Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/14e6bdbf-8939-3445-8af8-3b2f92f0f8ae.roa
File: 14e6bdbf-8939-3445-8af8-3b2f92f0f8ae.roa (raw, json)
Hash identifier: GsuS5zHVr9edWwK3lfMXw9l2KqVrE5GwTrri6cgBRyg=
Subject key identifier: 23:6D:C9:CC:04:9C:0F:2D:53:8E:4C:3F:E7:13:7D:2D:6E:07:10:86
Certificate issuer: /CN=253c1f46-e2ad-4547-8b1c-5935addeddb5
Certificate serial: 010D0C9F43285848DD3BAE1BC0A9D9D0089A2814
Authority key identifier: 80:1D:43:D8:F7:17:16:B0:69:AB:08:47:B2:A9:15:13:40:32:69:66
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/14e6bdbf-8939-3445-8af8-3b2f92f0f8ae.roa
Signing time: Thu 13 Feb 2025 02:00:40 +0000
ROA not before: Thu 13 Feb 2025 02:00:40 +0000
ROA not after: Wed 14 May 2025 01:00:40 +0000
asID: 13335
IP address blocks: 159.242.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:dd:3b:ae:1b:c0:a9:d9:d0:08:9a:28:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253c1f46-e2ad-4547-8b1c-5935addeddb5
Validity
Not Before: Feb 13 02:00:40 2025 GMT
Not After : May 14 01:00:40 2025 GMT
Subject: CN=fa3a0583-38a8-4432-8224-6f4d7a23e61d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:94:6b:f6:78:7d:f3:79:0f:d8:08:a4:46:b6:
bf:00:d5:f4:88:fd:d1:bf:54:ce:19:e0:04:4d:19:
71:23:44:ea:26:2a:14:dd:20:d4:59:5a:ae:0f:f8:
cd:ff:56:61:60:3b:9f:41:0e:64:d2:5d:75:11:b3:
65:46:34:85:6d:a9:99:92:b1:69:dd:35:15:b9:c9:
21:00:44:ec:f7:2b:b0:26:57:93:11:df:bf:c6:be:
fa:1f:e6:41:6b:07:fd:01:07:f0:0b:9c:58:01:ca:
ff:41:e5:31:64:bc:7c:4c:9f:46:d8:a4:54:24:4a:
8d:a4:2b:9b:b2:a8:71:cb:34:f8:8c:03:15:60:fd:
3d:76:62:33:f4:13:3a:fa:9f:02:1b:7c:a4:a2:ee:
b6:ed:0b:20:6c:b8:0b:7b:fb:9a:d0:df:69:07:17:
64:e0:55:9e:33:c3:ef:75:bb:68:75:be:a3:2f:26:
38:2f:a0:f2:04:84:33:5b:2a:5d:cf:62:97:b4:a4:
80:24:de:48:16:c3:45:f2:81:08:b6:32:8f:41:2c:
4d:24:5a:71:7e:ae:cd:c0:91:e4:61:14:f0:01:d1:
48:28:67:36:a5:39:36:40:82:c8:55:f2:01:34:a2:
7b:89:ce:59:ff:7c:65:5f:c8:86:44:94:37:2e:1d:
14:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:6D:C9:CC:04:9C:0F:2D:53:8E:4C:3F:E7:13:7D:2D:6E:07:10:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/14e6bdbf-8939-3445-8af8-3b2f92f0f8ae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/253c1f46-e2ad-4547-8b1c-5935addeddb5.crl
X509v3 Authority Key Identifier:
keyid:80:1D:43:D8:F7:17:16:B0:69:AB:08:47:B2:A9:15:13:40:32:69:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5.cer
sbgp-ipAddrBlock: critical
IPv4:
159.242.242.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:89:07:09:2c:a9:10:a6:c5:5c:4f:1e:ad:d5:4a:ed:35:c2:
3b:75:04:5f:c1:51:a9:96:d7:d4:83:5e:c5:08:77:9d:22:f9:
98:5e:5b:46:2d:e7:71:18:5c:70:6e:67:7e:73:08:16:6d:52:
ea:5f:ec:ec:a0:45:4e:dd:c2:70:cc:5f:dc:ac:b2:49:08:c3:
15:c7:78:d1:3a:65:f0:ec:bb:26:56:62:1e:94:46:f1:1b:03:
ab:d5:9d:59:3c:d6:fc:91:da:5e:2d:39:5d:8b:7f:7e:08:36:
ef:96:28:9e:91:81:59:8b:16:17:ee:77:06:32:22:9c:5e:c0:
73:a0:6d:fa:41:08:23:b0:09:14:ea:85:37:f3:94:a4:36:ac:
a4:e1:3d:85:d3:52:a4:f8:05:6c:8e:9d:83:b5:15:ce:51:fd:
b2:9b:74:33:84:87:76:a9:51:a4:e4:6e:f7:a3:07:42:fa:7e:
38:33:a1:8f:cc:ee:d2:5d:47:8a:9b:60:bb:29:e7:68:fd:d4:
b1:b6:3a:f3:62:75:52:88:56:99:ef:f0:da:fd:c6:ea:1f:84:
6c:22:59:e8:01:c1:83:a6:2d:8b:9e:f6:94:07:8d:28:a2:ab:
dc:b2:58:7b:df:6e:31:15:13:4a:8f:a5:1d:ba:9c:8e:81:fe:
3d:1c:8b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:33:50 2025 by rpki-client