Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/85240ca7-41e9-329b-8a29-307187f566aa.roa
File: 85240ca7-41e9-329b-8a29-307187f566aa.roa (raw, json)
Hash identifier: C57bRw1GH7/ZmbKEDlHqNv8mTnFfgicUOCF+1RTUtKk=
Subject key identifier: 3A:B3:AC:B4:35:3C:AE:52:CF:B3:66:1E:82:F8:F7:F1:E1:A4:9A:98
Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial: 010D0C9F43285848DBD66615253976D42D98CF80
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/85240ca7-41e9-329b-8a29-307187f566aa.roa
Signing time: Wed 12 Feb 2025 14:00:53 +0000
ROA not before: Wed 12 Feb 2025 14:00:53 +0000
ROA not after: Tue 13 May 2025 13:00:53 +0000
asID: 16509
IP address blocks: 158.115.158.0/24 maxlen: 24
2606:7bc0:1093::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:db:d6:66:15:25:39:76:d4:2d:98:cf:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Validity
Not Before: Feb 12 14:00:53 2025 GMT
Not After : May 13 13:00:53 2025 GMT
Subject: CN=5677f75e-54dd-413d-a43a-fde9da62ba55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c5:96:a8:fb:da:7a:5d:c3:85:d5:27:03:2c:
48:6c:f5:b2:83:90:14:50:af:35:c4:6f:2f:2d:aa:
f7:a4:69:8c:66:07:79:21:3a:27:08:10:54:40:43:
fd:b7:da:f9:72:42:49:08:99:32:1c:a3:6d:97:fd:
b0:86:4a:9f:4d:51:41:41:d9:53:bb:e7:58:1c:ed:
c7:64:19:a0:e9:0e:8e:e7:c0:ec:b5:b1:13:45:5f:
1a:33:4e:66:1f:ff:12:0c:13:92:c1:2c:e6:86:58:
27:4c:87:4a:c6:c7:4a:9c:b2:ea:73:92:55:df:dc:
5e:66:13:5a:dd:1b:6f:43:7d:2f:58:ab:f5:13:b1:
01:39:c5:85:86:40:1c:7d:df:b4:1c:41:15:92:15:
30:67:d6:81:2e:34:e4:e9:37:31:e5:17:68:20:5c:
a7:11:e8:96:85:a0:43:c0:43:ed:49:26:39:7b:47:
5b:9d:67:92:0c:7d:27:bc:e8:1e:53:0d:0e:7f:40:
64:c8:81:16:06:02:09:89:d1:4e:5a:fa:28:d7:5e:
8e:f9:4b:ea:4d:66:cc:67:8f:5c:51:db:d0:d9:fa:
cb:18:89:4e:99:6f:6d:5d:93:a4:5d:70:b5:29:24:
e9:5d:b0:eb:c8:ac:ac:ef:b7:c0:f1:67:eb:79:94:
da:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:B3:AC:B4:35:3C:AE:52:CF:B3:66:1E:82:F8:F7:F1:E1:A4:9A:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/85240ca7-41e9-329b-8a29-307187f566aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
X509v3 Authority Key Identifier:
keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
sbgp-ipAddrBlock: critical
IPv4:
158.115.158.0/24
IPv6:
2606:7bc0:1093::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:7a:4b:82:8b:68:6a:41:f8:d3:e8:ce:29:38:01:bd:c3:60:
80:e8:9a:f6:bb:1d:75:84:b9:c2:22:2a:e5:0e:cd:9d:14:99:
9f:f9:cc:4e:d7:7e:4f:bc:a6:94:40:04:31:e8:02:40:73:2b:
f8:8c:42:27:4c:57:4c:f9:f6:fc:7c:88:bd:0d:53:41:b4:81:
81:21:ea:2e:13:d4:ad:43:1f:e8:bd:f5:3a:4d:db:1e:60:95:
f3:cf:83:85:6c:b1:c8:c7:93:65:b7:1e:21:08:78:5d:87:c3:
8c:b5:3f:5a:18:22:53:be:be:bc:53:85:a0:28:81:87:bc:34:
df:b1:4e:2a:ed:12:4b:95:89:f1:6b:91:9b:7e:95:8c:07:73:
42:9a:7b:f8:15:6c:97:cb:af:a6:fc:f7:4f:b4:7b:56:0a:5a:
b9:47:1f:84:2a:7b:60:d2:5a:7e:1d:de:b5:47:72:9b:93:45:
eb:4d:b4:36:38:5c:db:d9:6f:42:65:c5:f3:0b:0b:91:62:a7:
27:2c:0f:c8:83:ca:9c:30:5e:59:4a:88:fe:2c:48:91:2a:8a:
8a:54:3c:3a:b6:12:49:6e:a3:16:d4:a6:f6:ab:88:83:1f:65:
6b:d9:d5:49:cd:74:ba:b5:4d:a2:ce:54:c6:bc:25:4f:9a:d3:
05:a0:5b:a6
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEjb1mYVJTl21C2Yz4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz
M2Q3MB4XDTI1MDIxMjE0MDA1M1oXDTI1MDUxMzEzMDA1M1owLzEtMCsGA1UEAxMk
NTY3N2Y3NWUtNTRkZC00MTNkLWE0M2EtZmRlOWRhNjJiYTU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8WWqPvael3DhdUnAyxIbPWyg5AUUK81xG8v
Lar3pGmMZgd5ITonCBBUQEP9t9r5ckJJCJkyHKNtl/2whkqfTVFBQdlTu+dYHO3H
ZBmg6Q6O58DstbETRV8aM05mH/8SDBOSwSzmhlgnTIdKxsdKnLLqc5JV39xeZhNa
3RtvQ30vWKv1E7EBOcWFhkAcfd+0HEEVkhUwZ9aBLjTk6Tcx5RdoIFynEeiWhaBD
wEPtSSY5e0dbnWeSDH0nvOgeUw0Of0BkyIEWBgIJidFOWvoo116O+UvqTWbMZ49c
UdvQ2frLGIlOmW9tXZOkXXC1KSTpXbDryKys77fA8WfreZTa4wIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFDqzrLQ1PK5Sz7NmHoL49/HhpJqYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl
ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvODUyNDBjYTctNDFlOS0z
MjliLThhMjktMzA3MTg3ZjU2NmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4
NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm
MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2
YzY2ZjMzZDcuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAnnOeMA8E
AgACMAkDBwAmBnvAEJMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEABHpLgotoakH40+jOKTgBvcNggOia9rsd
dYS5wiIq5Q7NnRSZn/nMTtd+T7ymlEAEMegCQHMr+IxCJ0xXTPn2/HyIvQ1TQbSB
gSHqLhPUrUMf6L31Ok3bHmCV88+DhWyxyMeTZbceIQh4XYfDjLU/WhgiU76+vFOF
oCiBh7w037FOKu0SS5WJ8WuRm36VjAdzQpp7+BVsl8uvpvz3T7R7VgpauUcfhCp7
YNJafh3etUdym5NF6020Njhc29lvQmXF8wsLkWKnJywPyIPKnDBeWUqI/ixIkSqK
ilQ8OrYSSW6jFtSm9quIgx9la9nVSc10urVNos5UxrwlT5rTBaBbpg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:17:40 2025 by rpki-client