Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/43efcacb-514e-315a-9a6b-0959bf9e9dcf.roa
File: 43efcacb-514e-315a-9a6b-0959bf9e9dcf.roa (raw, json)
Hash identifier: 5dFoTpYWmKW4Y9pjHcT5+ZSoug86rWDSl7+2C6OEkqE=
Subject key identifier: CB:78:46:81:92:57:CE:56:4C:75:22:C4:BA:47:24:22:54:64:95:71
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F43285847DC649EC40541F12957199F80
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/43efcacb-514e-315a-9a6b-0959bf9e9dcf.roa
Signing time: Wed 13 Nov 2024 02:00:28 +0000
ROA not before: Wed 13 Nov 2024 02:00:28 +0000
ROA not after: Tue 11 Feb 2025 02:00:28 +0000
asID: 852
IP address blocks: 154.20.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:dc:64:9e:c4:05:41:f1:29:57:19:9f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Nov 13 02:00:28 2024 GMT
Not After : Feb 11 02:00:28 2025 GMT
Subject: CN=4428d6a6-6114-42dd-bed4-85d9aace38f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a2:76:ea:3c:b6:16:cb:36:05:b8:09:6b:43:
5a:ef:56:47:94:54:a4:08:28:70:bd:69:76:54:ad:
d1:0f:d1:63:aa:67:43:fa:e4:4d:71:69:74:6b:68:
02:c2:32:32:8c:47:19:ee:b8:40:c4:78:c0:4f:9c:
e2:dc:6a:7e:cd:b5:a3:49:0b:31:07:17:c8:a4:55:
d9:24:e7:66:f7:25:6a:d6:ff:1c:1b:23:76:5f:0b:
28:8a:2a:7c:62:f8:56:42:fd:99:53:ba:34:96:40:
4c:16:21:b3:b3:c1:4b:23:c1:65:9b:fa:07:b9:2b:
34:68:af:00:39:59:47:2e:ae:3b:a2:84:7e:0d:54:
17:60:d0:20:85:20:c1:4e:02:d5:cd:2d:78:d1:e8:
9d:2d:15:55:5f:e0:07:0e:af:3c:06:2d:c4:27:ee:
96:e0:6d:16:02:9a:78:44:ba:53:00:99:6d:2b:f1:
91:e6:a1:4b:bc:de:e8:8c:c6:30:80:88:42:2c:10:
6d:d1:c4:b6:d9:77:1f:53:49:35:70:b8:e3:8b:82:
62:f8:3f:2d:a5:6a:a5:8f:9f:aa:8b:5f:e4:2b:57:
9e:43:14:47:e2:a8:0f:1c:2d:5b:d0:e0:ca:c0:fa:
8d:76:5d:1e:d7:4f:f8:e7:d1:e0:ad:2a:5c:ba:5c:
a9:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:78:46:81:92:57:CE:56:4C:75:22:C4:BA:47:24:22:54:64:95:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/43efcacb-514e-315a-9a6b-0959bf9e9dcf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
154.20.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
f6:d6:07:bd:50:64:90:b3:6e:87:c9:d9:ab:07:83:e4:23:18:
0f:0b:66:d4:96:a7:df:22:e2:7c:63:89:c6:e5:00:78:0a:bf:
82:be:c2:33:cb:f2:e4:7b:41:c1:37:d4:73:b9:af:3c:0a:83:
af:6a:bf:29:ba:2a:31:5a:7f:2c:9d:42:60:7d:49:f5:42:73:
93:4e:9d:b2:82:f3:15:c1:33:52:e4:9b:1a:c6:15:8f:a2:ec:
83:4e:2a:c0:0c:02:23:3a:1a:92:1d:b4:d2:95:55:87:c8:02:
1d:66:37:e7:4f:99:c7:70:af:11:c4:94:af:70:31:6d:cb:e8:
17:80:f3:d7:8b:39:62:14:13:b8:8b:3f:08:20:b5:51:b7:13:
eb:03:13:cb:cc:e7:c9:01:f9:8a:53:a0:b6:76:a1:0e:b1:6a:
31:5f:96:14:12:4b:c4:b4:ca:1f:ed:c4:39:43:13:99:85:6a:
c4:b0:3c:b3:f2:ea:ac:5d:10:10:14:55:2a:2b:6d:c3:10:6a:
b9:be:31:e5:f4:ae:a6:10:15:90:81:74:27:16:62:6d:0d:99:
f7:34:bf:71:c9:25:74:f3:a6:d7:38:7a:e1:bf:75:05:11:af:
e8:08:53:c6:f6:d2:be:12:55:5a:1f:b6:44:51:ba:c0:00:fd:
c8:f2:d0:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:19:01 2025 by rpki-client