Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/a6a369ce-f8e2-3690-9de9-31da83e4f39d.roa
File: a6a369ce-f8e2-3690-9de9-31da83e4f39d.roa (raw, json)
Hash identifier: OjSj4XPiTpky2MDP3zrqoX2Vk5cPkFOHRU8H3+niFW8=
Subject key identifier: 0B:F1:03:6E:83:69:4F:8F:E6:30:37:9C:9F:63:98:62:78:2B:C0:70
Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial: 010D0C9F43285848DBD665FE61FBFDB584E8F9A0
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/a6a369ce-f8e2-3690-9de9-31da83e4f39d.roa
Signing time: Wed 12 Feb 2025 14:00:53 +0000
ROA not before: Wed 12 Feb 2025 14:00:53 +0000
ROA not after: Tue 13 May 2025 13:00:53 +0000
asID: 395831
IP address blocks: 158.115.157.0/24 maxlen: 24
2606:7bc0:1092::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:db:d6:65:fe:61:fb:fd:b5:84:e8:f9:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Validity
Not Before: Feb 12 14:00:53 2025 GMT
Not After : May 13 13:00:53 2025 GMT
Subject: CN=40277172-0761-4c8c-ae88-f1f082a0cf25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d2:7f:4e:d5:91:ac:5c:b7:d4:f4:cc:10:74:
38:a6:69:9c:c7:b4:3b:61:f0:b3:e7:bd:23:17:1a:
83:18:e1:75:f5:7e:a3:e8:53:5b:fa:85:fd:ad:8a:
3b:fc:a4:de:38:f1:f7:af:ac:a6:f4:9d:0c:5b:94:
74:68:84:9c:7f:7b:6a:a2:84:c4:a2:f5:f2:39:17:
0f:ed:d2:3f:60:72:bc:7a:37:c1:fd:08:bc:f9:9b:
90:e0:db:12:90:7c:b6:a8:2d:5c:19:12:6f:7e:6c:
1b:4d:e6:6b:79:92:ae:44:ad:97:a0:36:28:c4:fb:
ba:93:2d:42:38:b3:39:26:14:e5:bc:8b:59:be:67:
93:e6:2e:da:e3:12:2f:af:02:13:cf:14:0c:9a:dc:
d0:ff:ec:52:00:92:e8:ae:41:7d:02:82:22:bb:40:
f9:1a:e9:c5:65:72:2a:b8:9c:88:30:5a:ce:28:24:
f9:45:03:89:3c:b1:90:13:e5:79:cb:a9:eb:49:36:
15:36:f7:c1:10:dd:b3:7b:54:ed:fd:1b:cf:38:63:
24:ab:dc:07:72:b0:b5:5a:79:3b:3b:06:51:6e:ee:
95:92:e0:66:6a:99:71:e3:1b:e7:ea:0b:4c:ad:44:
d3:11:b4:7f:d2:dd:ce:78:b4:81:6f:5a:dd:c3:e2:
65:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:F1:03:6E:83:69:4F:8F:E6:30:37:9C:9F:63:98:62:78:2B:C0:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/a6a369ce-f8e2-3690-9de9-31da83e4f39d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
X509v3 Authority Key Identifier:
keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
sbgp-ipAddrBlock: critical
IPv4:
158.115.157.0/24
IPv6:
2606:7bc0:1092::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:74:fa:cf:c1:8e:54:9d:32:d8:5f:60:cc:d7:58:19:b1:06:
36:44:01:bb:85:71:b4:a8:c5:38:3f:e4:ba:8d:39:75:00:ba:
fd:25:21:ca:66:55:13:e3:b9:e4:f3:00:c1:6c:05:5a:ff:ee:
6b:de:1f:95:a1:3e:44:0b:ed:9c:87:cc:a9:4d:e3:30:29:28:
92:75:cc:a3:e0:f6:c2:ea:3a:9e:d9:d4:e6:02:c2:2a:5b:ee:
76:2f:79:28:7e:60:b2:0c:db:1b:91:67:01:f4:63:71:e4:19:
fc:cf:a1:bc:5c:c0:ec:3c:e6:65:a4:ab:56:3f:b5:25:01:57:
39:c1:77:78:3a:f1:63:21:fa:3f:85:3b:76:43:0c:8a:ea:d4:
f1:7d:2e:62:f9:89:d5:d7:a4:e6:68:99:eb:9b:ba:1b:da:02:
ed:30:19:40:4c:e7:97:e4:e7:9d:45:c0:ea:46:5d:53:f6:7e:
75:a7:5a:5f:9a:f0:cc:69:79:f1:2e:c2:fe:13:95:6b:d0:97:
f6:82:4d:4c:12:7d:ce:65:97:27:05:83:90:69:ba:fb:c8:74:
9a:41:f7:b9:ab:c8:5b:d8:ae:aa:99:0c:c6:22:bb:23:36:ea:
2e:af:2c:2b:19:48:3e:8f:33:c6:1b:3e:7a:df:11:38:aa:fc:
23:15:2a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:53:02 2025 by rpki-client