Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/6e935ba7-eeed-3ba5-9a90-345c4292fbd5.roa
File: 6e935ba7-eeed-3ba5-9a90-345c4292fbd5.roa (raw, json)
Hash identifier: pz4ls4KUOgcSvtFZis5ocKqCycHr4jbN+y2AV0dDDnA=
Subject key identifier: 75:3D:CD:C5:E8:8C:6A:03:13:02:F2:04:1B:5F:11:13:07:70:6F:1F
Certificate issuer: /CN=109078e4-3ad5-4242-9f3e-058161c97a9f
Certificate serial: 010D0C9F4328584843B007550DE27405FE979360
Authority key identifier: D7:1E:FE:19:B8:C7:1F:13:78:AB:D3:D1:E0:A8:8F:35:7A:56:C6:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/6e935ba7-eeed-3ba5-9a90-345c4292fbd5.roa
Signing time: Fri 20 Dec 2024 02:00:40 +0000
ROA not before: Fri 20 Dec 2024 02:00:40 +0000
ROA not after: Thu 20 Mar 2025 01:00:40 +0000
asID: 2572
IP address blocks: 150.199.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:43:b0:07:55:0d:e2:74:05:fe:97:93:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=109078e4-3ad5-4242-9f3e-058161c97a9f
Validity
Not Before: Dec 20 02:00:40 2024 GMT
Not After : Mar 20 01:00:40 2025 GMT
Subject: CN=c7c084cc-0c2e-4f23-814e-fe35e07e8e05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8e:0e:ec:3f:d2:e8:4a:d6:e2:f0:23:70:e3:
56:b5:09:81:ac:d7:e6:76:11:b2:03:40:e9:0d:66:
43:cf:8e:58:ec:13:03:d9:2d:55:05:d8:f3:94:09:
86:4f:2e:2d:00:16:59:d8:30:a5:d9:e7:5f:f9:ee:
0e:93:9f:88:cd:4f:79:73:c9:72:ba:60:9c:0b:b0:
a1:ac:cb:bf:1c:67:f9:ea:a4:3e:cd:b3:9f:04:06:
1b:b2:d3:c9:b5:56:62:b6:a1:2d:26:df:f4:61:59:
f6:bd:d6:11:00:fc:12:e3:11:18:cd:5b:ae:e9:c9:
06:28:c5:d7:b5:e4:b2:b2:d2:31:f7:e8:2d:20:1a:
bd:4d:de:49:7d:fd:01:e7:9b:9d:1f:e2:df:83:4c:
1b:9d:8b:7c:e0:49:f5:45:10:00:da:0c:7e:8b:f2:
cb:7f:7c:46:e6:e6:1c:95:40:d8:5b:b5:b0:44:c8:
97:83:3f:57:e6:be:28:64:7b:94:7f:f8:e9:51:54:
b3:b5:18:52:43:9e:48:de:95:d2:48:e1:dc:28:94:
ea:ae:93:2c:55:9a:10:de:17:e8:f0:a2:a7:06:00:
7b:33:c3:37:8c:ed:7a:07:6f:80:39:06:e6:88:4c:
47:69:cc:4d:bb:99:2d:6f:4d:fe:d9:ca:d2:b2:f4:
9d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:3D:CD:C5:E8:8C:6A:03:13:02:F2:04:1B:5F:11:13:07:70:6F:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/6e935ba7-eeed-3ba5-9a90-345c4292fbd5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/109078e4-3ad5-4242-9f3e-058161c97a9f.crl
X509v3 Authority Key Identifier:
keyid:D7:1E:FE:19:B8:C7:1F:13:78:AB:D3:D1:E0:A8:8F:35:7A:56:C6:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer
sbgp-ipAddrBlock: critical
IPv4:
150.199.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:96:58:d6:24:32:60:ff:be:23:a9:42:cf:51:f3:54:ed:c8:
c9:a9:de:f1:81:31:a9:a0:e7:90:98:2a:5c:55:c9:55:96:3e:
99:71:89:0e:df:ab:5d:a6:60:b4:dc:51:c5:b3:3a:61:5c:9f:
32:bf:d6:c7:7d:88:7a:26:4a:b8:e7:f5:1e:59:bc:3d:1f:af:
92:cd:f5:3e:e6:e1:be:7f:cf:18:7e:98:da:ad:d7:45:1c:cf:
4a:37:77:4f:3e:10:ac:d3:70:e8:3a:53:58:06:f6:11:8b:fb:
78:ee:32:32:4c:4b:4e:47:30:aa:fc:36:d9:4f:d9:9d:d4:e0:
1e:a9:e1:92:e2:ee:24:d5:1f:8b:05:ae:22:a8:e7:36:87:27:
db:cd:a5:6b:de:01:67:1d:a6:74:60:1c:2a:14:8b:7c:8b:2c:
ff:d9:cd:c1:04:90:af:14:d4:e0:0d:96:03:f3:66:72:43:76:
13:54:37:22:b9:4d:3c:5f:38:18:d8:d2:5b:2f:c5:ac:3c:33:
4c:9c:16:77:c4:f0:56:8e:8a:b3:d1:5c:48:84:7f:c3:76:43:
91:d6:3b:cc:20:36:78:77:93:18:cd:02:94:bf:5c:77:12:b8:
2b:02:16:39:bd:1a:ed:3f:54:07:d2:75:b8:f7:aa:dd:da:09:
6e:45:e3:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:47:49 2025 by rpki-client