Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/80fb7aea-a2a6-31b9-9fd1-ea50581dbc49.roa
File: 80fb7aea-a2a6-31b9-9fd1-ea50581dbc49.roa (raw, json)
Hash identifier: oNDrhjmpXXOlWBJsAfMPOwmuyCPmc3Hi9+4AlVnDKaw=
Subject key identifier: 46:2A:F3:2D:2F:7A:AD:11:BB:F7:1E:97:D3:00:86:D6:D4:61:DE:74
Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a
Certificate serial: 010D0C9F4328584918F8A88760D74695EEAFE6C0
Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/80fb7aea-a2a6-31b9-9fd1-ea50581dbc49.roa
Signing time: Thu 06 Mar 2025 11:34:14 +0000
ROA not before: Thu 06 Mar 2025 11:34:14 +0000
ROA not after: Wed 04 Jun 2025 10:34:14 +0000
asID: 14114
IP address blocks: 157.133.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:18:f8:a8:87:60:d7:46:95:ee:af:e6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a
Validity
Not Before: Mar 6 11:34:14 2025 GMT
Not After : Jun 4 10:34:14 2025 GMT
Subject: CN=80e0a9c1-9caa-4e6c-aaf4-2dbb9f2985ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:85:43:4e:d7:2d:96:f4:0e:7a:20:f3:81:f2:
07:37:d3:f7:f9:0f:38:bb:c0:c0:93:83:7c:0a:3b:
79:67:67:4a:25:f1:31:89:29:8c:54:c5:90:21:92:
83:df:5f:85:13:91:f9:bf:14:00:f8:d1:cc:45:bf:
0e:4c:98:90:eb:ec:8b:3d:c1:dc:32:94:a6:7e:50:
b8:60:08:88:65:ac:99:89:e6:7f:e8:f9:31:64:63:
c0:d6:e3:6f:27:a3:df:0c:35:63:c2:6f:9a:d8:10:
9c:60:2a:22:49:48:fb:3c:c9:10:cf:47:b6:e2:25:
77:fd:09:28:26:d3:40:8c:64:47:01:67:0b:e2:1b:
26:3d:b3:4a:4f:fd:8b:1a:c8:6b:dc:50:f1:c8:13:
df:56:5d:98:0c:cc:48:92:c5:55:cb:65:eb:00:06:
72:79:63:03:04:3a:fb:df:4b:e2:9b:99:5e:ba:4e:
48:12:b9:93:97:5e:ba:0b:c4:ee:0a:e1:dd:fd:53:
cf:43:eb:fd:a7:ee:ed:35:39:81:b6:8f:95:53:0e:
8f:a5:53:5b:0a:8a:9c:99:b0:10:69:17:a4:8b:c7:
fb:67:b0:cb:0a:3b:0b:0f:7b:63:42:48:c8:df:bf:
85:5e:ba:39:02:af:78:ba:1f:c9:22:d5:ca:64:ee:
b6:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:2A:F3:2D:2F:7A:AD:11:BB:F7:1E:97:D3:00:86:D6:D4:61:DE:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/80fb7aea-a2a6-31b9-9fd1-ea50581dbc49.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl
X509v3 Authority Key Identifier:
keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
sbgp-ipAddrBlock: critical
IPv4:
157.133.215.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:2f:34:ac:ab:de:f5:ab:8a:e6:16:de:ff:a6:a6:4a:5f:e7:
7f:23:8a:e5:a6:b7:26:94:9e:20:8f:c6:0b:c1:8b:2f:ef:3a:
39:45:cd:c8:ee:ad:55:d5:0d:0a:f4:1c:fa:e9:6f:07:c2:73:
32:7e:bf:e9:1e:61:44:63:6a:88:84:94:95:29:c2:e2:f7:da:
b8:c1:59:32:e1:4f:de:e8:d0:2d:24:26:a2:1d:04:d5:fc:70:
32:51:9a:5d:2f:c7:71:7a:9c:3f:0f:08:be:53:d9:09:19:d1:
05:f7:39:61:33:3e:37:5d:d6:e0:f1:c3:59:db:36:e6:d8:eb:
54:c7:06:75:74:2e:9f:03:ea:d6:73:6c:0c:7a:9e:ac:39:a5:
e8:ea:db:1c:0a:df:88:46:be:af:12:ec:86:0b:b9:81:cc:c2:
a0:02:d1:4d:6a:bf:2e:b8:bd:18:3b:bf:41:d6:cb:14:01:d8:
ce:24:7c:b2:29:e7:fb:c2:78:d4:e4:4d:b6:34:30:9a:1d:c3:
4e:0b:41:07:26:35:fd:fb:0e:74:06:a9:b0:9d:cf:69:1b:cd:
69:18:4e:b6:9c:4b:09:62:b8:29:d3:90:7c:29:b3:77:f7:90:
a1:50:52:ea:52:3d:60:11:94:97:e8:ad:f7:de:4e:08:cc:ae:
56:7b:bb:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:39:21 2025 by rpki-client