Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/fc71bbc5-516e-3ad9-b330-376b7d8bda9e.roa
File: fc71bbc5-516e-3ad9-b330-376b7d8bda9e.roa (raw, json)
Hash identifier: ZyXv1/sOQOIuU8xmlQWkrtmwzTojGPILK1g6bjULWHo=
Subject key identifier: CD:EF:55:1B:46:6D:1E:5F:F0:60:A6:7A:21:0D:58:8C:9B:A4:82:64
Certificate issuer: /CN=c3399d97-64f6-4e12-8cbe-4d11491ad816
Certificate serial: 010D0C9F4328584834557A70712B7B57341A7380
Authority key identifier: AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/fc71bbc5-516e-3ad9-b330-376b7d8bda9e.roa
Signing time: Sat 14 Dec 2024 14:00:52 +0000
ROA not before: Sat 14 Dec 2024 14:00:52 +0000
ROA not after: Fri 14 Mar 2025 13:00:52 +0000
asID: 10430
IP address blocks: 152.157.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:34:55:7a:70:71:2b:7b:57:34:1a:73:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3399d97-64f6-4e12-8cbe-4d11491ad816
Validity
Not Before: Dec 14 14:00:52 2024 GMT
Not After : Mar 14 13:00:52 2025 GMT
Subject: CN=3f76002d-06a5-4e04-ba1e-45d9c1667d6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ca:f7:a0:98:be:3d:21:e9:6e:e8:af:31:ff:
2b:42:35:f3:c1:4f:bd:1b:0f:9d:5c:9c:b3:61:c1:
fc:26:87:0b:14:eb:24:9d:7a:90:dc:fc:c8:22:34:
5e:e8:aa:c0:2e:58:2b:51:4e:0a:1b:b8:d1:94:64:
bd:6e:1c:28:cb:e8:4f:a0:32:35:55:81:3b:66:fd:
51:ac:cd:31:16:8e:08:ca:e0:51:ae:3b:38:a8:5c:
45:1e:bd:7f:ac:d0:eb:14:6c:3a:e9:e6:31:23:96:
03:c8:90:4d:5f:b0:91:cb:e2:0a:f2:e8:f0:27:14:
73:a6:26:88:52:75:e3:e4:a0:46:f5:df:8a:00:33:
b3:6e:39:33:fb:2a:ea:0c:42:a0:97:e0:39:e6:61:
d6:46:67:f4:fd:80:2f:57:bf:7c:4f:0f:c3:71:a0:
06:de:35:19:5c:67:77:36:a5:c0:29:2e:cf:c3:c3:
82:95:02:17:69:b5:e3:a0:dc:09:67:78:4f:8c:d0:
17:3d:35:22:b6:f3:38:73:f6:44:75:39:fc:d6:a8:
bb:46:95:0c:4a:5a:1e:7e:c5:17:46:4f:eb:de:ff:
42:d3:ea:5f:35:45:a4:e3:b4:27:fc:c3:ab:f3:ed:
25:75:b9:be:c5:f8:91:f1:24:1f:18:a2:f1:f6:5b:
7d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:EF:55:1B:46:6D:1E:5F:F0:60:A6:7A:21:0D:58:8C:9B:A4:82:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/fc71bbc5-516e-3ad9-b330-376b7d8bda9e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.crl
X509v3 Authority Key Identifier:
keyid:AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer
sbgp-ipAddrBlock: critical
IPv4:
152.157.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:c5:9d:ad:4f:db:a8:54:7f:ed:a2:d8:04:a6:19:91:47:20:
c3:2d:2a:13:ef:d1:96:c7:5a:6b:e3:91:c9:ef:15:d5:f4:de:
d2:2d:4e:3c:ca:2f:b3:49:ca:60:38:04:47:d6:54:a6:88:3a:
e6:dc:43:5b:0c:bc:ac:ca:5b:39:e2:15:13:19:a7:ef:71:a3:
fc:21:0e:5b:b9:7a:d1:2b:80:de:30:aa:b8:dc:d1:bc:fc:20:
de:b0:0e:6f:17:7e:33:8b:ec:9a:91:23:3e:a7:33:69:19:71:
8e:a8:be:33:d5:bb:cc:67:46:4f:7b:68:05:04:5a:84:2f:1f:
ca:75:f0:96:4d:42:5b:7c:70:e1:bf:4b:3a:31:cb:f0:5d:a0:
5b:21:3c:90:19:73:2c:c3:81:05:ea:89:42:59:9e:cf:bf:1a:
16:4b:5c:93:56:ff:05:3d:ba:4a:2c:1c:91:e5:de:ad:ce:2c:
ba:58:bf:21:84:28:d5:ce:c3:47:da:e8:d9:78:ee:0a:49:b8:
03:23:98:ae:69:42:ff:9d:62:f4:dd:fa:d2:37:27:36:bb:a3:
b2:27:be:0f:9e:cb:11:69:5f:67:c7:5e:69:31:7e:20:0e:4b:
88:e3:63:28:b3:d6:bc:90:9c:db:da:ff:0a:d5:5a:e3:8b:6a:
45:46:3c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:54:35 2025 by rpki-client