Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/561d0021-3fe4-31b8-85cc-e269eba14074.roa
File: 561d0021-3fe4-31b8-85cc-e269eba14074.roa (raw, json)
Hash identifier: lty11BULNyfslVTKHaYJe3JED4tOxhCnOZhJB4UvYXY=
Subject key identifier: 13:B0:F4:DC:71:09:D9:FD:57:3A:B3:BD:4E:5D:CF:01:7B:D0:62:90
Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a
Certificate serial: 010D0C9F43285848B2301ECC52212453C88F9552
Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/561d0021-3fe4-31b8-85cc-e269eba14074.roa
Signing time: Tue 28 Jan 2025 15:57:44 +0000
ROA not before: Tue 28 Jan 2025 15:57:44 +0000
ROA not after: Mon 28 Apr 2025 14:57:44 +0000
asID: 14114
IP address blocks: 157.133.24.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b2:30:1e:cc:52:21:24:53:c8:8f:95:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a
Validity
Not Before: Jan 28 15:57:44 2025 GMT
Not After : Apr 28 14:57:44 2025 GMT
Subject: CN=b755f111-6b6b-4886-b114-7c3be92b3ee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:6e:2c:f2:74:fa:ec:37:d3:43:24:7e:3c:11:
3d:4d:f0:90:48:b9:15:55:01:cd:6d:1e:65:25:28:
9e:2e:ad:1d:e4:01:8e:3b:34:31:41:31:cf:44:7c:
ff:c0:bb:e4:f4:89:82:b9:d4:9f:f6:4d:36:f1:ae:
fe:5c:59:51:89:9c:bf:c7:ee:46:8b:64:e9:0f:d9:
82:e8:07:bc:89:ce:5e:2a:ae:8c:d2:69:95:3e:80:
40:3f:ac:c2:1a:5d:15:a2:88:3a:71:1d:ac:23:da:
14:95:a1:d8:b9:ec:35:40:44:b8:26:9c:d8:58:e5:
4b:18:9e:74:58:3a:59:a7:b3:d0:41:17:1b:01:08:
fd:aa:06:53:18:a3:6e:0f:dc:fb:6a:50:62:32:18:
c1:af:05:12:09:26:ed:4f:2e:fc:53:2f:ad:de:7b:
bb:bd:d0:a4:b8:df:db:6a:4b:bd:49:be:f5:85:fd:
79:12:4e:89:39:cf:6d:d4:bf:1a:10:9e:88:e5:71:
0d:76:f3:11:c6:a2:ea:6c:48:a7:d0:3a:f7:03:26:
7a:b4:68:64:2b:ff:c7:32:ed:2c:37:cb:45:a1:ed:
53:ca:10:00:7b:53:2e:f6:d9:35:c0:cd:2a:34:e6:
1e:03:4f:1c:b1:16:92:86:64:a9:f0:b8:20:c5:7d:
5c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:B0:F4:DC:71:09:D9:FD:57:3A:B3:BD:4E:5D:CF:01:7B:D0:62:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/561d0021-3fe4-31b8-85cc-e269eba14074.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl
X509v3 Authority Key Identifier:
keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
sbgp-ipAddrBlock: critical
IPv4:
157.133.24.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:a4:0e:78:b4:58:be:f6:a4:21:ab:d4:18:a0:6e:f1:d1:ec:
e3:42:c4:8a:03:05:e0:dc:b2:7d:d5:ea:1a:cc:10:23:8c:7e:
61:4c:6b:b7:82:38:b5:b2:45:87:57:a4:a7:d6:51:a5:e4:5a:
d5:15:2f:50:d4:68:d9:f5:80:83:b7:6b:a0:d8:fa:e6:13:80:
5f:02:16:6e:72:fe:61:fc:61:33:c9:e7:f1:c5:37:93:42:d2:
7d:d2:a8:b2:e8:30:8a:da:56:17:00:d9:02:16:c4:c6:fc:83:
2c:d6:5b:d4:b2:b7:32:2c:e0:ac:e8:69:f2:18:2e:f6:33:5c:
91:4b:ac:51:91:a5:b8:2c:ce:f0:99:d2:3d:91:5f:04:a1:1d:
10:56:c1:22:3f:49:e2:0d:4e:ba:c9:04:53:61:cd:62:47:b4:
bc:f3:25:fd:2f:d6:a2:ae:53:5e:d3:34:e9:ea:f0:da:0b:5a:
fd:ea:d5:4b:64:07:de:e7:3e:45:5a:66:75:97:b1:48:9f:75:
8a:48:e9:a5:f5:6d:42:51:53:4d:b4:14:be:95:88:87:96:f7:
77:91:b7:27:b5:35:43:b3:5e:dd:0c:98:de:3d:f0:05:44:f8:
d9:77:2a:86:28:3f:05:c4:d2:ef:fb:d5:62:89:04:08:07:13:
cf:74:e2:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:08:37 2025 by rpki-client