Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/b97501a5-c1f0-3b1d-b523-c4703b659f7b.roa
File: b97501a5-c1f0-3b1d-b523-c4703b659f7b.roa (raw, json)
Hash identifier: 2fPjA42VZZznz0YqoxLroUTkaXWvG2rQdrldq0rh2FU=
Subject key identifier: 00:3A:76:F1:99:0B:2D:89:5D:1F:29:F0:EE:41:51:60:5A:2E:E8:DA
Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial: 010D0C9F43285849552953E0A080C3A072A48A00
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/b97501a5-c1f0-3b1d-b523-c4703b659f7b.roa
Signing time: Fri 28 Mar 2025 01:00:41 +0000
ROA not before: Fri 28 Mar 2025 01:00:41 +0000
ROA not after: Thu 26 Jun 2025 01:00:41 +0000
asID: 14618
IP address blocks: 216.157.130.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:55:29:53:e0:a0:80:c3:a0:72:a4:8a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Validity
Not Before: Mar 28 01:00:41 2025 GMT
Not After : Jun 26 01:00:41 2025 GMT
Subject: CN=0472ec21-a733-4741-9bd3-febc6c09c92d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:26:66:db:30:45:e6:72:5a:0f:be:97:d2:78:
5f:34:36:57:94:52:58:87:ad:cd:57:7d:e3:33:8d:
ac:64:41:c1:1a:58:5d:81:46:c1:25:28:dd:f7:d5:
64:a7:dd:6f:a8:07:cc:6c:2b:55:8d:13:c6:eb:5d:
53:e2:25:ab:94:cf:c1:87:8c:2e:3e:62:b7:3e:e4:
26:35:8c:eb:b6:2c:93:4c:15:73:ab:01:01:6d:39:
b2:96:0f:ce:23:9f:a1:c5:28:b7:86:88:df:6f:34:
f9:c8:e3:88:0b:42:5b:06:f9:d1:16:6e:44:2f:dc:
84:79:26:05:6b:11:36:0d:75:09:18:cd:ac:cb:54:
d4:78:a4:10:e6:47:92:5c:c5:7c:c7:17:ef:d0:5d:
4b:7d:1b:93:75:c5:83:80:ad:c3:d6:08:6d:fc:93:
83:1d:a0:27:8d:41:2d:51:77:5f:fb:6e:ae:a4:e1:
56:ce:ed:91:95:f3:aa:fa:47:d0:36:82:6e:3f:98:
30:61:e2:a1:0a:88:d7:20:9f:e1:9d:47:d7:8b:25:
c5:71:8f:04:11:19:57:63:8f:c9:ef:23:27:3c:30:
9d:09:c5:8a:c7:43:d3:8c:e0:1b:ed:93:14:e9:c1:
87:cf:32:3d:f2:05:83:46:37:08:99:09:32:21:5b:
e0:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:3A:76:F1:99:0B:2D:89:5D:1F:29:F0:EE:41:51:60:5A:2E:E8:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/b97501a5-c1f0-3b1d-b523-c4703b659f7b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
X509v3 Authority Key Identifier:
keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
sbgp-ipAddrBlock: critical
IPv4:
216.157.130.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:69:e9:b7:ec:6f:87:8f:06:65:6d:af:34:9c:e2:71:4e:70:
82:5d:e5:40:fb:13:a0:67:31:e7:17:e9:1e:d7:f1:21:8a:36:
bd:ff:ab:38:fb:90:e9:2c:9b:5e:6e:27:cc:16:66:7b:db:09:
2d:1c:39:52:2a:03:2c:3b:84:2b:46:88:49:2b:52:16:7c:12:
05:a9:bb:67:e6:2a:e4:41:a2:f7:14:64:1f:27:de:b3:f3:75:
81:77:b8:cb:11:c9:75:d0:7e:e7:cf:08:42:f4:6a:0b:72:cb:
b8:22:85:d8:67:33:dc:86:b2:46:0e:8a:4b:ac:81:aa:bb:df:
ea:6e:97:69:e3:28:b4:26:81:b4:a4:1e:f7:df:65:f0:94:41:
e6:e3:17:8d:0a:f4:3d:1f:d0:6b:77:1c:0a:0c:a1:03:30:03:
4f:2d:96:4d:8f:f1:30:e0:5e:d4:97:25:51:da:de:14:b0:af:
85:a4:b3:b4:78:7e:dc:e1:0d:1c:0c:72:19:49:a5:9e:c3:73:
6a:a2:6a:5d:ff:0d:ce:de:90:ff:f6:dc:48:4e:4d:61:bf:7b:
17:1f:e5:78:74:4c:6b:8e:c9:29:31:4f:1a:a3:86:02:aa:b7:
6b:10:57:f1:97:6e:ac:79:c4:0f:6e:76:53:68:b9:6b:f7:b4:
15:18:fe:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:40:01 2025 by rpki-client