Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c7a78ba0-1048-385f-a3a9-d82e7b7753f2.roa
File: c7a78ba0-1048-385f-a3a9-d82e7b7753f2.roa (raw, json)
Hash identifier: AztgX+fYUInZbbDtRBk05mVYNlSgUEHj0akujZ7xcBg=
Subject key identifier: 26:92:6B:63:B0:B0:B9:26:4C:A3:12:84:1A:84:5D:66:6B:11:54:D4
Certificate issuer: /CN=c43335db-c55b-443e-b20c-5c74e1c256c9
Certificate serial: 010D0C9F43285848394C8EC10172015642A98580
Authority key identifier: C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c7a78ba0-1048-385f-a3a9-d82e7b7753f2.roa
Signing time: Mon 16 Dec 2024 08:42:13 +0000
ROA not before: Mon 16 Dec 2024 08:42:13 +0000
ROA not after: Sun 16 Mar 2025 07:42:13 +0000
asID: 54535
IP address blocks: 156.37.204.0/24 maxlen: 24
156.37.205.0/24 maxlen: 24
156.37.224.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:39:4c:8e:c1:01:72:01:56:42:a9:85:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c43335db-c55b-443e-b20c-5c74e1c256c9
Validity
Not Before: Dec 16 08:42:13 2024 GMT
Not After : Mar 16 07:42:13 2025 GMT
Subject: CN=d55e8e37-a611-4a79-a998-2b935eabeb42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:dc:70:c8:3d:c3:35:7a:91:92:da:f6:54:45:
10:31:d7:b3:9b:02:47:fc:33:97:5d:df:35:2e:a8:
69:9f:7e:83:05:ad:91:76:31:c2:30:ed:1a:cd:72:
f7:bb:f4:96:52:b1:ef:83:79:e4:ad:21:06:54:09:
8f:da:59:45:77:bd:9d:b8:20:0a:bf:61:cb:cc:8e:
97:21:2b:6a:52:35:de:df:35:4a:4c:02:da:56:95:
7e:2d:58:a2:5d:b2:59:2d:3d:e9:18:41:9c:84:10:
31:6a:67:72:1c:5d:2c:1f:c2:fd:c9:02:74:3e:5e:
4d:3f:d8:b0:85:5e:e4:5e:d5:94:f7:5b:7a:33:49:
31:95:49:a8:a8:f6:e3:81:00:60:dc:0a:e1:c7:5f:
99:22:0c:03:e4:67:71:23:7e:85:01:5a:d5:04:d5:
ce:d6:45:66:a1:d8:4c:1c:56:3c:c9:6b:0c:c1:e1:
35:10:87:2a:e2:e7:b8:cb:16:93:c5:ab:b4:2b:9e:
fe:b9:42:de:31:21:06:f4:ab:32:5e:42:88:4d:26:
26:e8:a1:d2:29:9f:2f:2d:f7:a8:de:b2:39:b3:16:
a8:f0:78:1d:6f:6e:98:51:1c:dd:21:bc:62:c6:42:
5a:79:fc:30:8b:79:00:61:ff:e6:bb:4a:7e:af:fc:
98:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:92:6B:63:B0:B0:B9:26:4C:A3:12:84:1A:84:5D:66:6B:11:54:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c7a78ba0-1048-385f-a3a9-d82e7b7753f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl
X509v3 Authority Key Identifier:
keyid:C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer
sbgp-ipAddrBlock: critical
IPv4:
156.37.204.0/23
156.37.224.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:c4:58:80:04:e0:9c:fc:62:ba:43:7b:05:83:d0:f6:a2:e8:
9f:41:9b:68:2b:a0:62:da:57:d0:f8:6f:02:75:c2:9a:e5:16:
96:cf:de:dc:cc:5c:41:bb:9c:84:89:29:e6:40:4c:9c:73:0a:
fd:c7:ca:79:42:ae:d5:4e:e9:f0:74:60:53:41:98:51:95:d6:
9b:08:3f:52:3f:2b:3f:f5:55:17:d8:ed:21:8b:31:27:b8:db:
05:17:c6:a4:25:20:6a:bc:81:4c:87:13:2a:7f:8f:7c:f4:76:
55:fa:14:ee:68:98:60:fc:2d:dd:9c:85:00:6b:59:00:d2:7e:
7c:75:37:24:37:03:5c:5d:41:c4:c7:11:53:2e:24:42:ea:63:
c3:22:27:cc:4e:03:0e:e2:d9:e7:4b:a9:4a:fd:3f:dd:b3:e2:
30:84:b7:cf:bf:4a:c0:d0:8d:b4:80:be:bc:1f:2b:12:da:94:
6f:7e:8c:76:2c:ad:70:d9:3d:5c:56:97:21:82:e0:15:de:4e:
42:2d:77:9e:38:49:b2:b8:eb:8a:60:45:76:0f:94:7d:18:9a:
f8:a2:34:d2:53:97:63:35:ab:c3:19:d9:59:67:5c:72:aa:e5:
a5:19:8b:91:26:55:03:cf:a4:90:6d:24:ca:9e:44:41:7a:ca:
92:6a:08:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:34:28 2025 by rpki-client