Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/ffb3392c-76d4-3885-a224-e779e99e6670.roa
File: ffb3392c-76d4-3885-a224-e779e99e6670.roa (raw, json)
Hash identifier: f4vRu3bTVvlVVt6JYj1KykY0vjzNDZsH2Y1oY6Bk7Xo=
Subject key identifier: 1A:2C:BB:B7:16:74:61:E7:90:5F:44:1F:6D:9D:8E:42:08:34:21:45
Certificate issuer: /CN=a2159823-806a-4879-9de9-7be634e8cd31
Certificate serial: 010D0C9F432858487E50655F315277181C45DFC0
Authority key identifier: A5:91:90:9A:88:86:1F:02:DF:2B:CF:08:D4:A4:94:60:FD:84:C5:66
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/ffb3392c-76d4-3885-a224-e779e99e6670.roa
Signing time: Fri 10 Jan 2025 02:00:40 +0000
ROA not before: Fri 10 Jan 2025 02:00:40 +0000
ROA not after: Thu 10 Apr 2025 01:00:40 +0000
asID: 396982
IP address blocks: 151.193.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7e:50:65:5f:31:52:77:18:1c:45:df:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2159823-806a-4879-9de9-7be634e8cd31
Validity
Not Before: Jan 10 02:00:40 2025 GMT
Not After : Apr 10 01:00:40 2025 GMT
Subject: CN=f0a39fb3-58de-4596-8cae-35dc1f2a2c9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9d:b0:b4:18:a0:e2:1c:12:94:02:e9:6f:8e:
cc:a9:7f:c6:d6:97:f4:6a:2b:e7:46:6a:47:ba:ea:
20:8e:47:19:cd:44:82:ec:0d:37:bb:e3:dd:bc:aa:
49:5b:a0:7a:eb:05:1d:a6:3b:07:22:72:86:c5:f9:
2f:38:e3:48:7c:1f:bd:59:c8:4d:bc:a3:46:52:76:
e4:a2:73:20:4c:bc:3e:c9:84:f2:de:ae:94:e0:35:
03:41:78:7a:33:7f:43:e4:58:ad:76:80:f1:28:99:
86:1b:bf:d8:ae:16:3d:72:ba:13:22:a8:90:ce:74:
aa:73:97:e1:42:06:9d:c1:5c:1e:13:b4:7a:3a:af:
0f:7d:ad:78:e9:26:e6:43:5a:80:0b:ae:2d:50:2a:
f6:fa:c5:dd:bc:09:06:28:f8:ca:4f:d6:4f:f7:c8:
fc:52:24:e3:25:07:b5:97:fb:30:7a:eb:a3:bb:86:
29:d2:7f:bb:15:71:30:ae:f7:66:ff:29:a4:53:c4:
e5:fc:8a:6a:3f:ed:73:4b:57:84:22:fe:0c:1f:b5:
b9:59:fd:3d:85:95:97:e1:d1:9d:25:59:56:e2:06:
8c:9f:eb:52:9b:18:8c:e4:be:04:3d:a3:f2:e7:b2:
c0:8b:bf:1f:a3:b9:10:83:df:b0:5c:c1:04:16:7b:
92:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:2C:BB:B7:16:74:61:E7:90:5F:44:1F:6D:9D:8E:42:08:34:21:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/ffb3392c-76d4-3885-a224-e779e99e6670.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a2159823-806a-4879-9de9-7be634e8cd31.crl
X509v3 Authority Key Identifier:
keyid:A5:91:90:9A:88:86:1F:02:DF:2B:CF:08:D4:A4:94:60:FD:84:C5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31.cer
sbgp-ipAddrBlock: critical
IPv4:
151.193.159.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:94:bb:b5:a7:e3:96:b6:1b:b6:51:86:29:c4:1b:06:3f:4c:
90:71:ce:9b:44:bc:24:0d:ca:7b:53:89:68:7b:ac:d8:1d:03:
c5:e4:3a:5a:23:a6:3d:aa:6a:23:0f:07:d9:b4:8f:3e:f1:d7:
9c:b0:f2:31:ba:c3:2a:b2:80:66:c3:57:ea:c5:6e:f6:fe:e5:
c0:0a:5f:53:1a:3c:a6:a9:85:1f:0b:4a:17:f8:3a:99:64:7c:
67:23:c3:fc:c0:08:02:c1:ff:5a:2a:a7:d7:48:a2:f4:58:9e:
7f:73:69:ab:ac:e6:7f:c3:5c:8f:b3:9d:5d:c7:12:df:91:cf:
a4:9d:c2:65:6b:bf:fb:16:ff:8c:a7:77:04:4b:51:ed:07:23:
80:3b:99:8f:76:9f:5a:82:08:d8:5d:c2:65:6a:63:4a:96:a5:
26:6a:5f:4b:0b:28:a2:3a:08:b5:88:6a:94:9b:a1:2c:fe:59:
7c:2c:9a:00:69:d3:a4:42:43:02:bc:51:13:40:d8:98:b4:41:
7b:09:d8:07:3c:23:3f:f4:5c:77:da:78:fb:33:d6:16:46:80:
85:7a:14:75:0a:d3:05:ce:b1:4f:94:b6:0f:e0:10:9e:da:f1:
f2:7a:be:10:d6:32:e3:ae:3b:e4:32:fb:b2:49:81:20:61:40:
b3:eb:4f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:34:52 2025 by rpki-client