Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/9f83846a-ab72-3e0a-839b-d7f346b74e34.roa
File: 9f83846a-ab72-3e0a-839b-d7f346b74e34.roa (raw, json)
Hash identifier: lh8i6sFT0CYHN/OAFFbedtCt43VCBVF6Qy+BvDdKbt4=
Subject key identifier: E7:D2:0D:26:05:23:BD:2C:76:10:C7:65:FB:69:A8:F1:C1:8D:5A:3D
Certificate issuer: /CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
Certificate serial: 010D0C9F4328584858A056D02044F9EE65ABD280
Authority key identifier: 57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/9f83846a-ab72-3e0a-839b-d7f346b74e34.roa
Signing time: Fri 27 Dec 2024 14:00:52 +0000
ROA not before: Fri 27 Dec 2024 14:00:52 +0000
ROA not after: Thu 27 Mar 2025 13:00:52 +0000
asID: 18434
IP address blocks: 156.55.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:58:a0:56:d0:20:44:f9:ee:65:ab:d2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
Validity
Not Before: Dec 27 14:00:52 2024 GMT
Not After : Mar 27 13:00:52 2025 GMT
Subject: CN=9c21ac7a-a4c5-4c1f-a0f0-1718db978a12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:40:a4:e9:b1:c0:93:79:13:7c:81:b2:29:7f:
36:54:e8:4a:90:de:ca:9f:04:35:a1:69:24:22:2d:
da:e1:69:c9:27:c3:5a:fe:21:60:85:94:e9:7d:d5:
06:a1:5d:2f:13:8d:9e:cd:f5:26:f0:48:77:21:0d:
8b:38:0b:14:d4:32:ee:04:3a:bc:4b:01:15:5a:63:
12:ee:44:6f:e0:5a:d2:a3:11:0d:ea:86:4f:5f:72:
97:e3:64:8f:14:6d:73:3e:66:fe:88:84:3b:c2:3f:
00:42:9a:88:93:dc:8e:2d:4a:78:69:44:e9:fb:da:
2a:9d:ba:c6:ca:5c:6d:c4:fc:fa:d3:dd:8c:8d:46:
cb:c4:32:59:98:29:5d:ee:25:4c:ca:e6:fc:b5:01:
fc:e1:17:6d:a9:fe:23:6b:9a:3b:d7:77:f0:18:af:
54:64:e9:ad:cf:c1:32:0d:e2:d9:88:1b:a0:e6:b2:
2f:e2:bd:5c:06:cb:ea:ac:27:92:5f:cd:ed:30:68:
8d:63:75:f3:71:32:c1:10:15:d2:ff:2c:5e:8c:db:
1b:ec:2e:db:90:51:16:88:29:b5:ae:0d:cb:be:ef:
03:95:e7:25:bc:bd:fd:5e:59:29:3f:fc:7a:c3:5e:
cd:87:05:4a:7e:ab:56:9e:1f:0b:01:bd:bd:a9:08:
5e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:D2:0D:26:05:23:BD:2C:76:10:C7:65:FB:69:A8:F1:C1:8D:5A:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/9f83846a-ab72-3e0a-839b-d7f346b74e34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl
X509v3 Authority Key Identifier:
keyid:57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
sbgp-ipAddrBlock: critical
IPv4:
156.55.67.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a8:f5:a6:07:3d:9a:38:0d:57:98:b4:77:f3:6f:0c:52:a0:20:
e0:4a:0b:65:28:8c:76:d1:a5:6a:db:64:4a:d3:b3:04:2c:a7:
ca:61:47:89:77:f8:25:0c:e3:19:a2:91:87:f4:97:b2:53:17:
58:a5:a2:f1:a7:18:15:02:6f:1b:63:41:68:ce:86:15:98:27:
58:2d:a1:50:d9:d7:63:85:44:85:c2:57:09:2a:b9:32:00:2f:
32:12:9d:b0:72:35:ef:67:92:2a:09:fc:c7:cb:3f:df:b4:77:
34:8f:f4:65:7f:19:28:7b:3f:7e:af:32:95:90:85:1a:cd:99:
9e:e8:f3:8e:77:2b:15:73:3a:87:ea:c5:16:e5:db:fa:96:3b:
1e:97:ca:e4:f8:70:a5:db:e2:2f:43:b7:4c:8b:4e:b3:23:f9:
7d:79:b7:d7:5d:0e:49:71:c0:c7:8f:13:5c:8e:13:2d:cf:7a:
c9:11:e2:1e:ef:1d:b0:24:4d:73:42:0d:5c:aa:6c:f4:a9:54:
a6:d9:3a:45:c8:28:3a:ed:8f:03:e7:9a:ff:31:95:bc:c0:4c:
8d:61:2b:c5:2d:84:c8:eb:dc:ea:7a:31:27:98:c6:c8:7a:91:
b9:19:79:fd:cb:f5:53:0e:29:40:65:41:eb:be:60:6e:f3:6a:
79:fc:b1:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:07:22 2025 by rpki-client