Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/306a86e3-e465-306e-a63a-af539dc41a0c.roa
File: 306a86e3-e465-306e-a63a-af539dc41a0c.roa (raw, json)
Hash identifier: adVV1IbKoyh5JUanH73VYjXlsHXZLgTOQUa0oBkyJrU=
Subject key identifier: A2:66:77:CD:C8:D9:D0:7C:AA:B0:BC:05:F1:11:94:D8:6E:9C:86:25
Certificate issuer: /CN=d43161e4-dac1-407b-8f16-55e6ef100d0a
Certificate serial: 010D0C9F4328584871C07DD782A51F06DE075800
Authority key identifier: 0F:AD:FA:40:22:6B:5D:BA:CB:0D:38:35:36:8C:86:20:CC:D9:5E:B3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/306a86e3-e465-306e-a63a-af539dc41a0c.roa
Signing time: Sun 05 Jan 2025 14:00:52 +0000
ROA not before: Sun 05 Jan 2025 14:00:52 +0000
ROA not after: Sat 05 Apr 2025 13:00:52 +0000
asID: 24429
IP address blocks: 155.102.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:71:c0:7d:d7:82:a5:1f:06:de:07:58:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d43161e4-dac1-407b-8f16-55e6ef100d0a
Validity
Not Before: Jan 5 14:00:52 2025 GMT
Not After : Apr 5 13:00:52 2025 GMT
Subject: CN=4f4c6506-f1d7-44c7-94e7-7ff108663064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d2:e5:53:af:38:56:3b:60:78:52:27:17:b1:
a5:86:47:c4:17:2f:e5:9c:02:7c:9e:c0:50:b5:23:
0b:70:64:3b:92:9c:12:f5:19:fe:23:66:8c:ba:36:
ca:7c:87:b3:64:17:f2:9c:79:ac:36:bd:e8:4f:3a:
9b:87:31:c5:20:d4:d7:84:e6:94:af:de:da:68:37:
7e:49:d8:fc:69:f5:47:be:69:9c:ee:75:73:cd:d3:
ae:bf:67:52:1f:fb:92:d1:ec:07:47:b4:9d:63:98:
8b:b1:33:03:50:56:87:df:5b:9b:74:dd:69:85:06:
6e:0e:fd:52:27:b5:ec:a5:b7:70:0c:d7:ca:b2:59:
3b:80:db:b6:72:c4:65:d8:8d:de:00:6c:30:53:ab:
d2:f5:b8:80:a8:73:38:23:56:33:4b:8e:b7:ce:52:
8c:cd:bb:0a:ee:b4:bd:73:5d:87:e8:93:6b:40:6f:
be:1d:7d:5e:03:af:bf:ed:2f:27:b0:54:06:92:a4:
ef:2d:7c:11:10:b1:dc:ba:01:32:19:85:fc:fd:7c:
3e:1a:b4:38:9f:16:5c:72:af:ba:56:2f:9b:77:5c:
3c:fc:01:35:bf:f8:d4:f5:a6:a3:b0:c1:fd:57:88:
1c:f7:0b:5d:66:ae:e2:b8:77:58:50:e9:b2:40:e2:
47:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:66:77:CD:C8:D9:D0:7C:AA:B0:BC:05:F1:11:94:D8:6E:9C:86:25
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/306a86e3-e465-306e-a63a-af539dc41a0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/d43161e4-dac1-407b-8f16-55e6ef100d0a.crl
X509v3 Authority Key Identifier:
keyid:0F:AD:FA:40:22:6B:5D:BA:CB:0D:38:35:36:8C:86:20:CC:D9:5E:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a.cer
sbgp-ipAddrBlock: critical
IPv4:
155.102.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:59:ad:25:32:8c:af:8a:85:05:49:bd:cd:8f:c7:5b:61:f2:
57:d6:52:d9:ce:cc:22:91:97:36:8f:2b:d1:96:05:76:f5:4e:
9e:4a:fc:b8:8a:d7:04:3e:41:4c:a1:82:1d:94:cf:d6:8e:d4:
66:c0:e2:03:99:6c:8b:75:92:6f:ed:b4:dd:b2:e3:68:08:8c:
94:43:f9:52:14:f1:ef:16:41:48:41:9c:bf:70:59:d0:99:92:
18:e9:af:f2:1a:1a:dd:38:fd:d4:d6:53:d2:6d:28:03:b3:34:
36:af:82:b1:82:28:04:07:1b:21:ab:08:0c:6f:99:d3:12:35:
b4:ee:a4:97:a3:d8:d1:bf:25:a6:06:0e:3f:11:32:3a:d8:b1:
fd:db:aa:07:c3:98:89:94:0c:c3:79:b4:5f:62:a8:81:c7:9a:
56:d6:40:be:61:ab:9c:63:a5:61:fd:11:17:9f:ba:27:63:b6:
7a:ef:b5:82:f3:9d:fc:8a:5b:16:a6:7a:d7:31:97:ea:3c:a1:
c6:05:c5:cb:4d:1f:9b:12:65:9f:5c:23:71:e5:8c:c2:73:36:
f4:49:64:b3:83:22:d9:46:f5:8a:39:40:69:a6:c3:7e:05:4f:
13:b4:c4:5a:c3:de:d8:14:c8:7d:80:64:69:33:63:20:e9:6d:
75:86:84:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:50:18 2025 by rpki-client