Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/3a4e0a18-d0f8-3be6-8953-5fd8263fd117.roa
File: 3a4e0a18-d0f8-3be6-8953-5fd8263fd117.roa (raw, json)
Hash identifier: syo0YoQKoSEw8cb20CWsoU9vW7vEqmgY/3e2ixtSqSM=
Subject key identifier: A7:D2:2C:41:50:25:3B:16:11:BC:9F:FB:B1:F5:53:08:15:C4:CE:DE
Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial: 010D0C9F43285848DBD66981BC1D0F6CFA5895C0
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/3a4e0a18-d0f8-3be6-8953-5fd8263fd117.roa
Signing time: Wed 12 Feb 2025 14:00:53 +0000
ROA not before: Wed 12 Feb 2025 14:00:53 +0000
ROA not after: Tue 13 May 2025 13:00:53 +0000
asID: 14618
IP address blocks: 158.115.157.0/24 maxlen: 24
2606:7bc0:1092::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:db:d6:69:81:bc:1d:0f:6c:fa:58:95:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Validity
Not Before: Feb 12 14:00:53 2025 GMT
Not After : May 13 13:00:53 2025 GMT
Subject: CN=9df32eb9-e50c-4a38-b7ef-bd18353b3430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:92:2f:a9:0f:b5:fa:c3:22:16:d0:bb:2d:f0:
7b:a3:39:af:43:2d:8f:13:33:56:98:39:4e:b2:68:
f6:75:57:c4:5d:6d:cb:6e:6d:52:55:40:f1:0b:83:
39:56:af:42:29:6e:a8:a1:68:aa:d2:e9:85:72:66:
fa:40:10:7d:54:29:9f:a1:62:89:66:8e:47:a8:a5:
af:e7:81:94:21:71:5d:66:6a:bf:3e:01:86:6b:46:
53:e6:5b:78:44:e5:f7:b9:25:c8:06:74:53:d6:a5:
89:e3:fe:90:33:62:72:de:3e:34:09:14:29:b6:d1:
ea:aa:b5:cf:d0:60:12:f3:d4:8b:87:0f:55:61:b7:
2a:5b:35:24:fc:f8:4c:62:15:2d:b8:24:d1:80:40:
e3:92:84:38:70:3b:43:0f:7b:59:05:92:53:65:77:
86:23:7d:e9:24:51:87:f6:64:21:60:a2:08:f5:b3:
cc:ba:ce:92:78:ce:cd:60:4e:7f:52:be:b5:2d:6a:
28:07:c9:01:4c:fc:88:0c:0e:29:6c:3e:fd:e1:75:
2e:c2:f9:58:bf:f8:17:af:c4:68:d3:cc:d7:f3:14:
4b:14:e4:d1:38:84:b1:51:1a:ce:d7:5b:90:f6:d9:
a8:e6:fc:99:fb:13:aa:81:3c:a4:dc:9f:a7:9b:5a:
d5:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D2:2C:41:50:25:3B:16:11:BC:9F:FB:B1:F5:53:08:15:C4:CE:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/3a4e0a18-d0f8-3be6-8953-5fd8263fd117.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
X509v3 Authority Key Identifier:
keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
sbgp-ipAddrBlock: critical
IPv4:
158.115.157.0/24
IPv6:
2606:7bc0:1092::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:8a:31:91:e0:af:de:81:9b:f8:d6:26:5e:43:15:0e:19:2c:
92:e6:17:3a:96:83:6d:41:ec:98:5a:ad:65:f7:17:ce:d6:92:
32:6c:41:e0:df:28:d7:d5:15:41:c8:26:55:98:c7:b6:1d:f5:
bd:00:39:c5:2d:23:21:70:60:c9:b1:72:be:f8:03:90:f3:1d:
58:5b:11:6e:4c:d6:92:2e:54:02:75:c1:fe:b2:d5:39:fc:68:
0f:c7:d4:38:2c:7c:75:af:0c:f6:fc:aa:4b:9b:a3:62:c4:56:
36:08:d2:9a:d3:eb:11:f2:8a:5a:76:32:19:52:84:59:d5:88:
3b:4c:2a:44:56:d0:40:f5:30:17:96:9e:0d:06:38:7d:5e:a9:
ef:87:94:30:08:75:3d:9f:59:8c:94:1b:b6:38:29:9a:e2:5c:
3f:33:cb:69:69:2d:3d:53:45:3a:90:64:17:c7:8f:c2:a8:28:
18:b6:01:f5:55:b7:bf:69:e1:fb:8a:03:9a:93:e9:0a:c0:67:
2a:26:88:e5:9b:a3:ed:8e:4a:02:bf:07:c6:4a:49:f3:6b:af:
33:25:24:9f:0a:6c:b7:39:a2:ee:5c:f8:f1:02:01:7e:33:18:
86:92:d0:91:27:65:70:e8:d0:69:9f:a5:e5:5f:29:81:c0:a3:
5e:3d:8c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:42:13 2025 by rpki-client