Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/b3d1be67-5383-349f-9c24-699e17fb4c78.roa
File: b3d1be67-5383-349f-9c24-699e17fb4c78.roa (raw, json)
Hash identifier: lS0evdjpE5y8IRHPcRbpWpfiSQ51DGCbdloz2iyY06U=
Subject key identifier: 71:46:A1:75:FF:DC:71:BC:7F:52:72:7F:D3:D0:EE:E8:F0:5D:C1:E1
Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial: 010D0C9F43285849244E830169A5281F7B933920
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/b3d1be67-5383-349f-9c24-699e17fb4c78.roa
Signing time: Mon 10 Mar 2025 13:00:52 +0000
ROA not before: Mon 10 Mar 2025 13:00:52 +0000
ROA not after: Sun 08 Jun 2025 13:00:52 +0000
asID: 16509
IP address blocks: 158.115.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:24:4e:83:01:69:a5:28:1f:7b:93:39:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Validity
Not Before: Mar 10 13:00:52 2025 GMT
Not After : Jun 8 13:00:52 2025 GMT
Subject: CN=67bbb596-dcc3-4692-8b0f-7f8b78a7dc57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:09:b0:ee:12:7c:7b:61:0a:91:da:d9:12:89:
79:3c:e7:a4:cf:24:c2:57:6b:c8:fe:33:c1:53:50:
67:46:af:44:06:5c:51:a9:50:87:dd:3c:7c:44:6e:
21:51:5e:e1:19:d6:12:18:6b:ac:f9:69:06:3e:ac:
9e:46:b6:d9:68:b2:7a:90:03:74:ce:fc:2d:2b:99:
48:80:28:31:40:36:0b:90:4a:32:50:2d:64:5c:55:
27:00:16:96:21:06:ae:fc:dd:6d:1e:d6:c3:1c:64:
17:61:17:08:07:ce:a1:cd:c9:36:8e:92:f5:9e:21:
84:42:5e:03:24:fa:18:89:d3:50:c5:3f:d0:7f:cb:
a7:53:18:d1:d5:31:bc:dc:6b:fa:eb:8a:70:73:70:
90:c5:50:55:7a:2b:ea:6b:3c:26:cd:37:4e:e6:32:
9b:06:65:34:9d:01:1d:06:46:f3:7f:14:91:1f:b9:
e4:3e:9f:d5:2a:5f:ea:35:fb:12:c0:68:75:e3:76:
78:99:ee:56:ac:da:cd:f6:f7:f7:5c:18:f0:05:6a:
49:88:61:27:d8:96:ee:74:91:6f:96:ef:08:1b:6e:
c8:f9:e8:2d:bd:4b:f4:09:93:e6:91:c0:57:1d:29:
28:31:25:e8:6b:b8:68:e2:0b:7f:e4:ed:f8:71:72:
a8:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:46:A1:75:FF:DC:71:BC:7F:52:72:7F:D3:D0:EE:E8:F0:5D:C1:E1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/b3d1be67-5383-349f-9c24-699e17fb4c78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
X509v3 Authority Key Identifier:
keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
sbgp-ipAddrBlock: critical
IPv4:
158.115.156.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:48:81:53:3e:1d:2d:c2:5e:ce:7e:20:d0:50:dd:b3:41:56:
d4:60:af:6d:cc:1f:b0:0f:19:e4:d4:b6:b5:1d:a4:b9:82:9f:
bb:a7:0b:37:cc:58:28:56:1b:1a:10:a8:10:b9:d6:5d:42:7f:
1d:53:20:23:77:8d:72:e4:37:70:cb:5e:0f:3d:3d:b0:ad:9c:
8a:48:28:6d:69:f0:56:c7:9c:ff:18:9d:3e:84:53:15:be:47:
5a:a1:4f:84:ee:cc:52:63:24:2d:20:95:30:d1:5d:a5:f1:90:
f9:f0:51:6a:46:67:b4:ad:2f:6c:16:d9:f6:a6:7e:ce:ec:d2:
37:e7:2a:ce:27:c9:8b:cf:16:1f:36:d9:54:f3:59:e4:f2:f3:
ba:74:0c:10:13:b7:92:8e:e8:9d:4e:68:eb:42:f9:6a:49:6e:
9b:68:a5:18:dc:24:8a:9f:59:40:46:22:ad:a0:be:34:bd:b1:
c5:b2:44:5a:25:a1:ca:ba:13:89:23:51:8d:ef:35:f3:31:f9:
ad:61:c0:7c:89:9b:8c:b3:04:1f:f5:39:8e:ac:f4:35:de:d1:
42:52:70:ac:61:d0:ac:91:19:82:5e:77:c9:20:64:93:9c:78:
23:f4:eb:d8:36:3d:60:67:c7:a9:b0:b4:00:45:68:57:de:e8:
df:9e:4e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 08:28:21 2025 by rpki-client