Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325/b9ad8e48-79fb-3f03-be70-8ccc5ec80ef5.roa
File: b9ad8e48-79fb-3f03-be70-8ccc5ec80ef5.roa (raw, json)
Hash identifier: Y9GpzPsC9C7cRjfpWIsEJHX+EjRM8ezCSnoptMk0RkI=
Subject key identifier: 90:A3:A2:D0:46:EF:70:70:4E:B3:3D:EE:D5:9A:30:CF:59:E1:BF:21
Certificate issuer: /CN=5d613e84-be93-4d7a-a56c-57a378f2c325
Certificate serial: 010D0C9F43285848388558F32BCD534FDB3638C0
Authority key identifier: 83:D9:7E:E5:89:0D:94:72:A3:71:AF:6B:D0:14:D0:CC:74:D3:1D:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325/b9ad8e48-79fb-3f03-be70-8ccc5ec80ef5.roa
Signing time: Mon 16 Dec 2024 02:00:39 +0000
ROA not before: Mon 16 Dec 2024 02:00:39 +0000
ROA not after: Sun 16 Mar 2025 01:00:39 +0000
asID: 23188
IP address blocks: 150.195.240.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:38:85:58:f3:2b:cd:53:4f:db:36:38:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d613e84-be93-4d7a-a56c-57a378f2c325
Validity
Not Before: Dec 16 02:00:39 2024 GMT
Not After : Mar 16 01:00:39 2025 GMT
Subject: CN=3ca967fe-5b64-4329-9e6c-a68107505d96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:41:8a:a8:99:2e:aa:9a:59:ee:ec:6b:22:70:
b6:a6:92:15:6c:eb:a8:37:78:87:18:4a:66:d8:bd:
52:dd:51:09:f1:a8:86:61:f9:87:b9:fa:83:39:5c:
a5:d6:64:13:9b:f6:61:27:68:c0:65:57:ac:82:3b:
0a:57:c7:7e:e8:ae:a4:65:e4:49:92:a4:76:f3:28:
89:4e:e4:93:ac:23:76:0f:a2:e1:57:d7:a6:88:3b:
c7:7b:c4:1d:88:4f:36:d4:cf:c0:85:e1:61:11:9e:
72:c1:c3:bc:45:26:cc:48:5b:bd:c1:51:26:f2:8b:
f5:58:bc:39:1c:4b:e7:d3:89:98:2b:8a:ad:fa:88:
61:cd:db:69:93:a8:93:58:11:a5:73:48:1c:50:43:
b0:64:d8:38:44:d9:33:92:93:af:15:ce:09:7b:ed:
36:37:bd:60:b3:6b:dc:63:bd:a6:99:ca:48:5a:a1:
ee:0d:fd:e2:71:f3:f7:ed:e4:be:5e:87:8a:be:ca:
36:96:e0:68:8c:9d:86:35:ba:32:d3:6a:d8:07:42:
92:de:5c:35:17:b6:2c:45:2b:fb:b6:6f:5c:5f:89:
f7:38:3b:e0:6c:44:16:60:62:dc:5f:02:6d:d8:44:
7f:59:5f:ec:9d:c8:f8:ee:f6:36:b2:a7:06:07:17:
7d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:A3:A2:D0:46:EF:70:70:4E:B3:3D:EE:D5:9A:30:CF:59:E1:BF:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325/b9ad8e48-79fb-3f03-be70-8ccc5ec80ef5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325/5d613e84-be93-4d7a-a56c-57a378f2c325.crl
X509v3 Authority Key Identifier:
keyid:83:D9:7E:E5:89:0D:94:72:A3:71:AF:6B:D0:14:D0:CC:74:D3:1D:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325.cer
sbgp-ipAddrBlock: critical
IPv4:
150.195.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:b4:8f:18:6f:e0:22:0f:76:32:80:f8:0a:22:fd:04:14:92:
47:a5:d3:f4:17:70:1d:13:64:a4:2d:f0:a8:61:6d:57:ce:89:
b5:83:f5:e7:05:40:dc:47:bb:e6:bc:b2:17:b0:01:60:f2:e7:
85:80:45:11:48:7f:3a:a8:bd:fc:12:53:bc:64:2e:68:d6:da:
82:7d:30:f0:8f:9b:13:12:c7:02:55:c3:ec:be:f3:46:aa:5c:
d6:07:17:c7:13:d4:4e:4f:74:1d:f6:4c:52:78:6d:c8:d5:fc:
b2:2d:87:e2:e9:9d:41:48:3f:45:c1:52:9e:b9:53:94:a9:e0:
77:3a:02:a6:ae:95:54:e6:f8:09:47:90:2c:09:da:02:4b:e6:
b7:e4:1a:ff:40:6a:62:b0:88:80:42:5b:e4:3b:fa:d2:72:4c:
69:b2:f4:6c:d7:59:91:df:57:ee:b6:f3:9d:27:b5:9c:83:7a:
a2:f2:85:78:62:4f:ac:b2:76:d6:6f:f5:2b:17:b9:6c:ff:81:
a4:85:6c:55:c2:bb:55:ba:4e:28:b2:d8:cb:e3:84:8d:b3:1f:
d9:c8:d3:30:75:68:a7:66:c5:98:c9:7f:ba:d1:a5:4f:23:99:
01:ab:57:e1:68:97:69:90:4c:bd:c8:33:39:45:1e:d5:98:50:
90:80:77:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 07:57:42 2025 by rpki-client