Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/542e847c-3715-3b27-9f74-ade77a0fb20b.roa
File: 542e847c-3715-3b27-9f74-ade77a0fb20b.roa (raw, json)
Hash identifier: RTDROitqHX3uXmp/QIyaiYfB3641CRk6kfiWT5U0d+k=
Subject key identifier: 21:EE:F9:1B:A4:D5:61:2C:8B:21:45:F3:CA:2D:F5:B3:AB:1F:4D:3A
Certificate issuer: /CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
Certificate serial: 010D0C9F432858488C45CD0E76C49C5D7CED8800
Authority key identifier: 06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/542e847c-3715-3b27-9f74-ade77a0fb20b.roa
Signing time: Wed 15 Jan 2025 02:00:39 +0000
ROA not before: Wed 15 Jan 2025 02:00:39 +0000
ROA not after: Tue 15 Apr 2025 01:00:39 +0000
asID: 21530
IP address blocks: 170.186.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8c:45:cd:0e:76:c4:9c:5d:7c:ed:88:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
Validity
Not Before: Jan 15 02:00:39 2025 GMT
Not After : Apr 15 01:00:39 2025 GMT
Subject: CN=6f7e3a76-cbfa-4dc9-bb7d-9a8a6b83961e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e2:b1:ed:d8:74:eb:bc:bb:6f:d8:98:a7:f9:
5f:50:f3:1e:d2:0c:82:30:22:17:29:8a:e3:33:df:
ee:07:39:71:df:02:c4:df:3a:fb:02:ea:2f:f2:22:
89:77:28:0d:5f:f1:22:ba:94:00:e3:52:a8:c6:9f:
6a:8e:93:3d:2a:7b:dc:cf:18:41:7f:b2:2a:41:b8:
51:28:3c:ef:ab:7d:00:0c:7c:43:27:39:81:72:bf:
6e:a2:ac:15:ad:54:84:94:1f:fc:93:86:ec:7e:48:
0a:38:80:b4:b2:14:24:fa:36:da:3b:71:ef:1a:37:
7b:d9:4b:69:fa:ae:5d:8e:32:2b:02:f3:10:4a:79:
ea:9e:a7:08:40:38:4e:e8:13:96:c8:2d:29:77:5a:
9e:4f:66:8f:45:0b:64:12:6a:69:e4:41:85:e3:27:
8d:e5:e9:92:45:f2:38:fe:be:03:62:35:4f:47:a3:
a7:6b:73:b5:54:8c:39:f0:0a:07:92:d5:c5:00:88:
3e:73:3f:f7:0f:16:5e:0c:5f:8a:44:f2:8e:d9:58:
35:d1:00:59:0d:71:b9:f2:9f:65:f8:8c:79:a6:7f:
81:e7:00:27:1a:14:71:3d:77:c5:4a:54:c2:0f:84:
76:99:70:33:c3:e0:5a:66:92:6c:a6:d6:e3:e2:93:
87:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:EE:F9:1B:A4:D5:61:2C:8B:21:45:F3:CA:2D:F5:B3:AB:1F:4D:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/542e847c-3715-3b27-9f74-ade77a0fb20b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl
X509v3 Authority Key Identifier:
keyid:06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
sbgp-ipAddrBlock: critical
IPv4:
170.186.152.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:ef:5a:e8:ac:c1:46:94:b7:bb:74:d2:2d:64:5a:60:a9:d4:
08:43:d6:40:eb:a7:f6:69:09:b8:60:d3:7d:8f:e8:54:93:ee:
23:0c:2d:b6:dd:2b:36:72:92:46:c5:67:13:35:f5:93:35:08:
14:a2:62:21:3e:b9:65:a2:d2:b2:76:00:3c:3b:04:11:aa:1b:
d9:51:b2:93:39:3f:54:d1:81:9d:34:08:fe:67:39:4e:d1:ec:
31:b9:53:ee:d0:40:d3:70:8b:6b:21:e0:4f:d3:88:6f:31:6f:
fb:6d:58:63:cd:ad:df:4a:0c:67:74:c2:33:b0:da:63:63:3e:
79:32:49:9b:c3:67:fa:b3:69:49:bf:de:fd:db:ca:41:c6:ed:
1a:e5:e8:b0:fe:fd:03:d4:7f:05:af:03:f7:c0:32:3d:3d:c2:
d5:ed:fd:27:98:71:91:e1:d5:48:8a:07:a0:b8:f0:9d:e6:3c:
79:d3:4d:7b:83:68:c7:a1:5a:0b:eb:1f:36:c5:5e:87:9c:7d:
9f:99:ce:66:6b:78:f8:2d:03:36:6b:90:be:11:15:0f:fa:06:
9a:55:10:8d:87:57:6b:68:87:5d:f6:dc:01:e9:02:2b:fe:54:
f3:68:91:a8:5d:33:05:b4:40:58:b2:bc:23:80:93:75:4e:40:
74:91:a4:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:59:42 2025 by rpki-client