Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/f3449d09-d701-35da-bb14-a8ab89190e72.roa
File: f3449d09-d701-35da-bb14-a8ab89190e72.roa (raw, json)
Hash identifier: /DGlS+EWeyDr3i7KG4j5noCojxQcyxYk5m7q5A7OAfg=
Subject key identifier: D3:F1:40:C5:29:F9:21:9A:87:21:D3:BB:27:F0:51:D9:23:4D:C1:10
Certificate issuer: /CN=9050423a-b7ae-4879-a880-ea3be6e193a8
Certificate serial: 010D0C9F432858481C9A8A444B68C76AF53496B0
Authority key identifier: E7:C5:42:5E:A0:DF:33:80:77:AB:80:B8:30:18:49:53:42:A5:B6:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/f3449d09-d701-35da-bb14-a8ab89190e72.roa
Signing time: Fri 06 Dec 2024 02:00:39 +0000
ROA not before: Fri 06 Dec 2024 02:00:39 +0000
ROA not after: Thu 06 Mar 2025 02:00:39 +0000
asID: 16509
IP address blocks: 168.151.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1c:9a:8a:44:4b:68:c7:6a:f5:34:96:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9050423a-b7ae-4879-a880-ea3be6e193a8
Validity
Not Before: Dec 6 02:00:39 2024 GMT
Not After : Mar 6 02:00:39 2025 GMT
Subject: CN=4b5dd523-2101-4bb6-bad1-297bbd801d95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:63:37:90:6a:44:87:4d:26:2e:da:0a:f0:e4:
d5:df:17:4e:71:39:b7:b4:6a:fd:d1:e1:bd:11:02:
9f:74:e4:08:72:95:42:56:d9:ff:52:d4:9a:21:43:
62:68:98:f1:49:ce:18:d6:cb:4d:59:04:09:c4:ec:
03:1f:80:ad:55:a2:c4:5f:df:12:fa:ab:46:b4:61:
89:5b:85:02:c8:68:7e:fb:51:8c:ae:43:46:20:9e:
57:65:3f:46:96:eb:8c:c0:2d:48:75:64:dd:3d:53:
23:bb:1f:dc:ef:06:52:0f:8b:88:29:cb:aa:13:95:
73:f3:21:66:27:c9:1f:5a:19:9c:78:e9:7a:cc:b5:
33:3c:d6:0e:58:3c:34:e1:0f:15:a9:25:4e:1b:6a:
92:b5:10:26:d1:81:02:20:2d:ad:b3:93:7e:8e:2f:
0c:e6:96:d4:c5:5b:04:9d:56:f1:48:5c:8f:dc:5b:
ad:0f:e1:ed:8d:45:3d:c2:f7:65:86:57:14:94:f5:
5c:0b:5e:0d:63:ea:6b:41:89:05:1a:64:ee:2c:f3:
4b:b8:b2:88:70:02:bc:bf:06:7c:da:62:af:c0:fd:
cf:86:ac:a3:46:c9:82:fd:41:47:66:5d:9a:d8:1f:
04:65:87:e8:10:10:36:45:4d:02:fc:e4:f8:15:a0:
a0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:F1:40:C5:29:F9:21:9A:87:21:D3:BB:27:F0:51:D9:23:4D:C1:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/f3449d09-d701-35da-bb14-a8ab89190e72.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/9050423a-b7ae-4879-a880-ea3be6e193a8.crl
X509v3 Authority Key Identifier:
keyid:E7:C5:42:5E:A0:DF:33:80:77:AB:80:B8:30:18:49:53:42:A5:B6:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8.cer
sbgp-ipAddrBlock: critical
IPv4:
168.151.10.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:2d:66:3d:fd:9d:22:7e:70:47:eb:31:5d:44:87:c7:e3:33:
13:95:05:f8:88:5e:a8:d0:f2:26:b9:77:b6:4c:4a:7a:bd:45:
b0:00:0c:02:42:65:4b:8d:f1:7e:fc:67:ed:a2:d1:0d:cf:68:
dd:34:89:51:03:83:2d:88:3e:0d:07:ad:63:2c:d8:05:48:b9:
ec:8e:4b:65:6f:5a:87:df:d2:ef:9e:d0:0a:6c:12:1c:b4:47:
cb:6c:9c:41:b2:fe:1c:3f:dd:69:70:2c:2f:65:03:ca:c3:4f:
81:41:82:aa:5b:b6:5d:e1:c1:ad:7c:da:55:3c:c8:d4:66:04:
52:50:28:aa:9c:bf:a0:73:5d:fc:17:3c:78:23:f7:54:df:2b:
b9:3a:59:33:fb:73:3e:b4:59:ec:88:6e:af:30:ff:5e:d5:c4:
5b:f7:1f:5d:b9:44:11:38:2c:18:da:e1:5c:f5:3d:d1:44:86:
c5:f4:bb:07:05:d1:ca:b6:9b:3b:f6:73:fa:2d:68:83:70:5c:
fe:4b:b0:51:94:a5:4f:bd:23:6d:c6:1c:8b:9c:b0:82:a3:31:
73:7a:47:be:ce:75:9f:ff:b9:12:a3:36:e8:44:0a:32:fd:37:
15:57:13:3b:a3:fe:01:85:c8:c1:cb:39:e8:c6:1d:68:b4:1d:
b4:c3:f2:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:04:26 2025 by rpki-client