Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/23002cf9-daa2-312f-aa9c-f06f11f75bc5.roa
File: 23002cf9-daa2-312f-aa9c-f06f11f75bc5.roa (raw, json)
Hash identifier: 3nXnK7wXL7UXfpqlYVfrkcSWI+1/758H7mxOxAGQ82I=
Subject key identifier: A0:C8:1B:C8:9B:FD:A3:48:0F:DC:1F:3C:86:6E:4D:D1:DD:3D:32:F4
Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial: 010D0C9F43285849244E82E396B4409995D5E780
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/23002cf9-daa2-312f-aa9c-f06f11f75bc5.roa
Signing time: Mon 10 Mar 2025 13:00:52 +0000
ROA not before: Mon 10 Mar 2025 13:00:52 +0000
ROA not after: Sun 08 Jun 2025 13:00:52 +0000
asID: 395831
IP address blocks: 158.115.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:24:4e:82:e3:96:b4:40:99:95:d5:e7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Validity
Not Before: Mar 10 13:00:52 2025 GMT
Not After : Jun 8 13:00:52 2025 GMT
Subject: CN=e00049dd-593c-473c-b171-cc8819327506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a7:14:c1:0e:3f:eb:69:10:b1:43:fb:03:4e:
21:cc:70:01:4e:1a:f0:7e:5b:0e:5d:ec:1e:fd:92:
16:15:08:b2:d7:ab:54:f0:20:24:23:53:ee:cf:30:
66:0a:e1:c1:39:7f:0a:12:e8:6b:c4:28:18:97:a2:
0a:62:fb:89:b9:05:7b:c7:5b:12:c7:6d:3c:35:a0:
ad:2b:14:10:91:17:27:7b:94:74:60:1b:7e:c7:83:
1c:d6:9e:99:df:9d:5a:b5:a6:17:93:19:e2:8d:9b:
89:dd:c2:ab:d0:3b:60:b9:1f:b9:de:6f:8a:88:5a:
33:46:3b:46:47:ac:2d:1a:06:a0:9a:63:98:ae:d0:
24:10:bf:9b:9e:48:78:16:78:14:99:99:99:ae:6e:
ae:b1:56:9a:f1:d9:12:12:c8:0e:90:d0:62:49:37:
f3:f2:6a:7c:7f:cc:4b:87:17:8f:7b:89:f6:40:37:
72:f8:23:e9:34:e9:c9:88:2f:3e:56:ec:97:65:f8:
fb:d2:15:30:ae:2a:f9:88:67:e4:00:89:c9:01:0f:
45:8f:5d:ae:e7:e5:2a:e8:59:aa:4b:c7:d0:64:c5:
7f:d1:2c:26:5f:92:39:96:55:c7:ec:11:38:9c:e1:
34:92:c3:25:e4:bd:fc:1d:80:55:dd:ab:c3:79:b1:
19:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:C8:1B:C8:9B:FD:A3:48:0F:DC:1F:3C:86:6E:4D:D1:DD:3D:32:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/23002cf9-daa2-312f-aa9c-f06f11f75bc5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
X509v3 Authority Key Identifier:
keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
sbgp-ipAddrBlock: critical
IPv4:
158.115.156.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:f6:bf:fe:e8:28:76:c8:3b:b2:e9:c9:9e:49:e0:fa:ff:f9:
be:f3:7e:02:98:b7:ed:f2:c2:99:2c:d8:bb:84:cd:22:ae:f8:
0c:24:0c:bf:fa:ba:71:54:fd:ab:37:77:09:e8:af:08:28:cf:
a7:3f:bf:8b:20:ae:f4:7b:26:45:22:3a:3a:60:bc:80:a2:de:
45:62:a0:89:05:57:aa:fa:ae:12:ea:24:60:4d:0d:c2:6d:5b:
cc:db:e7:30:a9:16:e6:df:61:b2:99:e8:bc:32:e2:95:fc:0d:
76:e0:86:49:22:f9:d8:37:39:da:61:6b:d3:e9:0e:06:46:ed:
d3:ac:fd:48:7d:4e:54:e7:f8:94:cd:04:82:18:9e:d6:ba:e5:
4d:d2:6e:26:87:6d:eb:f8:07:14:45:1a:f4:b3:24:e0:55:3d:
99:56:16:60:e3:b4:43:16:89:fe:79:36:e3:30:96:bb:0d:09:
da:c4:37:9c:f9:08:ee:69:01:38:6f:c0:1a:cd:d3:ad:53:ee:
85:f4:3e:20:1f:24:eb:f2:8f:ac:f5:79:d9:4f:d1:60:40:ea:
45:3b:b6:03:49:0d:a4:58:43:e1:e6:68:38:cd:19:53:ee:e9:
73:17:1d:90:08:38:5b:b0:7d:72:94:d0:2d:0f:9b:3c:ea:0c:
51:97:07:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:23:32 2025 by rpki-client