Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/cb9936ad-19cd-3e50-a519-c4edc873f8fa.roa
File: cb9936ad-19cd-3e50-a519-c4edc873f8fa.roa (raw, json)
Hash identifier: ylFB8VPyb+xpfgXWN9cWchvVYaWW/Pa01Xtbi8jxEh8=
Subject key identifier: C4:3D:DA:7D:BA:40:11:4B:B6:31:F4:8B:42:F3:65:9E:57:65:32:F5
Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial: 010D0C9F43285848A9962711835ADEF0743E5500
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/cb9936ad-19cd-3e50-a519-c4edc873f8fa.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 14618
IP address blocks: 158.115.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:27:11:83:5a:de:f0:74:3e:55:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=429fabe1-39f1-416e-bcbc-7f1f3d3d2dfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:04:0b:04:a7:c2:e7:47:cb:80:1a:7b:31:39:
58:d9:bd:39:70:52:97:aa:f0:c9:0c:9f:0a:2f:62:
fc:b5:c5:02:e5:7e:1f:22:2f:45:3c:98:54:46:3a:
6a:9d:27:b8:d4:29:6e:42:ce:d2:49:be:cc:2f:72:
b7:50:fd:5a:95:41:7b:71:27:b3:b3:81:19:32:dd:
db:94:45:96:aa:70:7a:07:ff:64:fc:b6:29:d3:bf:
cb:84:d0:5b:bd:e2:af:31:79:70:1c:c3:75:48:6e:
1a:6d:3b:35:d4:21:61:95:39:47:18:0e:9f:6d:19:
7c:cf:3c:24:1f:09:a0:d3:0f:af:0c:1f:e8:76:9a:
b1:55:31:73:5f:4d:14:0b:ff:f3:08:31:91:0e:c2:
10:5b:4e:c3:19:a3:71:1a:4a:03:7f:8f:58:dd:22:
68:98:be:44:2d:76:b9:1a:00:16:8f:71:78:5b:f5:
00:cf:07:2e:4f:74:b2:58:de:8d:b5:68:79:a1:b0:
8f:c9:6b:bb:4c:9d:4e:29:8d:f7:ce:10:e6:8a:4c:
b8:e2:03:c4:15:fb:c5:08:42:9e:ab:73:c1:8a:de:
c1:96:ce:2d:5b:18:72:e1:78:11:0d:ee:20:33:22:
0a:70:23:9e:79:5a:b2:a5:01:cb:f4:11:20:5e:7f:
ed:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:3D:DA:7D:BA:40:11:4B:B6:31:F4:8B:42:F3:65:9E:57:65:32:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/cb9936ad-19cd-3e50-a519-c4edc873f8fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
X509v3 Authority Key Identifier:
keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
sbgp-ipAddrBlock: critical
IPv4:
158.115.159.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:f4:72:ae:32:e6:a3:64:53:b8:21:f6:d3:f2:b2:cd:b1:75:
94:bb:d5:23:54:cc:a9:48:e8:ab:f5:10:40:0f:93:3c:36:76:
7c:16:0d:f5:00:be:f8:05:68:26:5a:81:a1:78:34:5d:bb:c2:
61:1f:3a:e7:e8:1b:33:b4:ea:9d:3d:49:dc:8c:b7:ad:47:64:
78:60:30:27:7e:27:f6:22:e6:0b:1c:06:3f:99:41:c5:79:43:
4d:da:a4:7f:66:28:94:28:15:e4:41:24:f4:7e:45:58:53:61:
08:4a:ce:7e:09:6f:26:74:57:07:b0:60:e1:58:7d:bd:14:35:
55:2d:61:ca:8f:5d:d3:d3:ff:2e:bd:6f:24:0e:8b:9e:11:0e:
7b:78:5c:67:b2:fd:7b:e0:88:1c:6f:e1:96:a1:02:05:75:fa:
38:2f:50:ff:9a:32:7f:5a:df:e0:d3:70:26:1a:bf:2b:9b:87:
e9:2f:28:cf:51:8f:21:36:83:cd:be:1c:a7:3e:2e:23:58:22:
6c:7c:50:a5:d0:4d:88:53:d9:12:fb:76:59:ae:b7:68:0c:de:
08:21:66:f0:00:7d:af:bf:ab:d6:15:2f:ad:50:7f:69:ad:b1:
e3:11:11:30:d0:43:4c:85:4e:7f:28:83:af:db:6c:22:d7:cb:
94:3a:07:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 00:20:23 2025 by rpki-client