Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/d5c88e45-fe27-3d6c-9869-cdaf57271a09.roa
File: d5c88e45-fe27-3d6c-9869-cdaf57271a09.roa (raw, json)
Hash identifier: gtb/K/nvWT+pnDkF+JMUlQ7jltKPpMMLJgjquBvtojA=
Subject key identifier: 5E:A2:B1:BD:28:F3:80:23:25:AA:04:C6:9F:F4:B7:73:69:D6:D7:EE
Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial: 010D0C9F43285848A99626F29D497CFA13248540
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/d5c88e45-fe27-3d6c-9869-cdaf57271a09.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 16509
IP address blocks: 158.115.146.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:26:f2:9d:49:7c:fa:13:24:85:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=7ec94d15-3ec2-4d47-a70c-ce93e8e9fde6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d8:3e:7e:fc:e3:9f:27:83:af:96:d8:76:37:
fd:fa:4a:43:8e:42:05:1a:09:94:ca:c2:fe:58:1b:
29:63:14:f6:77:ea:96:10:49:b7:8c:54:71:8d:84:
71:82:54:d6:e0:a2:e6:b9:53:36:3a:06:47:2c:ec:
a9:f4:44:b7:22:81:e1:73:b7:15:aa:19:7c:5a:3a:
64:4f:73:ff:e2:04:08:2d:cd:1c:f9:94:a0:da:04:
4c:0f:d8:c2:dd:c8:a9:69:b7:14:16:e4:e0:b8:cd:
cf:89:a8:b9:ea:32:1a:4a:82:52:e5:6b:98:e2:c7:
d6:c6:64:33:bd:9c:46:ed:7e:63:36:2b:a9:f3:31:
fa:17:fe:12:cf:81:73:0e:6c:56:76:08:a1:37:66:
82:c5:d3:5e:6c:3a:64:0d:2c:b5:9d:b5:f0:85:22:
03:3e:a7:66:9b:8b:66:4b:94:2b:38:47:65:b8:87:
5b:f1:b6:57:11:dc:3b:f3:54:4a:40:dc:76:5c:07:
86:f0:76:bc:0d:5f:06:c6:70:94:22:9b:78:fe:b1:
7b:b8:8b:b2:aa:6c:00:43:8e:b8:16:c5:8b:4a:d1:
e1:4f:af:68:f2:62:76:38:0a:27:cb:bb:c0:58:05:
d8:5c:da:7e:86:63:23:05:ab:0c:fb:88:25:56:c8:
8b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:A2:B1:BD:28:F3:80:23:25:AA:04:C6:9F:F4:B7:73:69:D6:D7:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/d5c88e45-fe27-3d6c-9869-cdaf57271a09.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
X509v3 Authority Key Identifier:
keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
sbgp-ipAddrBlock: critical
IPv4:
158.115.146.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:8d:41:fc:33:10:53:a6:53:55:3e:c1:78:99:dc:b2:db:d1:
5a:e1:82:be:5f:81:6a:7e:c3:ba:53:72:1f:32:a2:84:ed:25:
13:68:bc:bd:df:02:34:66:86:d7:15:e2:bc:cb:6e:10:ad:65:
b3:18:ce:66:c2:12:87:72:27:e8:33:d4:a1:a7:8f:e5:c0:4c:
bb:46:d9:14:f7:75:b9:5c:90:56:6a:50:a7:e8:0f:0c:f0:33:
f9:a2:8a:08:02:13:da:25:60:a1:d2:7b:a3:93:f6:76:a0:c3:
3a:ec:a4:79:4b:66:a7:ce:d4:d3:59:09:d6:45:f3:84:6f:77:
7e:af:27:e6:26:f9:87:ed:15:49:b2:2e:c4:c6:9a:36:d9:84:
67:9c:55:b1:dd:82:92:88:9e:5d:83:af:0e:98:01:76:5b:da:
c7:39:f7:e0:33:34:29:22:75:02:3d:56:f5:09:50:06:fc:41:
4b:0e:6e:1b:0a:08:cc:f3:e7:fb:39:c6:df:d6:1e:54:78:19:
b1:5e:46:bb:55:6b:e3:77:e8:4e:0c:15:1c:09:cc:bc:21:4a:
c3:c1:0f:40:00:92:27:42:1f:2a:18:b3:b7:39:59:75:eb:dd:
da:e6:da:4e:dc:d7:80:6c:a4:09:c6:1d:75:fa:0e:c2:1c:13:
77:76:11:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:03:25 2025 by rpki-client