Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/a31fe149-f14e-36f1-82c6-a4875e810e1b.roa
File: a31fe149-f14e-36f1-82c6-a4875e810e1b.roa (raw, json)
Hash identifier: 5CVof2EZCG9JslKXT33sM78mcfPR4vKzWM1DNuhUSHo=
Subject key identifier: 7F:92:7B:AF:D7:E5:5A:06:6B:DA:6C:C7:E3:AD:C5:BF:B7:7E:D6:8D
Certificate issuer: /CN=c43335db-c55b-443e-b20c-5c74e1c256c9
Certificate serial: 010D0C9F43285848394C8F099E28380CBB86CC80
Authority key identifier: C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/a31fe149-f14e-36f1-82c6-a4875e810e1b.roa
Signing time: Mon 16 Dec 2024 08:42:13 +0000
ROA not before: Mon 16 Dec 2024 08:42:13 +0000
ROA not after: Sun 16 Mar 2025 07:42:13 +0000
asID: 54535
IP address blocks: 156.37.202.0/24 maxlen: 24
156.37.203.0/24 maxlen: 24
156.37.250.0/24 maxlen: 24
156.37.251.0/24 maxlen: 24
156.37.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:39:4c:8f:09:9e:28:38:0c:bb:86:cc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c43335db-c55b-443e-b20c-5c74e1c256c9
Validity
Not Before: Dec 16 08:42:13 2024 GMT
Not After : Mar 16 07:42:13 2025 GMT
Subject: CN=a5c02855-538d-4657-b429-9f1d1205f7a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:5f:85:ee:96:a0:41:1f:af:b2:f4:dc:83:30:
0a:eb:da:eb:05:c0:eb:8e:74:b9:6a:23:76:78:4a:
26:96:d5:39:0a:19:09:a5:13:fb:ec:f6:3a:ec:d0:
c0:33:c7:a2:7a:e3:79:94:41:50:5b:98:56:d9:c9:
f8:24:12:01:77:25:21:02:e1:6e:8f:85:48:d4:f5:
4a:6d:cb:43:7b:91:a5:58:9a:49:1d:0b:c5:ef:b4:
02:b1:27:84:dc:41:af:2c:b1:f7:23:d0:f0:13:e1:
cb:6e:89:be:1e:8f:38:b2:53:42:e6:fd:ee:e8:ff:
62:60:5e:82:08:b6:17:e4:d8:90:37:5c:26:6d:a6:
33:d1:a6:79:87:aa:d3:d6:29:6f:2d:2a:6a:4b:5a:
6a:db:ed:2a:73:5d:e0:54:75:6e:1b:fd:20:4f:8a:
0b:99:1c:a5:a6:f8:f4:ba:fa:6a:7b:3f:ef:b6:b3:
63:d2:2d:16:79:f8:43:f0:49:8a:6a:57:de:3c:8f:
14:f2:45:56:a7:98:f2:5f:5f:5c:e5:b9:fc:6b:13:
1d:dc:51:2e:df:19:07:30:4b:56:76:3b:21:3c:08:
79:ab:4f:69:31:d0:44:d6:89:6c:4a:fd:ed:99:d9:
ed:92:34:df:42:11:9f:40:05:84:a8:da:20:ec:05:
19:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:92:7B:AF:D7:E5:5A:06:6B:DA:6C:C7:E3:AD:C5:BF:B7:7E:D6:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/a31fe149-f14e-36f1-82c6-a4875e810e1b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl
X509v3 Authority Key Identifier:
keyid:C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer
sbgp-ipAddrBlock: critical
IPv4:
156.37.202.0/23
156.37.250.0/23
156.37.253.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:74:c9:82:c6:2c:63:d8:96:88:7a:02:62:68:da:3b:54:99:
6c:40:98:28:2e:8f:0f:c9:ff:b4:ca:a9:86:db:1d:f1:46:2d:
cf:76:42:5b:73:a2:5a:e1:2a:48:d3:c5:66:93:c7:a9:74:8d:
b3:96:01:07:d9:72:45:f7:58:ab:c1:89:62:64:d3:3d:e7:a9:
6b:24:fc:00:5b:d8:79:60:a4:de:c3:9b:41:e2:af:d1:ad:e9:
e3:7a:8a:6a:4c:92:00:8f:ef:3d:ce:19:ad:80:d8:19:ed:72:
72:e7:95:fe:2f:82:4a:81:68:67:08:07:62:d8:cb:f3:8a:ba:
d4:78:9d:7a:74:e2:1f:2e:06:28:0f:8d:ae:62:7a:32:55:90:
01:fe:c2:51:e8:b1:ff:46:72:58:88:17:d5:b6:7e:5a:66:b7:
f4:b2:9d:6a:7e:00:ff:77:f5:a9:5e:38:ce:5e:f4:69:a9:14:
75:9e:9a:5b:03:65:77:3a:76:cc:38:7a:45:68:28:6b:74:e3:
81:0a:22:88:09:36:f6:c0:e2:43:cd:dd:a5:2d:31:9c:aa:b1:
4f:97:2d:5c:b3:38:d4:ac:6e:a5:46:73:c4:71:2e:9e:37:8f:
24:56:05:31:e2:ec:97:8c:3e:28:d5:b3:a1:ae:38:6f:91:2c:
54:88:13:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:09:58 2025 by rpki-client