Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/2943bfc4-a849-3123-84f6-99d6ceb79d8b.roa
File: 2943bfc4-a849-3123-84f6-99d6ceb79d8b.roa (raw, json)
Hash identifier: fNA50uGdZ4z8Ie4bEYCOYXZf577i/hDNDfJQ0pgMjTE=
Subject key identifier: E3:4E:12:00:58:EC:6F:89:90:1B:CF:BB:EA:93:68:0E:57:24:B3:7D
Certificate issuer: /CN=db2617c0-03f4-4ad7-9d11-36b2c6496b7d
Certificate serial: 010D0C9F4328584827C52F7D19289FF859E7E380
Authority key identifier: 6F:8C:BC:63:FE:23:D7:C4:A8:06:09:3A:B5:B6:A1:6A:A3:94:58:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/2943bfc4-a849-3123-84f6-99d6ceb79d8b.roa
Signing time: Tue 10 Dec 2024 02:00:40 +0000
ROA not before: Tue 10 Dec 2024 02:00:40 +0000
ROA not after: Mon 10 Mar 2025 01:00:40 +0000
asID: 53991
IP address blocks: 164.152.124.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:c5:2f:7d:19:28:9f:f8:59:e7:e3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db2617c0-03f4-4ad7-9d11-36b2c6496b7d
Validity
Not Before: Dec 10 02:00:40 2024 GMT
Not After : Mar 10 01:00:40 2025 GMT
Subject: CN=1737a79d-0f34-4430-9b78-88ae186640a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7a:60:9c:e3:7a:5f:24:46:27:10:f2:12:50:
9e:7b:70:b4:4f:a6:da:e8:6c:d5:33:78:71:25:bb:
be:c3:a1:4d:1a:02:d5:75:ba:d7:e0:1a:01:08:9d:
19:38:ab:97:37:4f:1d:38:0d:4f:94:9a:a1:72:36:
3f:c2:e1:41:12:39:56:95:4f:3e:90:6a:79:86:fb:
6e:7b:37:75:9d:14:8d:50:c8:8f:48:b3:f3:b2:19:
05:c2:e3:e2:b7:a6:2f:64:2a:99:d9:d0:44:7e:c8:
ce:4d:24:82:c3:eb:1d:fa:0b:a0:6d:05:a9:3b:92:
33:4f:2b:d4:b2:2f:b4:b2:6d:b4:90:9a:b7:75:78:
e8:c8:b5:aa:88:8b:83:7c:bd:16:76:5d:46:d9:91:
57:bc:ff:f8:c9:29:10:87:90:3b:20:86:62:9a:54:
6b:29:f9:9b:ce:3e:1f:ac:0b:d4:94:09:c6:12:e2:
76:d2:d4:8a:bc:c4:7c:e8:a2:f7:c7:aa:c1:13:7a:
66:3c:43:37:c0:af:27:d3:f8:b9:e2:73:98:df:ec:
e5:7f:52:8f:83:a5:45:df:de:62:46:43:23:7d:d6:
a5:fe:f9:0e:58:83:73:19:ae:3c:a2:8a:35:6f:f2:
31:fb:af:8c:18:be:2a:ab:95:17:c0:64:7d:94:7f:
77:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:4E:12:00:58:EC:6F:89:90:1B:CF:BB:EA:93:68:0E:57:24:B3:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/2943bfc4-a849-3123-84f6-99d6ceb79d8b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.crl
X509v3 Authority Key Identifier:
keyid:6F:8C:BC:63:FE:23:D7:C4:A8:06:09:3A:B5:B6:A1:6A:A3:94:58:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.cer
sbgp-ipAddrBlock: critical
IPv4:
164.152.124.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:79:8c:e4:bb:c6:79:1e:a2:ef:34:17:c1:b7:c2:c0:c9:e8:
23:2b:b7:42:22:10:86:74:d5:f0:90:f2:40:47:72:bc:46:6c:
39:98:3e:31:5e:9d:77:63:6d:73:35:c5:b6:69:f0:22:22:3e:
76:72:a6:cb:2d:41:18:0f:c3:bd:03:2c:b0:a5:08:2f:2e:72:
02:37:f7:33:9a:e4:e8:d3:93:83:30:1c:18:9e:7e:df:ad:27:
e9:a0:76:37:b4:a1:6d:a9:8c:c4:ad:e3:71:e3:3d:48:e3:b2:
d5:e2:9b:a4:8a:01:3f:91:06:b1:6d:51:01:58:95:b8:0b:07:
6d:4f:c2:2a:dd:99:d6:20:95:c5:c2:7c:fd:38:2b:3e:cd:07:
7d:ed:2c:45:a4:f8:8b:60:62:b4:f3:47:a4:d4:22:ec:54:02:
b9:54:de:8a:2e:19:69:01:a5:70:e0:24:ad:97:11:4d:bf:7e:
ac:64:e5:e3:8d:d0:08:57:f5:7d:71:e2:c8:9b:f6:3a:aa:97:
1b:a7:ec:2f:2c:68:4d:6d:d8:7b:d7:47:df:cd:5a:4d:9d:b2:
e6:95:38:48:77:d9:1b:42:13:1f:04:cf:78:e9:50:67:07:eb:
8f:2a:61:4c:7a:ff:5a:f5:9d:16:d3:22:59:44:b4:6e:eb:b2:
b9:93:52:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:18:22 2025 by rpki-client