Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c2fdc9e3-c24c-4cff-a8cf-9f296df41e65/2d50375f-8500-3214-a11f-bd594b4aa849.roa
File: 2d50375f-8500-3214-a11f-bd594b4aa849.roa (raw, json)
Hash identifier: P20SumBcmK466S2vaHSvfZ4CHnl6JiQ89rhsdUdb7tg=
Subject key identifier: 3B:14:B5:7A:15:25:F9:BF:61:D7:8B:AA:35:A9:10:85:04:56:C6:64
Certificate issuer: /CN=c2fdc9e3-c24c-4cff-a8cf-9f296df41e65
Certificate serial: 010D0C9F4328584851A5774F2DD31751E63DEE00
Authority key identifier: 73:9F:60:47:8C:11:0A:44:2A:F2:0F:5F:2B:C3:4C:28:54:F4:C5:36
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c2fdc9e3-c24c-4cff-a8cf-9f296df41e65.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c2fdc9e3-c24c-4cff-a8cf-9f296df41e65/2d50375f-8500-3214-a11f-bd594b4aa849.roa
Signing time: Wed 25 Dec 2024 02:00:38 +0000
ROA not before: Wed 25 Dec 2024 02:00:38 +0000
ROA not after: Tue 25 Mar 2025 01:00:38 +0000
asID: 7773
IP address blocks: 164.154.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:51:a5:77:4f:2d:d3:17:51:e6:3d:ee:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2fdc9e3-c24c-4cff-a8cf-9f296df41e65
Validity
Not Before: Dec 25 02:00:38 2024 GMT
Not After : Mar 25 01:00:38 2025 GMT
Subject: CN=e0e1b6e3-6a86-4a04-9cb3-30ed1119b8c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:00:ef:3a:53:19:e1:87:a9:dd:18:3d:5c:ad:
1c:56:dc:2e:24:0c:be:74:8a:35:1c:7b:99:ea:77:
a0:c2:5f:c3:83:5a:08:a9:c0:2d:04:c5:84:4c:5c:
61:c9:44:4a:50:14:f5:20:e1:d4:7d:fa:82:9d:2c:
6b:8c:42:6e:6f:60:1c:b0:12:06:8c:31:ed:2d:e0:
76:03:e2:f2:00:7a:9b:7f:11:ee:64:62:62:35:30:
91:b4:cb:b4:32:c4:3a:32:ad:78:79:7c:4c:ae:96:
c1:4e:e0:eb:93:72:02:3c:32:02:8a:5a:6a:47:bf:
35:9b:3a:42:5c:2a:a2:d4:c1:37:5e:b8:bd:28:8d:
53:e3:f4:f1:4e:5a:15:e1:69:d6:f7:0a:6a:ad:f5:
22:0d:2b:22:28:dc:fc:75:da:61:c8:6c:fd:4a:f3:
ff:31:31:f7:b7:99:e9:b3:c1:73:72:8b:87:84:38:
97:aa:d5:d9:18:9f:81:c4:a3:df:ac:54:8b:2c:ae:
59:9f:6b:39:8d:0f:f1:8c:28:7f:5f:12:42:ae:01:
bf:41:bc:d2:c5:f1:53:38:69:71:97:25:7b:b1:6c:
e9:84:c4:21:f2:a2:c2:0d:8e:b4:13:c4:d1:2f:bf:
0d:ab:67:21:17:0f:ac:3c:19:d3:14:c9:d4:d3:ce:
d3:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:14:B5:7A:15:25:F9:BF:61:D7:8B:AA:35:A9:10:85:04:56:C6:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c2fdc9e3-c24c-4cff-a8cf-9f296df41e65/2d50375f-8500-3214-a11f-bd594b4aa849.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c2fdc9e3-c24c-4cff-a8cf-9f296df41e65/c2fdc9e3-c24c-4cff-a8cf-9f296df41e65.crl
X509v3 Authority Key Identifier:
keyid:73:9F:60:47:8C:11:0A:44:2A:F2:0F:5F:2B:C3:4C:28:54:F4:C5:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c2fdc9e3-c24c-4cff-a8cf-9f296df41e65.cer
sbgp-ipAddrBlock: critical
IPv4:
164.154.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:43:35:c3:ba:92:e0:86:ed:07:d2:bf:f6:a3:65:2f:6c:5d:
e7:71:3c:dd:c4:3a:13:4e:89:c9:c4:e7:ad:91:6c:d4:d8:37:
14:e7:f1:9c:6c:d8:37:2f:19:ad:99:03:fa:7c:30:2f:b5:44:
b7:2f:f1:13:b9:e4:bf:98:a5:94:ef:0c:5c:ef:cc:97:92:d4:
cd:8a:54:26:48:0c:40:41:9e:2b:86:1e:9f:8a:bf:2f:3b:69:
58:ff:ed:a9:ce:8c:f7:83:1e:f9:50:4b:c5:14:96:7d:22:72:
b6:45:c1:ca:43:f7:c1:f2:cf:ab:b5:80:dd:3b:f9:e3:6a:c9:
fe:66:d5:e7:4d:6e:a1:26:d0:f0:fb:68:e8:bf:e4:73:1e:47:
a2:b2:e3:95:85:d0:56:71:ca:ef:03:be:4d:1b:52:42:02:87:
bf:30:bf:bc:28:e4:11:6c:15:80:3a:04:53:84:14:a5:47:28:
ff:e6:08:35:01:a3:05:fe:58:74:1d:f1:c4:10:c4:90:e2:38:
db:0f:61:d9:a1:00:51:81:7b:77:0f:3e:61:55:e9:bd:d5:f7:
11:e4:20:f2:cd:19:e0:cd:37:ee:25:fe:7f:88:f6:ec:80:ad:
44:65:14:5d:d0:ba:3d:a3:40:bb:4c:15:43:03:46:5b:27:01:
61:e0:0b:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:32:46 2025 by rpki-client