Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/5a5236fa-372e-334f-bc5c-2fc8b6ec894b.roa
File: 5a5236fa-372e-334f-bc5c-2fc8b6ec894b.roa (raw, json)
Hash identifier: EiRgF1W4G+L0Xou4IjLja764FI6+KGGhFQo8GqN+Kto=
Subject key identifier: F9:C4:3F:1F:57:B9:05:25:D2:9D:64:20:C6:C7:F8:B4:58:59:97:D8
Certificate issuer: /CN=7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf
Certificate serial: 010D0C9F432858484EDAC954FF2AFB7437942600
Authority key identifier: 90:25:00:D5:D4:81:50:60:54:00:7C:D6:30:FD:71:A6:4F:93:46:AF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/5a5236fa-372e-334f-bc5c-2fc8b6ec894b.roa
Signing time: Tue 24 Dec 2024 02:00:38 +0000
ROA not before: Tue 24 Dec 2024 02:00:38 +0000
ROA not after: Mon 24 Mar 2025 01:00:38 +0000
asID: 63023
IP address blocks: 104.156.156.0/24 maxlen: 24
104.156.157.0/24 maxlen: 24
104.156.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4e:da:c9:54:ff:2a:fb:74:37:94:26:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf
Validity
Not Before: Dec 24 02:00:38 2024 GMT
Not After : Mar 24 01:00:38 2025 GMT
Subject: CN=4eb67c20-314e-40fe-9d5d-88b9a071cbe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:62:a5:bc:ce:f8:4d:0f:78:36:b5:20:54:25:
ce:88:52:a5:c3:2d:51:00:b7:c3:fa:c2:08:20:e3:
c3:8d:21:8f:79:4d:18:17:f0:6e:49:98:e5:b2:f7:
af:8e:d3:5d:70:40:01:84:f7:5d:ef:3f:12:78:f6:
94:80:31:46:3b:91:b2:f7:5f:8c:ac:c5:b6:22:e6:
33:eb:9f:1a:38:a1:10:fc:bf:9b:58:3c:e7:76:3a:
d3:af:4f:43:62:21:5e:76:38:18:e3:2e:cc:21:e2:
b7:b5:48:39:19:36:32:d6:31:ed:fb:d1:22:28:e3:
b6:ee:69:c6:a0:b9:a8:af:16:7c:37:58:2f:15:77:
70:f9:c9:50:18:e3:40:8e:8f:c7:dc:d8:c1:4a:ff:
fd:e1:19:f5:54:c7:9d:21:39:c4:90:5e:bd:11:63:
5b:33:b5:3c:92:ef:5c:4a:0a:f9:5c:46:1d:59:0d:
8d:65:07:29:9d:cf:7b:d0:ea:a6:91:86:f7:be:45:
0a:68:cd:a6:be:ee:53:f8:4b:06:65:7f:37:ec:e5:
ff:9c:68:2b:10:ac:19:33:a5:8e:fc:c2:65:4f:6a:
d8:af:fe:5a:e5:63:0e:1b:03:00:fc:09:0a:ed:b9:
37:04:d4:bd:8a:78:a4:d0:83:d2:4b:38:80:5c:ed:
6d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:C4:3F:1F:57:B9:05:25:D2:9D:64:20:C6:C7:F8:B4:58:59:97:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/5a5236fa-372e-334f-bc5c-2fc8b6ec894b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.crl
X509v3 Authority Key Identifier:
keyid:90:25:00:D5:D4:81:50:60:54:00:7C:D6:30:FD:71:A6:4F:93:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer
sbgp-ipAddrBlock: critical
IPv4:
104.156.156.0-104.156.158.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:e2:b1:6e:32:26:42:a4:21:29:48:ed:e3:8c:e1:e1:d2:62:
30:31:a8:16:ff:c7:55:43:16:8e:58:a7:c6:97:48:05:1a:d9:
6a:53:1a:c8:66:97:1d:07:72:41:b5:bb:d7:d6:2b:a2:cc:93:
ef:bc:1e:2e:ba:09:15:fc:2c:09:c6:a3:35:ef:2d:c9:d4:99:
72:83:10:f6:a4:4e:17:27:d2:38:6a:4f:8c:5b:45:23:08:f8:
89:25:54:57:5f:81:33:07:23:40:87:d2:63:29:9c:3d:5c:e4:
bb:13:cf:3f:34:a3:99:7c:3e:c4:99:41:b8:f6:54:0a:6c:f9:
f7:69:10:61:5a:10:fe:29:05:02:bc:b8:39:cf:f2:20:eb:54:
4a:0d:cc:80:e6:7e:80:21:85:c6:b9:59:0a:fa:b7:5a:42:e5:
db:e2:5b:5d:bc:51:3e:25:fb:2d:ea:12:90:f7:4b:4d:7d:db:
ba:08:4d:ef:0d:36:bf:3c:10:e2:43:05:f0:70:92:1f:d1:aa:
37:ac:b8:be:8c:d6:d5:81:bc:ef:1a:ed:bd:0b:a5:6d:8a:64:
d0:6e:c6:0f:e3:c1:69:d1:e2:b9:38:6c:05:36:4a:20:73:b0:
49:fb:dd:c5:5f:68:55:92:9e:d5:e4:86:f7:69:ff:42:19:24:
55:33:a4:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:59:26 2025 by rpki-client