Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/0495f8c9-74f9-35fa-b1ed-609f2ca7e573.roa
File: 0495f8c9-74f9-35fa-b1ed-609f2ca7e573.roa (raw, json)
Hash identifier: Pj/ekcPqQczE76RoPGJW1XxJi2ILm1puE2N8V6Kb1IY=
Subject key identifier: DD:42:2F:30:CC:EB:5D:F1:BB:DD:39:77:76:71:09:80:2D:A1:44:E5
Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial: 010D0C9F43285849244E7C1291BD21834A3E1E60
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/0495f8c9-74f9-35fa-b1ed-609f2ca7e573.roa
Signing time: Mon 10 Mar 2025 13:00:52 +0000
ROA not before: Mon 10 Mar 2025 13:00:52 +0000
ROA not after: Sun 08 Jun 2025 13:00:52 +0000
asID: 14618
IP address blocks: 158.115.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:24:4e:7c:12:91:bd:21:83:4a:3e:1e:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Validity
Not Before: Mar 10 13:00:52 2025 GMT
Not After : Jun 8 13:00:52 2025 GMT
Subject: CN=5514f8ce-9bd6-42c1-b718-85adda0b55ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:3c:83:b5:0d:d6:52:a7:26:18:21:30:f8:ce:
47:2f:92:93:81:d1:64:1e:8e:5e:5c:f9:ad:c4:6e:
ea:fd:32:46:b4:bc:66:b4:c8:58:d2:35:ff:ee:8f:
c4:5b:44:2a:4d:70:bf:32:51:96:1b:72:b6:48:05:
a4:9e:47:ed:40:6f:52:2a:2e:00:be:bc:3b:21:06:
f6:dc:2e:b5:fd:48:0f:3a:83:38:de:22:ca:d2:03:
12:5f:cb:98:c5:5f:b2:85:27:68:8a:05:82:2a:78:
32:e0:06:14:10:d9:33:2d:26:33:71:1f:19:df:03:
0f:ab:b3:8a:2e:34:48:ca:e4:19:35:75:33:a3:21:
36:d4:07:5b:e3:df:2f:37:f4:73:1e:48:0e:75:18:
d0:d0:48:5f:3b:f3:ef:85:71:3f:55:71:c9:1e:ad:
73:f8:29:1a:72:b8:2b:8c:45:61:89:8e:1d:cd:e2:
2d:ee:9e:a9:3d:3d:cd:0c:26:d8:22:97:5f:f1:e9:
f5:f2:2d:5e:58:0d:4f:f6:aa:be:4d:b2:6d:5d:88:
90:10:03:a1:c2:ce:4c:e0:db:40:f3:93:b9:ad:8d:
6c:c7:d3:6f:86:0c:b9:2f:03:ad:3e:fd:93:75:02:
0f:8a:45:1e:28:12:89:22:a6:eb:1a:4d:84:bf:c7:
b6:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:42:2F:30:CC:EB:5D:F1:BB:DD:39:77:76:71:09:80:2D:A1:44:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/0495f8c9-74f9-35fa-b1ed-609f2ca7e573.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
X509v3 Authority Key Identifier:
keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
sbgp-ipAddrBlock: critical
IPv4:
158.115.156.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:16:3c:3b:26:88:7e:11:9d:c4:15:c3:00:5e:02:74:04:60:
51:ac:6a:36:ab:18:f1:7e:f8:ae:11:8c:d8:0f:a7:1e:39:fe:
fc:63:28:9d:cc:58:c1:d8:d4:ed:43:c0:f3:4e:d5:17:70:c2:
c3:77:fb:8c:69:ec:18:da:f7:f8:15:4a:af:14:a8:bd:ef:87:
da:99:04:34:2e:ab:f7:86:9d:c4:d1:0e:a5:2b:e7:26:a8:ae:
cd:74:4e:89:4f:b3:37:a8:8d:54:1e:fa:38:76:48:08:f1:59:
f1:52:16:8d:5e:cf:0b:43:9d:b1:26:ba:8d:f2:67:a8:e7:5e:
18:6b:3d:9b:09:bc:35:a7:11:e9:5b:6f:41:8e:3e:cd:3e:6f:
6e:98:ab:15:14:94:17:97:04:b6:61:4a:8c:a6:18:bb:e4:12:
ad:40:bb:4c:23:71:ed:d2:6a:af:1c:df:5a:78:c3:fa:58:4e:
3c:2f:19:e8:2b:8a:ee:19:a2:e3:19:c1:73:21:a2:ba:b3:06:
1e:75:fe:e9:9e:5a:b3:ec:fe:d5:f4:bd:a9:49:20:ad:5b:c7:
3a:8d:20:2c:d0:c2:70:c9:5c:cc:ea:ef:b6:2a:a0:c8:72:b8:
46:e6:c6:44:b7:5c:bd:9c:fe:e3:1d:6b:12:df:98:1d:0a:77:
b9:3e:b1:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:43:15 2025 by rpki-client