9f:e0:f1:a3:cc:2b:0b:fd:73:00:b8:
f1:24:62:2f:29:2a:a3:6c:fc:d3:48:73:c5:35:b5:
af:95:fa:1d:98:23:78:79:02:75:5d:b5:1d:28:af:
5f:24:0b:57:59:23:6d:7c:6a:07:00:1f:47:74:0c:
39:9c:68:7b:06:7c:8e:d9:c4:a6:24:4e:86:6a:9c:
15:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:B5:B5:91:12:17:BB:B7:6F:12:D7:75:D5:97:89:B7:77:3E:8F:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/3732cd29-d59f-37c4-897e-eb3fd1528fe8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl
X509v3 Authority Key Identifier:
keyid:24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer
sbgp-ipAddrBlock: critical
IPv4:
155.63.220.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:76:6a:92:b2:c1:ff:c9:10:35:cc:1b:1e:ae:ef:df:c4:01:
74:30:36:4c:c9:21:16:f9:be:24:2d:95:84:51:26:2e:fc:17:
ea:ec:a5:64:b6:34:09:53:b8:15:72:8d:2b:f9:e5:ab:cb:33:
0f:8a:9e:13:b8:e8:00:95:4b:40:3f:2b:c7:e2:de:01:aa:77:
f3:94:9e:19:d3:0e:46:0c:80:0a:b7:a8:4c:5d:cb:90:27:0c:
ba:bb:37:31:27:12:0b:7d:05:ef:d1:4c:58:9e:f6:25:b5:90:
df:3b:2b:f7:8d:26:69:68:a9:77:76:18:d7:09:5e:51:3d:b7:
72:51:f9:4a:f8:cd:b3:d6:80:e1:69:87:79:29:a3:d7:01:1c:
2f:48:36:6f:2b:fb:3f:be:df:44:5a:4a:07:30:24:b4:c8:e8:
fd:d0:1e:f2:05:fa:dc:3c:8f:e7:b1:08:28:a3:11:6f:c8:43:
fb:1d:45:ca:39:c7:d6:3e:f4:de:c8:63:5d:a3:d5:e2:3e:d8:
2a:a7:2f:a5:36:3b:79:a4:2d:62:8e:2d:98:ca:86:83:05:e6:
37:36:ec:dd:ca:0d:f4:7c:c1:80:dc:f0:45:09:a2:51:62:0e:
38:ab:e7:a0:a7:be:da:f5:8e:2b:a1:1e:a9:c0:4a:4f:1b:b7:
a2:38:bd:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:30:11 2025 by rpki-client