Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/8acbc2c9-7125-34b8-a346-13cd157a460f.roa
File: 8acbc2c9-7125-34b8-a346-13cd157a460f.roa (raw, json)
Hash identifier: AiN+PaPgNVpqveepAZI3cxh+WCC1J7WoNKsV1La+q2A=
Subject key identifier: D7:BA:A0:32:90:19:20:83:A5:B1:70:E1:DB:82:15:7F:24:36:AE:09
Certificate issuer: /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
Certificate serial: 010D0C9F43285848530AF3F364490B3F6831C880
Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/8acbc2c9-7125-34b8-a346-13cd157a460f.roa
Signing time: Wed 25 Dec 2024 14:00:52 +0000
ROA not before: Wed 25 Dec 2024 14:00:52 +0000
ROA not after: Tue 25 Mar 2025 13:00:52 +0000
asID: 26744
IP address blocks: 150.252.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:53:0a:f3:f3:64:49:0b:3f:68:31:c8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
Validity
Not Before: Dec 25 14:00:52 2024 GMT
Not After : Mar 25 13:00:52 2025 GMT
Subject: CN=afe27be0-3092-4667-9bc8-a3c3342cb790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:07:aa:28:1a:2d:ce:d3:d2:b3:94:92:35:44:
a7:ba:f1:5b:c5:00:86:3d:67:d0:c4:55:cf:d3:4c:
f7:ef:f9:16:41:49:52:24:d0:0a:21:be:d9:06:77:
53:15:4f:b1:b0:e5:74:b5:99:cf:42:92:9b:1e:33:
d7:14:73:a0:dd:d8:5c:ba:f1:fa:3b:73:95:bb:f5:
64:cb:fe:b6:4b:d4:80:1a:eb:c2:cb:10:e0:9b:15:
83:71:70:d7:7c:77:dd:33:e1:19:70:8f:e3:71:9d:
39:c6:9a:82:32:a6:da:b2:6a:08:2c:74:56:75:73:
cf:e4:d6:26:d9:3b:f8:25:8c:72:57:ca:ae:b2:d1:
2c:da:a9:8b:a7:0a:08:f9:43:a1:e4:e1:8f:73:ce:
1c:bd:e1:2f:d9:d1:09:4c:99:0a:a6:c9:cf:48:7d:
1e:ca:c9:a0:1b:8a:93:92:71:4a:ef:d2:1b:e6:5c:
6c:6f:d8:91:47:d8:f2:bb:8b:d4:05:35:8e:bb:08:
34:b2:7c:d3:91:66:dc:93:57:18:f8:8b:15:b8:55:
ed:0d:f1:02:93:a3:3e:87:13:f8:42:a1:67:ee:6e:
c5:37:22:b0:9b:81:bf:e1:93:36:70:7c:dd:14:25:
eb:f6:90:5d:7b:62:b2:af:7b:45:70:d5:ff:97:01:
d6:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:BA:A0:32:90:19:20:83:A5:B1:70:E1:DB:82:15:7F:24:36:AE:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/8acbc2c9-7125-34b8-a346-13cd157a460f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl
X509v3 Authority Key Identifier:
keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
sbgp-ipAddrBlock: critical
IPv4:
150.252.201.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:68:3d:2a:24:d9:d1:c5:ce:9b:c5:45:9c:d6:53:09:a1:5e:
5a:b8:30:2a:4a:ee:e3:fc:ff:cc:00:bc:c7:cf:9a:ac:b9:3f:
ad:14:6d:fe:d5:fd:b0:28:e9:b0:50:e7:86:c5:d3:bf:f6:22:
b3:ea:3d:78:3e:89:c7:b2:ed:5e:58:c8:63:75:fc:81:54:a3:
37:04:78:15:da:61:49:e1:48:a9:8b:5d:4b:da:4c:54:e3:ff:
27:04:3e:07:af:6e:9d:97:d5:45:10:51:33:68:4a:51:f2:2c:
cf:78:22:a0:a7:51:65:e3:e2:19:ab:dc:48:7d:35:35:24:15:
8d:65:f6:b5:43:2e:d8:48:c1:88:1f:f9:d1:da:f6:22:7c:55:
6c:3e:2b:d4:c0:90:c9:78:94:55:ee:4e:53:da:6c:33:da:cd:
02:52:70:c0:b1:a0:4f:c7:d8:8d:ce:42:ad:3c:e7:85:e5:e9:
87:f1:38:f1:06:c9:df:84:37:45:78:4b:0d:9b:86:24:90:93:
ef:a0:2f:aa:b8:f7:a1:ef:b5:db:c2:50:61:28:70:ed:5a:05:
b7:a0:f3:c1:9e:44:5b:4e:c4:58:a7:9e:79:22:5a:03:71:39:
b6:80:c8:36:ce:74:46:a6:8c:a4:75:b6:76:cf:4b:a9:1a:49:
8f:d7:e5:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:39:49 2025 by rpki-client