Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/2f62a531-5cd4-356f-acdd-1d9dad5599b5.roa
File: 2f62a531-5cd4-356f-acdd-1d9dad5599b5.roa (raw, json)
Hash identifier: uFSdMcBRM73DjzMA2Eey11iDqw+3SMeptt26qkx5ZUE=
Subject key identifier: 28:0F:A4:0E:9A:FE:C5:EB:C9:FC:C0:2C:98:E5:45:5B:30:6E:04:60
Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a
Certificate serial: 010D0C9F43285848CCF02EE28EC1711C46445300
Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/2f62a531-5cd4-356f-acdd-1d9dad5599b5.roa
Signing time: Fri 07 Feb 2025 05:55:44 +0000
ROA not before: Fri 07 Feb 2025 05:55:44 +0000
ROA not after: Thu 08 May 2025 04:55:44 +0000
asID: 0
IP address blocks: 157.133.224.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cc:f0:2e:e2:8e:c1:71:1c:46:44:53:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a
Validity
Not Before: Feb 7 05:55:44 2025 GMT
Not After : May 8 04:55:44 2025 GMT
Subject: CN=4ec1d4d1-0910-4cc0-8bd7-9a70cefe6068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d1:68:e6:f1:ba:29:64:25:c8:ae:79:19:ab:
93:ea:03:f5:71:e6:29:57:ca:b2:b6:68:0d:dc:32:
1e:ec:29:0b:5c:a3:dc:de:11:8b:ad:f9:3d:d6:06:
e1:f3:3d:11:be:2d:0b:41:5b:2c:54:5f:56:13:58:
96:17:45:3b:c2:c0:6e:33:a8:e0:f3:62:cc:3d:16:
4b:04:e1:f1:b9:24:b7:b9:d7:c8:ee:e9:a4:0c:a1:
0f:4e:b3:7f:09:96:00:4a:26:f7:0a:df:d2:7c:e1:
35:07:bb:24:4d:86:05:46:dc:d1:a8:21:4d:66:65:
66:ae:7e:ba:6c:25:e9:2b:5f:2c:61:60:de:62:a0:
4b:c1:f4:43:88:41:d1:d5:96:09:3c:d5:16:78:e5:
43:4b:0b:c0:7e:48:1f:98:fc:2b:9a:58:c4:23:d0:
59:6e:5d:ea:d4:3a:84:f4:8e:1b:ff:db:e4:30:80:
ae:d2:ec:90:c2:84:d8:72:b6:94:ba:1a:73:15:8f:
4f:14:95:86:2e:56:b9:0a:7a:96:fb:4b:f7:35:55:
ae:3d:e9:ff:7b:2e:ad:ca:39:f3:68:04:e9:fa:93:
35:12:a9:8d:82:c1:1a:18:e4:9a:ae:54:94:bf:07:
81:7e:58:d4:59:b2:92:c8:49:76:4a:07:a7:b4:c5:
10:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:0F:A4:0E:9A:FE:C5:EB:C9:FC:C0:2C:98:E5:45:5B:30:6E:04:60
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/2f62a531-5cd4-356f-acdd-1d9dad5599b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl
X509v3 Authority Key Identifier:
keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
sbgp-ipAddrBlock: critical
IPv4:
157.133.224.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:ed:68:75:a2:b2:3c:02:7c:44:9e:ca:cd:8d:00:05:6d:e8:
3a:91:2a:b0:87:ea:eb:3b:30:a3:e3:80:e3:3d:a3:95:55:fd:
8c:c7:85:88:e3:5d:fe:0b:3c:82:06:4d:9c:97:d8:6a:ef:e1:
f9:b0:78:d3:b7:ec:d7:36:73:0e:aa:d2:d8:8c:78:c8:35:27:
70:54:50:1f:a4:6d:f4:ee:8c:c3:05:83:d7:24:38:8d:de:e3:
cf:48:35:0a:35:42:c7:a4:02:1f:2a:09:07:74:ea:64:db:32:
d8:32:25:d1:58:63:5c:5a:73:15:50:32:77:80:cc:dc:77:ce:
e0:96:3b:96:f9:ff:2d:60:b2:a1:26:2b:1d:d2:4f:61:25:b6:
62:d1:c0:23:78:5b:11:df:f0:33:21:d3:34:62:42:78:f6:1c:
a5:d9:bc:8d:d7:4b:42:54:32:f3:cf:d9:9b:1c:2f:07:af:5b:
25:cf:28:6d:3b:02:09:d5:23:91:43:d5:b7:56:5c:e6:4e:21:
7f:64:d6:c2:48:f3:ce:a7:a6:c9:17:9f:07:11:00:33:d8:49:
c0:3b:8c:82:28:18:64:d1:4d:4d:7d:17:9d:49:70:e8:fd:bb:
2b:79:b1:23:32:8a:fb:03:25:92:8d:c8:01:ad:7f:ed:fb:09:
9f:6a:83:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:04:48 2025 by rpki-client