Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/dd6d5920-ffeb-3cb0-9f4f-42fa6e6974f2.roa
File: dd6d5920-ffeb-3cb0-9f4f-42fa6e6974f2.roa (raw, json)
Hash identifier: K09Gs00WKqWdHjn6vVGHR/q3K4cUBXh1wdyS33qJmno=
Subject key identifier: 12:41:71:26:F0:30:7C:13:FC:8C:54:AF:8E:21:6D:20:E0:05:15:7D
Certificate issuer: /CN=f5f2c804-b3b9-4b56-a719-dd72262a7a6d
Certificate serial: 010D0C9F432858480BDA754E478BD603E76694D6
Authority key identifier: C4:60:1F:97:B9:F6:89:F4:CF:39:BD:79:3F:D8:3D:23:75:EC:42:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/dd6d5920-ffeb-3cb0-9f4f-42fa6e6974f2.roa
Signing time: Sat 30 Nov 2024 02:00:39 +0000
ROA not before: Sat 30 Nov 2024 02:00:39 +0000
ROA not after: Fri 28 Feb 2025 02:00:39 +0000
asID: 26512
IP address blocks: 168.245.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0b:da:75:4e:47:8b:d6:03:e7:66:94:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5f2c804-b3b9-4b56-a719-dd72262a7a6d
Validity
Not Before: Nov 30 02:00:39 2024 GMT
Not After : Feb 28 02:00:39 2025 GMT
Subject: CN=aa248ee0-5631-4f04-92d0-4bfeb5d9fa3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:62:d3:09:1b:18:f7:a0:8c:20:2a:21:8c:c8:
e4:04:58:e6:01:9a:78:f3:a9:da:db:08:55:13:79:
54:a0:6e:b5:ba:8a:21:dc:71:12:57:19:d4:27:1f:
88:f7:15:83:79:54:ad:30:74:ea:38:d7:bd:ae:0a:
0b:af:25:b2:18:d6:15:a6:19:d2:92:93:79:8a:0f:
03:b6:01:f5:91:00:d9:34:1a:c4:f3:16:99:7a:a4:
58:c8:4e:da:c0:88:8c:9e:76:2c:e2:79:14:bc:e6:
1b:97:be:c4:4c:bc:61:2a:6c:5a:6e:e2:bb:14:89:
97:41:26:6f:a5:3b:35:17:73:f1:4a:ee:b7:97:23:
32:d4:95:3c:b5:66:97:41:f7:59:29:09:c9:20:e9:
c4:10:4c:5a:e0:d1:f7:24:01:ad:3b:fd:2f:fd:5f:
05:7b:10:07:81:81:cb:fa:6a:c5:5d:9d:d5:73:9d:
11:a6:20:d9:ed:59:15:ac:e0:d8:4f:13:93:b0:14:
ea:86:f0:34:71:49:28:04:0d:ec:38:c3:5d:6c:02:
7a:e6:1b:50:8f:61:32:a0:02:0c:01:4c:63:0d:d2:
34:0a:cc:df:68:c0:1b:29:93:14:77:df:82:a1:83:
ee:a5:76:05:e5:f8:9c:31:b2:6a:9d:e2:3c:b4:65:
84:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:41:71:26:F0:30:7C:13:FC:8C:54:AF:8E:21:6D:20:E0:05:15:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/dd6d5920-ffeb-3cb0-9f4f-42fa6e6974f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.crl
X509v3 Authority Key Identifier:
keyid:C4:60:1F:97:B9:F6:89:F4:CF:39:BD:79:3F:D8:3D:23:75:EC:42:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer
sbgp-ipAddrBlock: critical
IPv4:
168.245.153.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:0d:87:33:93:81:04:6e:83:27:f1:ae:ce:55:60:b3:af:3c:
ed:3f:c7:26:bd:4c:94:15:66:98:03:e0:f4:90:7d:d1:ad:0d:
2b:63:4d:a1:e0:1d:76:55:c3:d2:ea:2d:e7:e5:b2:bb:71:e0:
e1:36:1a:0c:4d:d8:4d:51:62:24:51:39:7a:12:25:05:2b:fb:
72:3a:60:6a:61:d7:17:89:f5:ae:e6:aa:90:b7:c8:01:45:86:
b7:62:ee:f3:fe:e8:ab:a9:02:ff:3b:39:94:56:09:cd:81:18:
04:eb:c7:df:f5:35:f5:16:5b:ee:79:87:0f:ea:d1:24:fa:fc:
cc:35:09:7f:07:c4:32:97:d9:9d:7e:74:93:87:95:96:b9:82:
d3:42:38:03:44:2c:85:f8:66:87:6a:92:44:ca:28:00:31:d9:
62:09:7c:81:a1:10:42:99:22:3e:3b:7e:97:77:50:98:e5:84:
53:49:8b:16:ff:07:28:22:c5:28:ab:8d:1a:26:e2:46:73:8d:
13:02:55:1b:dd:96:dc:82:36:be:1c:c5:85:d3:d6:28:c0:df:
04:ec:5b:e1:94:96:af:04:0f:28:f4:1d:d6:2e:ef:23:f4:d9:
d2:66:c8:34:3e:91:9f:55:ab:f9:f6:3d:de:75:85:3a:81:27:
31:f7:49:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:53:21 2025 by rpki-client