Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/8ba705ac-13c1-316e-9514-c187d25271b5.roa
File: 8ba705ac-13c1-316e-9514-c187d25271b5.roa (raw, json)
Hash identifier: qJlKEYq5U5Df6L5fx5ZsCG/hPMEvWE2iC0LbmP64q3g=
Subject key identifier: 48:37:27:57:B7:19:81:FC:45:7C:0A:27:11:96:CE:06:A7:D2:43:76
Certificate issuer: /CN=0dbbf3fd-cf6e-4de7-8126-d6e41824d105
Certificate serial: 010D0C9F43285848AC60D1E3FA022AF32A84AB00
Authority key identifier: E8:A7:84:21:AC:67:CB:61:5B:12:37:63:55:E4:24:3A:7A:6C:92:09
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/8ba705ac-13c1-316e-9514-c187d25271b5.roa
Signing time: Sun 26 Jan 2025 14:00:52 +0000
ROA not before: Sun 26 Jan 2025 14:00:52 +0000
ROA not after: Sat 26 Apr 2025 13:00:52 +0000
asID: 16509
IP address blocks: 150.9.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ac:60:d1:e3:fa:02:2a:f3:2a:84:ab:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dbbf3fd-cf6e-4de7-8126-d6e41824d105
Validity
Not Before: Jan 26 14:00:52 2025 GMT
Not After : Apr 26 13:00:52 2025 GMT
Subject: CN=86b4ec86-3eac-4227-b90e-ac3f0eebb0b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:8b:89:7a:ab:a9:c5:08:6a:36:80:5c:71:d0:
74:d2:8d:5d:00:74:1b:0b:03:de:15:03:de:57:61:
d0:e8:1c:96:24:ca:e5:05:86:fc:4e:48:ce:7d:94:
df:df:31:d1:4d:1e:cc:c3:27:4b:33:8c:7f:4e:c2:
3f:ed:72:7c:27:30:0f:c8:9a:6b:83:08:92:e7:5a:
59:f0:86:45:02:81:c9:69:f6:26:74:7f:13:62:2a:
9f:19:2c:d7:7f:1f:f1:15:2e:e6:18:9f:47:9b:41:
de:cb:8f:85:b0:c9:0e:5a:4b:14:2c:f4:32:8e:00:
57:96:bf:9f:84:ac:fc:29:c1:c7:d5:f5:61:1f:5d:
30:f9:ae:3a:ef:44:50:3f:88:1d:6c:27:9e:00:19:
90:2f:6a:ed:94:02:2d:62:79:7f:51:f6:c3:95:85:
87:85:e6:a7:5a:62:29:1e:b7:d2:24:cd:f1:6e:84:
b4:2a:9f:c5:17:89:9c:62:23:81:b0:32:af:84:b3:
01:b0:66:b8:e0:d5:c6:fe:28:57:15:eb:79:fa:b7:
54:47:20:dd:b8:de:42:61:e1:5c:a1:37:b6:53:cc:
9f:8b:f8:96:10:12:56:13:89:54:27:11:ca:22:09:
87:75:df:53:0d:41:5b:a1:b5:43:a9:e5:29:c7:6a:
63:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:37:27:57:B7:19:81:FC:45:7C:0A:27:11:96:CE:06:A7:D2:43:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/8ba705ac-13c1-316e-9514-c187d25271b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.crl
X509v3 Authority Key Identifier:
keyid:E8:A7:84:21:AC:67:CB:61:5B:12:37:63:55:E4:24:3A:7A:6C:92:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.cer
sbgp-ipAddrBlock: critical
IPv4:
150.9.217.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:15:f8:75:4a:46:e1:ea:c4:50:85:3b:e5:4f:ac:ac:1c:2f:
d3:da:38:0f:f1:4d:ed:dc:83:11:5a:80:63:78:19:e9:92:94:
9e:68:dc:58:7c:2f:d8:48:23:85:30:8a:86:fa:25:a9:89:3c:
87:73:7b:f0:a7:f9:ac:45:99:05:56:dc:55:47:cc:15:b0:a9:
af:d3:eb:4e:33:16:bf:0f:87:6c:bf:a9:0f:c0:e6:0a:ca:60:
29:0a:30:b4:73:f6:64:ad:ba:9e:b8:67:80:44:5f:c5:5e:b9:
38:ed:6c:39:05:88:4c:28:c0:ba:8f:7e:aa:00:09:89:22:c3:
15:aa:a8:05:54:53:2f:e8:36:de:e6:31:3a:36:28:d2:a9:97:
4d:3f:23:7d:3e:d7:65:c3:b0:bd:17:34:fb:68:a0:ad:f7:29:
54:b6:b0:1d:3f:94:88:29:60:3e:fe:3c:d5:f3:66:10:32:18:
d7:ba:02:9e:7c:96:30:b2:9e:79:f6:1e:1c:92:de:3e:6d:b6:
e1:43:c5:3d:34:93:6b:4d:23:e5:bf:46:26:64:58:8c:6f:0f:
71:ca:52:97:6a:90:c4:d8:e0:fd:01:d2:20:72:ce:ca:b4:9e:
86:45:c8:35:87:6a:ab:a2:8a:21:59:a5:1c:98:b4:3a:87:d4:
df:93:40:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:29:55 2025 by rpki-client