Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/87954fed-dfd7-33f5-b195-f52a604ac05c.roa
File: 87954fed-dfd7-33f5-b195-f52a604ac05c.roa (raw, json)
Hash identifier: /R1dfPira12BiewLYgq9dpu+5vJDuXVicUJiARuYE2k=
Subject key identifier: 92:27:66:5C:E5:F0:2C:D5:AE:9D:DE:95:72:2B:12:DC:31:C4:77:38
Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial: 010D0C9F4328584930DE6FEA10433938106C19C0
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/87954fed-dfd7-33f5-b195-f52a604ac05c.roa
Signing time: Sat 15 Mar 2025 01:00:39 +0000
ROA not before: Sat 15 Mar 2025 01:00:39 +0000
ROA not after: Fri 13 Jun 2025 01:00:39 +0000
asID: 395831
IP address blocks: 216.157.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:30:de:6f:ea:10:43:39:38:10:6c:19:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Validity
Not Before: Mar 15 01:00:39 2025 GMT
Not After : Jun 13 01:00:39 2025 GMT
Subject: CN=01c6316c-28df-43be-bef0-69c33d4973c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e0:7d:19:27:f6:57:35:6d:1d:d5:cf:3a:3b:
10:1a:49:64:94:4d:5f:b3:b0:60:4c:c8:16:83:f0:
d3:c7:f9:b1:89:09:98:a0:93:79:90:cb:39:a8:2b:
4e:69:d2:f9:06:e6:a1:0d:d0:04:c5:27:c7:35:17:
40:d3:b4:c8:dd:7a:88:31:95:e6:10:31:a2:6d:7e:
97:21:59:bf:77:bd:53:7f:2b:0b:64:4f:01:3b:6f:
54:3c:7d:0b:39:5a:55:84:bc:ed:49:f8:0c:d2:b7:
02:60:78:c0:a0:73:f3:6a:89:d7:cb:ef:21:5c:5e:
fb:7a:1c:07:a5:af:93:fb:0e:30:42:07:9c:ed:a0:
6c:db:f4:40:d0:27:6a:6a:35:eb:28:f8:34:c5:ef:
c0:ff:e9:e2:2e:a0:a5:62:94:e3:3d:52:ca:34:de:
08:8e:11:23:6d:4c:b2:e3:51:6b:a6:e9:1f:71:37:
3c:81:b8:5c:13:16:79:76:aa:fd:03:dd:59:3d:b1:
cc:fb:30:25:db:31:80:42:81:55:c8:e8:b1:e4:e2:
ab:92:ca:a0:21:03:23:b1:17:15:8a:ca:9b:94:74:
3b:f3:a7:74:6b:47:6a:c3:7b:53:55:c1:e9:8e:22:
6e:f3:29:79:92:14:a8:a5:f5:19:c1:e0:8e:98:f1:
d0:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:27:66:5C:E5:F0:2C:D5:AE:9D:DE:95:72:2B:12:DC:31:C4:77:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/87954fed-dfd7-33f5-b195-f52a604ac05c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
X509v3 Authority Key Identifier:
keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
sbgp-ipAddrBlock: critical
IPv4:
216.157.133.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:b3:b0:78:31:73:77:2c:af:e6:01:d3:42:a0:77:ea:07:b9:
3f:d0:17:79:54:31:2f:8b:1f:4f:f2:49:f3:0a:48:4e:9c:d2:
25:c4:08:ad:e1:a6:24:54:50:5b:4c:a8:29:64:72:d1:9b:45:
dc:60:da:09:7b:39:71:9d:76:6c:76:b1:a5:9f:a0:8a:70:e1:
da:80:b3:3a:80:39:ff:00:4d:9a:ec:57:1c:eb:fc:6b:72:5b:
06:e2:be:32:2c:27:f9:13:e5:a1:9b:ab:e7:79:0a:38:0f:db:
66:01:cf:5c:04:5a:b5:10:40:78:63:cd:34:07:71:f3:b7:df:
bc:3f:95:9d:23:86:1d:19:7a:a6:11:3a:c5:31:36:a3:00:86:
9f:1f:00:7e:fc:c0:90:82:ad:ae:2a:1e:4e:7a:25:60:d0:7a:
43:77:c0:c8:ab:2f:12:13:8f:39:6b:06:78:fb:70:63:29:e9:
92:00:2b:35:96:66:b4:d6:64:60:5a:96:1c:be:91:ee:05:13:
8a:e1:09:14:58:40:01:ac:96:9d:d8:59:a7:7b:05:38:5f:0b:
7a:a2:6b:b6:b2:49:c5:1d:20:69:8c:87:14:b3:99:67:ce:cb:
35:9d:31:b4:61:0c:d6:cb:5c:06:79:93:f1:e6:2e:df:d3:11:
e8:4f:01:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:33:24 2025 by rpki-client