Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/5c304d34-8950-35d5-acec-d2d13773b41a.roa
File: 5c304d34-8950-35d5-acec-d2d13773b41a.roa (raw, json)
Hash identifier: k1VCqJR4dw8kXS/QF9s14fuUYyOYPC6AWyBEh+NATwU=
Subject key identifier: A2:8F:62:F7:6F:C9:65:7F:64:15:4D:E9:03:6E:A4:E0:44:87:AE:1A
Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial: 010D0C9F43285849552953F200781FECB5E7EC00
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/5c304d34-8950-35d5-acec-d2d13773b41a.roa
Signing time: Fri 28 Mar 2025 01:00:41 +0000
ROA not before: Fri 28 Mar 2025 01:00:41 +0000
ROA not after: Thu 26 Jun 2025 01:00:41 +0000
asID: 16509
IP address blocks: 216.157.130.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:55:29:53:f2:00:78:1f:ec:b5:e7:ec:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Validity
Not Before: Mar 28 01:00:41 2025 GMT
Not After : Jun 26 01:00:41 2025 GMT
Subject: CN=cc627474-ec58-40b3-802d-c01a8049af22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:54:c9:60:7a:be:62:50:40:ed:2e:19:44:b7:
e2:75:5f:76:42:5f:e6:24:8b:8c:ac:e9:bd:fb:55:
c5:65:57:93:1f:6b:2e:6a:8d:b0:1b:9b:d2:a7:96:
54:0c:91:a9:ee:08:2d:4b:3a:ae:db:45:7f:ca:81:
00:78:b5:a6:c3:97:fa:24:45:f6:c4:b3:0e:98:71:
ad:c8:fd:c0:2b:8a:e1:f2:0e:1c:7e:f0:7e:98:c2:
63:73:bb:b2:00:81:1c:d7:81:cf:45:f1:1a:f2:f2:
98:23:5a:58:1f:37:2b:26:b3:e5:9b:b3:75:d1:42:
9a:fb:3c:3f:25:0a:df:94:33:88:92:72:11:47:f0:
89:ec:8b:50:d1:86:e2:ff:3d:36:fc:1a:2a:69:6c:
8c:8a:6b:02:6b:e8:7b:a7:a5:f3:49:db:d0:c9:66:
84:73:69:17:84:d1:53:c7:62:4d:d2:7a:61:91:e8:
59:72:56:7a:dd:b6:ad:19:c2:8e:96:91:41:42:35:
80:3b:fd:68:47:6b:42:38:09:f3:72:22:01:08:7a:
6d:39:b6:9f:08:61:5e:32:e7:8c:b7:54:3c:f7:6a:
d2:93:3b:c0:5d:bd:69:5f:29:4c:33:1e:bf:71:af:
dd:35:e7:44:cc:bd:6e:27:cf:c0:d2:17:3b:0f:ea:
d2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:8F:62:F7:6F:C9:65:7F:64:15:4D:E9:03:6E:A4:E0:44:87:AE:1A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/5c304d34-8950-35d5-acec-d2d13773b41a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
X509v3 Authority Key Identifier:
keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
sbgp-ipAddrBlock: critical
IPv4:
216.157.130.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:ea:b3:77:58:6d:55:38:d2:bd:a5:7c:f1:c8:a0:65:a5:d1:
a6:e5:f4:e0:73:f5:44:0f:70:59:69:a8:d3:62:97:1d:77:29:
14:a7:62:24:a0:1c:de:d9:f2:1d:8c:6a:4f:d9:4d:a9:72:de:
cc:88:2f:be:64:3f:55:41:67:d5:01:03:3f:6e:a1:52:cc:2b:
c8:24:7a:e1:cd:16:7d:57:75:5e:e8:6e:1f:a8:7d:52:06:ed:
75:9b:f2:9c:e4:d7:b4:ed:7d:0d:ce:22:74:92:ea:70:d8:c1:
00:80:7f:ea:16:a6:cd:87:f2:c5:4e:05:d5:25:75:80:20:c6:
90:1d:4f:28:65:ea:d6:a6:f0:e3:e3:85:44:f7:36:85:61:0d:
7d:75:d6:ab:9e:b0:3b:e3:da:07:3f:71:04:c5:90:12:c0:99:
fc:67:57:4a:52:bd:30:c7:88:d8:de:f5:e5:9a:f8:ce:6e:e4:
7a:a9:e6:32:70:dc:55:b9:60:c4:77:4e:41:7b:5f:2c:3f:f6:
81:97:ed:71:d7:4a:74:2d:6e:df:7d:95:4b:bf:6d:5c:71:ed:
66:20:b4:68:dc:5e:dd:fa:92:e5:6a:b5:e3:c5:9f:21:ef:aa:
77:ad:d0:36:13:a7:2d:84:6e:68:e3:d0:c8:f3:d2:fe:64:fa:
7b:c3:9c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:15:29 2025 by rpki-client