Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/f7a0a132-7709-3c14-9b98-1b035b042808.roa
File: f7a0a132-7709-3c14-9b98-1b035b042808.roa (raw, json)
Hash identifier: nETM8Mh0sdAVxjYUAzuj5383+94Ii/y8OdR1dCqXONk=
Subject key identifier: E8:19:E5:8F:0A:30:5E:2E:97:31:47:53:DF:4A:DD:11:D6:16:6D:AE
Certificate issuer: /CN=c3399d97-64f6-4e12-8cbe-4d11491ad816
Certificate serial: 010D0C9F432858492E13C8B697904F49B8C460C0
Authority key identifier: AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/f7a0a132-7709-3c14-9b98-1b035b042808.roa
Signing time: Fri 14 Mar 2025 01:00:39 +0000
ROA not before: Fri 14 Mar 2025 01:00:39 +0000
ROA not after: Thu 12 Jun 2025 01:00:39 +0000
asID: 16679
IP address blocks: 152.157.32.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2e:13:c8:b6:97:90:4f:49:b8:c4:60:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3399d97-64f6-4e12-8cbe-4d11491ad816
Validity
Not Before: Mar 14 01:00:39 2025 GMT
Not After : Jun 12 01:00:39 2025 GMT
Subject: CN=68e6ccac-3686-4134-b810-cc210fac91c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b9:f1:9e:01:a8:59:8b:e2:3a:c9:8e:e6:53:
a0:d4:30:d3:85:49:3c:43:88:78:33:58:a1:a2:92:
54:ee:41:1c:b9:32:a3:e1:62:c1:a0:e0:5d:75:b0:
25:4c:44:0d:aa:d9:64:d9:b3:ab:e9:d9:c8:bc:52:
be:61:20:40:db:0e:ba:49:9d:37:4d:14:2b:64:77:
a8:91:87:77:52:a8:40:21:7e:b0:8a:f6:e1:22:52:
5c:b4:92:0c:f0:5d:c6:d8:57:08:6d:9f:76:d5:4c:
e1:2c:fd:02:53:4a:90:54:50:d3:b4:2e:36:df:aa:
b0:bf:c7:24:75:88:6c:e5:af:71:e1:0e:f8:ea:09:
95:be:0a:29:5e:22:81:a0:15:44:08:55:d2:4f:14:
49:2c:e4:a7:52:f2:8a:cf:bb:2d:c8:73:f6:5e:59:
04:9e:01:e8:72:1f:9b:73:9f:34:8b:fe:64:20:97:
a6:e9:e1:bd:cf:ac:86:b2:15:65:a5:9f:01:66:08:
ad:71:18:a5:d4:81:23:05:27:bc:07:3c:71:d5:32:
d4:1f:3c:a5:4c:ff:cc:55:79:f1:b2:df:f7:87:d4:
fc:29:f9:7d:0b:82:69:96:d1:6f:a1:f2:f2:cb:ac:
d5:a9:28:1a:19:f4:9d:dd:93:f4:95:f4:8b:e4:ab:
32:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:19:E5:8F:0A:30:5E:2E:97:31:47:53:DF:4A:DD:11:D6:16:6D:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/f7a0a132-7709-3c14-9b98-1b035b042808.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.crl
X509v3 Authority Key Identifier:
keyid:AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer
sbgp-ipAddrBlock: critical
IPv4:
152.157.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:b2:ef:d7:34:6e:60:63:5b:db:1c:bf:3c:05:b4:eb:cc:0c:
c5:00:2e:5b:84:5a:f2:64:fd:8c:c2:41:c6:69:95:74:76:de:
f5:bd:fb:3f:90:b3:74:72:71:78:80:7a:15:0e:d3:a4:45:d9:
d7:41:3b:23:34:20:58:73:ea:da:e6:f5:e0:c4:3e:1d:ec:e8:
d5:32:ed:8b:3a:a0:26:3b:cf:e5:c2:0b:a9:ff:8b:5b:43:1a:
df:9c:c2:de:c7:ef:c6:f6:df:ca:4d:4c:dd:37:f1:1f:85:2b:
28:30:8c:c7:7e:27:6f:68:8b:b7:79:d3:da:7a:0f:60:1c:bc:
01:f7:67:95:da:25:d0:d3:9d:14:5a:17:0c:e2:92:a8:16:46:
1e:29:79:c6:7e:4b:e2:4c:3b:06:4f:78:8a:3c:09:ad:63:d1:
a2:a1:6e:8d:3e:58:83:4c:5f:8c:cd:0e:66:a3:71:8e:d7:7c:
22:41:ab:0a:c4:3c:7c:70:83:30:2c:c1:86:f5:1d:12:50:38:
6b:33:1d:e0:84:11:1c:a1:a8:d5:a4:1d:cc:f5:68:8d:b9:fe:
6a:d7:62:30:74:6e:f8:ad:9a:58:25:58:30:63:ea:19:ca:47:
aa:24:97:28:bb:c5:b8:0b:ba:60:81:60:a0:73:94:48:c6:3e:
b7:a0:48:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:43:58 2025 by rpki-client