Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/0e5a622b-034c-3a3b-816e-0f51519ea53e.roa
File: 0e5a622b-034c-3a3b-816e-0f51519ea53e.roa (raw, json)
Hash identifier: jLC85FRvoF4Pru9m8EYvWyCpyQZg8ASl4ryvNyAIPsM=
Subject key identifier: DD:85:B0:7B:1D:F5:63:82:01:DF:74:47:7C:63:2C:52:EC:6F:A6:74
Certificate issuer: /CN=8e52f155-d56d-401a-89c5-76d2d44d8b68
Certificate serial: 010D0C9F4328584815F4D208EE60B2DDFAC335C0
Authority key identifier: D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/0e5a622b-034c-3a3b-816e-0f51519ea53e.roa
Signing time: Tue 03 Dec 2024 16:52:09 +0000
ROA not before: Tue 03 Dec 2024 16:52:09 +0000
ROA not after: Mon 03 Mar 2025 16:52:09 +0000
asID: 16789
IP address blocks: 104.156.163.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:15:f4:d2:08:ee:60:b2:dd:fa:c3:35:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e52f155-d56d-401a-89c5-76d2d44d8b68
Validity
Not Before: Dec 3 16:52:09 2024 GMT
Not After : Mar 3 16:52:09 2025 GMT
Subject: CN=7c873dda-5b35-4e61-9100-f88191d4896f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:08:08:c4:cc:43:7a:cc:40:86:08:74:fb:4a:
94:c1:23:56:61:c0:61:9d:cf:ea:20:80:40:04:c3:
16:ec:93:38:71:7d:09:49:b8:3f:c2:55:60:27:a2:
6b:b8:d2:e4:e2:b8:14:2b:cd:8b:6b:86:dd:c4:06:
7b:c2:27:66:ea:fd:67:92:f9:3e:67:dc:5e:4a:69:
e2:b4:56:6e:cc:f0:d1:78:1e:cf:22:91:e2:ef:94:
29:dc:47:71:7c:ec:75:16:86:af:81:4e:cb:cf:26:
e3:67:20:00:3d:f9:19:6c:24:40:34:01:3c:4c:da:
95:60:a3:bc:03:ee:8b:a7:13:ae:45:a7:07:65:79:
5e:5d:a0:47:4e:27:3a:63:63:ba:8a:b2:9f:4d:f3:
2b:fb:e2:09:16:a1:40:06:37:14:1e:b7:15:7d:10:
ae:b5:a5:72:79:60:55:d1:f0:83:b4:58:05:bf:ce:
d8:4b:e2:d0:c5:2d:8e:af:bd:a9:07:73:72:24:9d:
4d:ad:08:b0:42:98:f5:0d:46:04:fc:17:0f:94:68:
63:7c:c0:88:da:1c:fb:c8:24:52:4d:69:c1:b8:89:
29:60:93:ff:76:42:ab:a3:0b:77:98:e4:db:b9:ef:
36:77:7f:d0:2e:ec:b2:2e:4d:d6:c2:e6:20:d9:43:
1e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:85:B0:7B:1D:F5:63:82:01:DF:74:47:7C:63:2C:52:EC:6F:A6:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/0e5a622b-034c-3a3b-816e-0f51519ea53e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl
X509v3 Authority Key Identifier:
keyid:D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer
sbgp-ipAddrBlock: critical
IPv4:
104.156.163.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:70:58:94:9a:cd:4c:00:6c:3c:76:9d:d0:93:ae:ac:37:f5:
34:55:c2:72:53:7c:7e:c9:dc:98:23:66:4d:29:80:34:89:27:
30:53:74:e2:09:5b:e6:f0:ca:b1:ac:0d:f9:40:8c:24:20:ca:
07:40:e0:7a:a4:55:f6:8a:13:cb:6c:c9:47:7d:3c:5c:53:e8:
6e:ee:24:4c:55:8a:0a:9e:69:fa:0f:06:c4:01:dc:ca:1b:53:
78:c1:e1:44:ed:19:48:3b:7d:50:51:d2:93:f6:98:0f:e0:71:
95:81:70:14:fe:32:dd:6e:a3:73:72:7c:23:67:53:07:bf:d4:
fc:d9:4b:cb:8c:c7:89:09:af:55:7d:c7:c8:6a:9f:04:e8:ec:
30:2d:8a:3a:fc:72:fe:b1:81:57:65:80:ad:83:dd:6c:69:dd:
4a:d7:da:14:60:2f:e4:27:82:5f:c4:05:1d:7b:51:cb:10:96:
11:e1:f5:ba:07:06:ea:6f:dc:79:76:0c:d5:98:b3:f0:3f:cd:
b5:d0:0b:8f:ec:b7:e5:30:3f:7c:05:bc:eb:70:5a:49:81:76:
37:f7:d3:b6:77:fb:e8:d2:0f:5b:2e:45:ec:2f:3d:a9:cf:b9:
77:14:44:bf:5c:21:ee:a1:b3:3e:b1:5f:dd:ce:2a:71:4b:7d:
22:fe:62:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:02:14 2025 by rpki-client