Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/ba6b1a75-088e-30b8-a0f9-700a23d4f756.roa
File: ba6b1a75-088e-30b8-a0f9-700a23d4f756.roa (raw, json)
Hash identifier: AfZU/EkHGccpF0vwhJb64VaZYpPVU3p0iFuKRybCFkg=
Subject key identifier: 74:65:06:BC:23:65:B1:ED:F6:6F:71:CA:C3:9D:30:47:36:A9:2D:0A
Certificate issuer: /CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
Certificate serial: 010D0C9F43285847FF4A4EC82A03BC1E8A662960
Authority key identifier: 92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/ba6b1a75-088e-30b8-a0f9-700a23d4f756.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 197715
IP address blocks: 104.156.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:4e:c8:2a:03:bc:1e:8a:66:29:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=917b6cb4-e1b3-4b49-864f-64f1a5cf48b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:6d:36:d2:dc:4d:6a:b7:1d:37:56:12:2e:0b:
02:39:c0:fa:e0:0b:1b:35:4d:08:c8:96:73:b2:53:
60:07:ac:66:22:5f:d7:b9:76:2a:84:ed:2a:64:7b:
71:04:ff:f4:44:78:6e:2f:0b:79:a4:e6:e8:fa:4c:
0c:68:c0:8e:b4:ed:0a:81:c1:9a:46:5c:9f:3a:a6:
80:8c:d6:65:9b:3d:93:7b:51:ba:b8:8a:09:f5:27:
db:ba:1f:e4:b5:19:32:4f:9c:46:a6:88:36:67:5f:
24:54:2b:b9:71:fd:bb:12:2c:23:4b:14:3a:11:0c:
31:b5:d5:45:94:be:dc:c1:50:39:90:d4:fa:9a:d5:
a6:ab:44:75:49:ad:06:c9:a3:ed:05:80:5d:05:47:
e6:fb:c2:af:25:28:2d:8d:72:fd:90:8b:10:dd:aa:
fd:5c:4c:47:57:ef:b3:2d:a3:28:53:7c:04:ab:76:
ed:ce:a2:74:09:58:f3:4e:47:0a:d1:31:e9:93:44:
22:2d:7a:b9:ac:f1:23:06:6e:ad:81:2c:b9:1a:9f:
2b:af:80:20:a6:59:c7:3d:b4:ec:40:17:49:d9:a2:
40:2d:be:55:a5:fa:89:a2:11:74:b2:e1:40:da:c6:
34:50:84:f7:27:95:42:15:ed:30:6a:fc:57:d1:ce:
ce:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:65:06:BC:23:65:B1:ED:F6:6F:71:CA:C3:9D:30:47:36:A9:2D:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/ba6b1a75-088e-30b8-a0f9-700a23d4f756.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl
X509v3 Authority Key Identifier:
keyid:92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
sbgp-ipAddrBlock: critical
IPv4:
104.156.151.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:0a:5d:23:00:a5:69:7b:7c:c5:fc:9c:28:a3:0d:c9:4c:1f:
b7:21:93:57:7b:98:b3:10:4d:13:1d:1c:7f:80:31:8a:1e:9e:
41:3f:aa:e5:78:60:c0:d6:64:ed:58:06:8c:93:17:9a:bc:18:
0b:fc:73:25:04:21:5a:b2:66:4b:a0:52:85:b8:31:86:76:e3:
d8:d3:63:48:6c:b4:5e:76:74:e5:d1:3a:7e:29:68:dc:8c:4d:
c5:57:42:88:29:5f:d8:93:ae:d2:a0:ce:e2:6e:af:8a:2d:ab:
c2:8c:cd:3b:93:24:c9:bf:de:a1:57:5f:6f:ff:e5:9b:3c:a1:
d8:bd:6a:71:ea:c2:69:e2:9d:a8:c7:15:3f:05:ab:46:24:d2:
1a:07:40:cc:2c:c1:b9:ab:fc:7d:27:ac:e5:cb:37:0e:ae:d2:
36:cb:c2:42:a7:bc:eb:ae:81:5e:80:c0:e0:8c:00:bb:8c:c9:
be:11:34:9d:00:2a:c3:0f:e1:a9:5b:b1:0b:e8:46:14:cd:05:
de:96:bf:54:69:96:f2:f3:f3:82:30:75:f9:b0:1d:f0:91:8a:
a2:26:b1:f4:9d:21:40:2f:42:06:4b:a9:0e:60:cd:7a:92:30:
6f:1d:d7:12:f2:e2:37:58:3e:d8:dc:2d:6c:b6:aa:81:f4:85:
05:75:9b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:21:02 2025 by rpki-client