Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/1cafc32e-37ff-3be5-8b34-b31586912636.roa
File: 1cafc32e-37ff-3be5-8b34-b31586912636.roa (raw, json)
Hash identifier: wIJnR84DYv6M9qzP/hSKU02Tzbjs0ndP6RMHIH3lwK8=
Subject key identifier: 9E:E3:20:D6:41:C2:D4:7F:9D:55:FF:90:33:C9:C2:C0:BB:17:41:3F
Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial: 010D0C9F43285848DBD665E5FB4E11FAD6E7ACF0
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/1cafc32e-37ff-3be5-8b34-b31586912636.roa
Signing time: Wed 12 Feb 2025 14:00:53 +0000
ROA not before: Wed 12 Feb 2025 14:00:53 +0000
ROA not after: Tue 13 May 2025 13:00:53 +0000
asID: 16509
IP address blocks: 158.115.157.0/24 maxlen: 24
2606:7bc0:1092::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:db:d6:65:e5:fb:4e:11:fa:d6:e7:ac:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Validity
Not Before: Feb 12 14:00:53 2025 GMT
Not After : May 13 13:00:53 2025 GMT
Subject: CN=0b492e39-d0db-43dd-b910-a4f1d40c9092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ec:83:85:55:d2:a9:21:77:73:2d:6e:59:fc:
a5:2d:0c:a6:6f:38:b4:32:ad:c9:cb:85:95:5d:a0:
ec:27:ed:67:0f:c7:4d:bc:62:f5:93:bb:6d:19:d4:
a3:df:a8:9a:69:1f:f5:55:de:f5:fd:b2:46:53:7d:
ca:8e:0c:72:6b:ac:0c:76:c0:9c:10:4d:a2:a7:f3:
79:7f:dd:5a:59:6e:f1:a6:01:ac:a4:51:96:d7:0b:
de:55:6f:88:bb:17:45:7f:da:8d:f7:4e:09:4b:b2:
83:12:7f:14:d5:ff:c3:f1:37:4e:e3:e1:0d:4d:a6:
30:f2:ad:71:a0:db:32:4f:d2:76:71:b0:ac:f4:be:
09:b3:f4:f8:5c:86:f2:5a:05:2d:28:09:75:3c:c7:
d6:c4:b3:2b:b3:c2:8a:b3:a5:bc:34:64:8b:f9:3c:
04:99:54:85:6c:c5:7d:76:bb:43:09:0a:ef:57:2f:
0c:03:77:66:93:b9:8d:a1:5a:b1:34:2a:ab:a3:9b:
d5:3e:43:2e:12:d0:8e:14:b3:bb:0e:a0:14:fb:db:
0e:82:dc:96:83:d7:36:3c:93:a9:b4:80:26:fd:ec:
fa:83:d2:d0:4e:8b:fe:a7:7d:63:e9:73:e5:10:2c:
f3:4c:31:67:02:71:44:a5:3a:0b:dd:70:f2:b6:84:
21:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:E3:20:D6:41:C2:D4:7F:9D:55:FF:90:33:C9:C2:C0:BB:17:41:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/1cafc32e-37ff-3be5-8b34-b31586912636.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
X509v3 Authority Key Identifier:
keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
sbgp-ipAddrBlock: critical
IPv4:
158.115.157.0/24
IPv6:
2606:7bc0:1092::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:ae:dd:33:9c:94:bb:4d:25:97:06:00:a7:ea:66:22:fb:26:
4f:49:0b:27:96:0f:f9:4a:78:8d:ad:10:66:23:3b:6f:64:48:
f7:5f:bd:08:a0:15:c6:fd:0c:5a:42:b5:06:22:8a:0c:6c:4f:
56:d2:c6:32:ad:a6:0b:58:45:8d:cc:bd:40:31:70:e2:4c:72:
a3:d3:bc:54:b7:0a:76:e7:65:96:5d:f5:7d:cf:c6:bb:97:9a:
92:d9:0e:fe:c2:cd:86:ee:36:2d:8f:2a:a8:2e:19:a1:96:71:
7b:1b:66:42:15:e7:89:a5:08:66:d9:05:1c:e5:50:fe:17:16:
0a:28:7f:4f:81:84:fa:9b:6b:25:5e:f7:b1:75:51:12:2a:68:
3b:59:50:e3:a8:c0:e4:0a:d5:1f:ea:31:ee:78:61:b3:4c:27:
c8:ff:ce:8c:a1:f2:32:9e:90:c3:a7:26:8e:2e:11:d1:75:06:
6e:6d:08:c9:3a:55:e2:33:56:28:55:ee:da:71:ae:64:33:7d:
fd:ca:ba:5e:b4:ca:47:20:ac:21:e6:b1:bd:fe:08:e6:0c:56:
81:71:cd:71:41:1a:e9:be:34:77:3d:24:e2:0c:24:80:85:6b:
27:e2:61:a0:75:bd:4e:91:46:3e:c4:7d:48:d9:cf:4d:ff:4e:
f9:71:68:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:19:40 2025 by rpki-client