Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/b3daaa82-df38-3308-8f74-538c1b1500bb.roa
File: b3daaa82-df38-3308-8f74-538c1b1500bb.roa (raw, json)
Hash identifier: lYkjEWecF8zc8wb8OdnttxeOrQUyIIWnb0T6X31LwDU=
Subject key identifier: F4:12:6C:3C:DD:6A:6D:92:71:4E:3E:ED:2B:2F:89:A2:A4:67:B5:E3
Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial: 010D0C9F4328584930DE6D9307C50941C309AE60
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/b3daaa82-df38-3308-8f74-538c1b1500bb.roa
Signing time: Sat 15 Mar 2025 01:00:39 +0000
ROA not before: Sat 15 Mar 2025 01:00:39 +0000
ROA not after: Fri 13 Jun 2025 01:00:39 +0000
asID: 395831
IP address blocks: 158.115.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:30:de:6d:93:07:c5:09:41:c3:09:ae:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Validity
Not Before: Mar 15 01:00:39 2025 GMT
Not After : Jun 13 01:00:39 2025 GMT
Subject: CN=d9209b91-53cc-467c-a1b0-12530a4b831c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:5f:5f:72:fb:09:8d:f0:71:5c:73:e1:4f:77:
d3:3b:76:ae:84:2f:c0:b0:e8:06:a3:9b:85:2a:70:
98:bc:4f:f3:10:16:39:dc:22:77:fa:87:2c:0b:ed:
40:81:57:86:f4:68:cf:1b:6a:bf:ff:fd:44:12:68:
73:2a:5e:37:63:e6:5a:fe:91:75:e1:68:44:18:2c:
89:68:a2:f2:85:61:67:65:7b:ba:f1:a3:8c:48:f6:
8d:21:e0:fc:dc:e8:58:77:0b:1b:ab:73:96:75:7c:
d4:89:de:8d:f6:94:cb:85:2f:a0:35:80:64:6d:60:
c9:12:0b:b7:0e:72:62:e5:23:70:e7:6b:ca:4f:35:
ba:1c:ed:32:66:a1:04:65:7d:5e:4f:33:37:70:aa:
1b:5c:b6:2f:5d:05:75:b4:76:ab:f1:7c:21:09:5e:
ca:8b:27:44:ec:f6:89:d6:62:40:ee:2f:b1:d9:c5:
f2:2c:9b:23:1f:c4:84:a7:62:90:a3:38:db:33:fd:
de:d0:35:73:e5:70:9a:50:91:7d:46:59:20:ac:4b:
f6:01:e8:7c:ab:c0:c3:ce:ff:5a:53:14:74:b0:32:
69:bc:02:bb:78:07:6a:c6:8a:31:a4:1b:02:5e:b2:
04:a1:96:c5:c3:57:d4:d2:e1:d6:bf:4e:8e:55:ce:
3e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:12:6C:3C:DD:6A:6D:92:71:4E:3E:ED:2B:2F:89:A2:A4:67:B5:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/b3daaa82-df38-3308-8f74-538c1b1500bb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
X509v3 Authority Key Identifier:
keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
sbgp-ipAddrBlock: critical
IPv4:
158.115.151.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:01:66:c7:29:54:f9:94:bf:f9:4d:c2:b6:bf:e7:9b:41:2c:
ef:94:79:76:e0:97:8e:07:46:c2:53:79:c8:83:f4:33:90:12:
fb:3b:c9:72:f6:ab:11:49:3a:7a:b0:8d:c5:75:ae:bb:9d:c8:
53:a1:9a:1b:73:fa:d4:77:a7:83:a7:ee:21:b0:1a:34:f5:b6:
ab:66:fe:8d:fc:3c:59:9f:31:c8:1b:01:7c:f4:1e:5d:f7:05:
23:ed:cf:f0:0a:a8:39:98:b7:ba:ef:47:c8:bb:8b:17:3d:dc:
e2:bb:d2:c0:ff:e8:1b:48:d6:80:7d:b0:2d:cc:a9:a5:ab:05:
5f:84:10:8c:4c:71:0e:5e:3c:74:43:b1:bd:3b:67:48:2d:1a:
a3:29:ab:9d:6b:d3:2f:9a:dd:f4:24:e1:ce:28:50:f6:c5:c8:
42:c5:39:5e:bf:f6:ae:f4:24:1e:19:48:d8:50:2e:cc:75:a9:
5c:51:15:4e:f5:e0:43:62:86:86:b1:b6:db:a2:07:dc:ef:c1:
1c:98:f3:95:81:af:c3:5f:63:a4:d6:62:59:fa:93:e9:08:25:
ce:32:c1:2f:9d:ea:6e:a0:5c:ca:f7:53:5a:c7:f0:ae:b0:72:
51:f1:d4:9e:9f:d1:3d:38:14:6e:cd:b5:62:01:0a:f5:04:0f:
bd:3b:18:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:32:44 2025 by rpki-client