Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/5ca73738-9870-3cd2-90f5-fc006e9d1db6.roa
File: 5ca73738-9870-3cd2-90f5-fc006e9d1db6.roa (raw, json)
Hash identifier: GC4G6rsmBTAFg9SOy2RN0vTPcaSXxAiBjIAKvo8L2us=
Subject key identifier: 97:CB:1B:8D:3D:79:C4:BB:47:DE:88:D3:3F:D4:7F:4A:3C:67:40:1C
Certificate issuer: /CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261
Certificate serial: 010D0C9F4328584832F023335A3A5219B1C32780
Authority key identifier: BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/5ca73738-9870-3cd2-90f5-fc006e9d1db6.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 38047
IP address blocks: 103.133.152.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:23:33:5a:3a:52:19:b1:c3:27:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=1e0f9a45-ede5-4311-9ae0-12d200860b98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:36:aa:7c:72:b3:f6:86:ee:52:27:a4:3c:7c:
8c:f8:42:6c:66:91:db:22:5d:ad:f7:78:57:77:fa:
72:7d:bb:70:09:55:e3:03:18:96:b6:ae:84:03:44:
05:dd:65:87:ff:db:fc:8d:ab:e9:c3:ce:3c:a9:ad:
b8:41:70:92:2a:9e:3e:53:2f:f1:a5:9d:04:b8:69:
30:bc:17:39:9f:11:54:f3:fd:34:70:61:16:56:43:
7c:80:2a:e6:36:8f:e5:41:b5:11:fb:5f:22:fe:ee:
d1:98:06:bb:71:eb:a3:c0:6a:25:3f:ac:cc:34:30:
80:66:78:ec:03:1f:da:2d:20:8d:eb:ff:7b:e5:5e:
6f:af:0f:00:bc:1b:0a:18:e9:ec:32:39:f8:ce:56:
7b:1d:16:f1:2a:ab:9a:1c:6f:2f:2c:dc:8a:18:c6:
99:88:07:18:c9:48:de:47:c2:2a:26:e4:0d:8b:7c:
28:d5:94:7d:bc:f3:f9:05:2c:e2:0a:1c:7b:0d:6e:
05:31:84:be:6c:6c:6d:55:42:ad:ad:7e:a2:51:23:
e5:21:a0:9c:27:ef:1d:45:b3:fa:b7:02:3b:65:09:
cd:62:6d:3b:1c:37:9d:34:b4:bd:74:1e:c7:bf:fd:
64:84:9a:55:80:d8:c0:96:f9:96:33:f4:5f:5e:1d:
6e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:CB:1B:8D:3D:79:C4:BB:47:DE:88:D3:3F:D4:7F:4A:3C:67:40:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/5ca73738-9870-3cd2-90f5-fc006e9d1db6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl
X509v3 Authority Key Identifier:
keyid:BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer
sbgp-ipAddrBlock: critical
IPv4:
103.133.152.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:58:cc:ae:46:56:d1:f0:d4:6a:4c:70:38:cb:f0:70:9a:54:
da:5c:61:9e:2a:7a:59:1e:cc:0d:85:e0:b6:9e:10:30:3a:08:
88:9b:ec:3d:71:c2:67:d7:a4:28:5d:7b:88:d0:80:5d:39:56:
d5:1c:22:d6:f3:f9:db:55:62:b9:f1:a6:a0:55:ec:71:83:26:
71:c5:ee:2b:77:41:cb:22:70:74:59:dc:96:69:bd:ea:63:1d:
ca:0c:ce:60:00:f5:e8:0a:9a:0f:89:b9:48:cb:7a:7e:dc:77:
49:e3:53:82:9a:a3:b7:36:b3:79:b5:16:51:75:98:47:56:92:
04:eb:30:b4:50:58:fd:1d:30:c4:b2:a8:18:c1:cf:69:92:15:
6e:36:45:93:bc:c7:ea:43:3c:9f:65:58:8a:1a:d7:72:f7:5a:
03:15:63:d9:d5:5f:6b:f0:db:c0:2b:c5:03:64:9a:e5:06:8b:
d0:40:9b:65:01:78:c0:ac:eb:54:05:88:e5:d5:0f:19:68:19:
8b:3d:7e:87:eb:5d:47:46:2e:37:87:be:be:35:8d:de:96:63:
4f:ce:bb:06:5e:5b:dc:72:f5:82:d4:ee:0b:41:9f:17:ec:f8:
74:b0:4f:69:f5:f8:12:1f:bb:ef:8f:22:c6:33:bd:73:6e:2e:
b7:a0:55:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:22:17 2025 by rpki-client