Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/7c848122-d2b1-3ef9-8a5d-2af4801aefbe.roa
File: 7c848122-d2b1-3ef9-8a5d-2af4801aefbe.roa (raw, json)
Hash identifier: I/iB2H0k1oy6tOYzQIz3OyTlav0X2U/kKGv0UTXHy4w=
Subject key identifier: 65:D2:7B:18:C1:E3:6C:DD:BE:3B:01:3D:43:6B:8A:F1:5E:8F:6D:50
Certificate issuer: /CN=4f4faf2a-17ff-4827-9bec-c6ffcb2ad092
Certificate serial: 010D0C9F4328584839EACADC8619F4255BE7472B
Authority key identifier: E0:13:5E:C0:DD:C6:72:A7:38:54:95:87:17:94:16:8E:6D:99:70:2F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/7c848122-d2b1-3ef9-8a5d-2af4801aefbe.roa
Signing time: Mon 16 Dec 2024 14:00:51 +0000
ROA not before: Mon 16 Dec 2024 14:00:51 +0000
ROA not after: Sun 16 Mar 2025 13:00:51 +0000
asID: 396982
IP address blocks: 152.131.248.0/22 maxlen: 22
152.132.248.0/22 maxlen: 22
152.133.248.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:39:ea:ca:dc:86:19:f4:25:5b:e7:47:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f4faf2a-17ff-4827-9bec-c6ffcb2ad092
Validity
Not Before: Dec 16 14:00:51 2024 GMT
Not After : Mar 16 13:00:51 2025 GMT
Subject: CN=337d4e5e-a8d6-4bb0-8754-e2aefe67f4a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:08:cd:c2:86:47:88:1e:16:57:c7:6b:0a:e6:
8c:9d:df:36:52:6d:1f:89:3c:6c:d7:72:c8:08:df:
eb:17:81:41:11:38:eb:f6:17:28:3c:f3:52:06:8d:
b6:f8:fb:76:ca:ce:03:d8:d4:3c:eb:de:a6:54:ea:
ef:0b:69:fb:af:0f:33:23:cd:37:01:22:49:55:c5:
df:97:20:93:3d:eb:a3:e9:3a:a2:43:ed:1e:f1:48:
37:75:a2:c4:e7:d9:91:59:b2:84:26:50:65:80:0e:
a3:90:b4:91:85:dc:31:fd:51:40:b8:5f:5b:80:79:
90:2a:16:5e:86:6e:c4:40:07:b1:b1:f3:ff:bf:3b:
38:cd:3b:d4:f6:9e:12:e5:09:59:9e:c6:ca:97:de:
20:26:60:2c:c6:b4:38:70:f7:aa:27:5e:c2:09:c1:
48:d6:f6:30:f6:df:17:d3:44:2b:52:99:0f:23:2a:
dd:b3:db:4a:1c:30:33:05:11:ae:e7:42:83:4a:14:
a9:22:9b:77:b9:2f:dc:a6:9e:c9:98:27:3d:77:e2:
78:90:40:53:27:b5:3f:c0:9d:7c:f7:59:86:c7:8b:
e7:01:bf:e8:8e:b9:07:ce:99:24:c3:f5:f5:17:a8:
5b:5f:34:df:8b:bf:25:2a:81:5f:4e:59:fe:30:87:
4a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:D2:7B:18:C1:E3:6C:DD:BE:3B:01:3D:43:6B:8A:F1:5E:8F:6D:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/7c848122-d2b1-3ef9-8a5d-2af4801aefbe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.crl
X509v3 Authority Key Identifier:
keyid:E0:13:5E:C0:DD:C6:72:A7:38:54:95:87:17:94:16:8E:6D:99:70:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.cer
sbgp-ipAddrBlock: critical
IPv4:
152.131.248.0/22
152.132.248.0/22
152.133.248.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:04:b6:9f:ba:49:ee:dd:12:c8:77:0d:da:aa:ac:cf:d4:0f:
6d:93:19:5a:c8:f5:d3:40:b0:67:80:13:9a:a8:44:46:20:d3:
0a:29:86:b6:5a:3d:bd:0c:48:e4:7f:f6:ad:7b:30:7d:38:ae:
2d:e5:51:93:f0:34:75:36:18:0a:74:ce:b0:81:77:3b:fb:06:
3e:6b:62:df:e9:eb:71:f3:87:8d:2b:0e:3b:a9:d1:d2:23:72:
68:81:28:7c:66:18:44:1c:2c:df:ae:9f:2f:3c:82:9a:37:36:
69:54:5a:21:e8:f9:ca:d6:cb:39:da:c0:1c:5f:2d:09:15:10:
4a:ce:03:12:d6:7f:56:f1:a8:80:6e:a5:2c:46:5d:a7:4a:47:
72:b2:bb:80:52:63:2c:a0:8d:41:fd:b5:70:04:8c:ca:52:fd:
bf:30:5c:d4:94:58:70:35:b9:05:61:7e:60:c0:bc:59:23:2b:
05:59:83:65:6e:b1:f5:9f:98:68:11:c9:7b:ac:eb:52:bd:c3:
d7:69:e0:dc:c0:4c:76:fd:26:6a:93:b2:c4:74:a7:df:1b:0c:
91:89:f8:e7:1a:07:90:b9:36:10:42:87:d7:57:19:02:ea:2c:
26:fc:72:2a:2b:de:57:1a:5d:95:5a:30:cd:8c:fd:22:c7:a7:
a4:11:ec:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:05:39 2025 by rpki-client