Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/58338d87-0d2e-38fc-b96d-5c89f8fc72ac.roa
File: 58338d87-0d2e-38fc-b96d-5c89f8fc72ac.roa (raw, json)
Hash identifier: N71fYp85XlKdv14RUV/xeHEjx7ZhpvpYfmht5m6h2HU=
Subject key identifier: 77:85:EC:4B:E4:8C:E6:BB:A3:63:F1:A8:FA:52:9E:CC:A1:81:25:85
Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial: 010D0C9F43285848A9962722520608C33F185AC0
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/58338d87-0d2e-38fc-b96d-5c89f8fc72ac.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 16509
IP address blocks: 158.115.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:27:22:52:06:08:c3:3f:18:5a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=f8d6ea4c-5099-4640-9d0c-36c69e6cbf7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b3:42:97:31:bb:f4:1d:a9:7a:19:9a:da:f1:
45:54:43:c4:15:ca:7b:67:12:dc:b9:ac:10:a0:b3:
88:44:23:98:0e:74:c4:69:5a:3b:8b:61:81:a7:96:
52:39:e1:44:1d:f1:e9:32:43:ad:97:49:41:90:67:
90:0f:05:ef:ec:49:12:af:72:ba:2c:26:ac:05:f6:
34:06:ea:db:a2:99:9d:e2:62:69:eb:ac:0e:25:14:
f7:bc:de:07:13:ac:dc:5b:89:82:a1:e3:6c:26:85:
7d:58:83:72:f8:62:f1:00:1e:4c:4e:e6:fb:89:90:
c6:74:4c:ce:5b:33:5d:6b:89:7b:e2:ad:2d:f0:6d:
dc:72:fe:52:5f:a4:f1:ff:53:e7:b4:a2:8e:43:7f:
ac:07:3e:ff:a2:49:d2:4f:d9:b7:5b:54:f5:16:e9:
f5:31:d6:b0:a2:ea:fc:93:e5:49:24:9c:fe:a3:a5:
f0:de:e0:1a:c6:67:83:cb:4c:b6:8a:c9:a0:58:79:
75:01:38:46:ec:51:bb:ac:3a:ce:f3:11:dc:34:22:
86:a2:c9:18:60:0f:74:46:b2:04:6e:58:2e:81:3a:
5e:e1:c7:fc:d3:e1:55:e5:d3:4f:9a:62:19:32:7c:
02:98:2a:dd:4a:22:ad:91:8e:45:9a:54:ee:98:43:
85:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:85:EC:4B:E4:8C:E6:BB:A3:63:F1:A8:FA:52:9E:CC:A1:81:25:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/58338d87-0d2e-38fc-b96d-5c89f8fc72ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
X509v3 Authority Key Identifier:
keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
sbgp-ipAddrBlock: critical
IPv4:
158.115.159.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:70:ae:d0:ba:81:5b:67:7d:de:70:4d:6f:cb:64:6e:ab:ed:
07:e1:a0:43:6e:00:9b:66:20:21:2a:a0:48:2a:3d:84:0e:cf:
46:02:cc:1e:23:2c:0a:6c:7c:81:c8:c6:4d:9e:c3:b7:46:08:
7b:a3:0d:b0:1b:cc:e2:96:b4:71:ed:a6:29:99:cc:99:8e:be:
7d:85:14:24:b8:ce:85:03:bd:39:6f:b5:34:d6:b7:3d:27:1e:
b4:c3:e9:8a:db:f4:05:e0:d5:51:d7:96:1e:c6:f4:3a:fb:5d:
5d:6a:58:f4:51:ba:35:20:02:70:43:52:77:98:84:4c:98:d1:
ce:76:8a:bb:66:03:a7:e9:dc:2c:e9:96:da:b2:7f:18:65:9c:
54:7d:24:b4:77:0a:9c:6f:e6:44:29:ea:8d:a8:8a:76:d7:24:
9a:4e:53:4f:1e:c4:07:c0:03:43:0f:97:2f:c6:93:82:0c:41:
2a:50:4e:6f:2a:cf:4b:3f:84:2f:50:82:ef:c7:83:a3:82:21:
58:01:85:e2:f4:81:4d:b3:c2:66:32:8e:53:d0:56:40:43:ed:
75:da:14:7c:7e:fb:4f:6f:07:2c:1f:85:5e:35:6f:82:a0:26:
ed:9e:7e:e6:04:2b:50:8a:4a:be:13:20:50:d1:6b:55:7d:cb:
2c:67:56:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 21:12:21 2025 by rpki-client