Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/058edd1a-30df-3d68-aecf-592a9cdc1c57.roa
File: 058edd1a-30df-3d68-aecf-592a9cdc1c57.roa (raw, json)
Hash identifier: g6whhfhT75edAe9z94zZd5XwUvwcsY5zpgdReU8nboY=
Subject key identifier: 04:B5:FE:5C:C2:BC:80:FC:0C:8C:A8:29:3D:34:26:F4:D2:A3:C7:C2
Certificate issuer: /CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3
Certificate serial: 010D0C9F43285848F65BD25455E8A80B19819300
Authority key identifier: 8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/058edd1a-30df-3d68-aecf-592a9cdc1c57.roa
Signing time: Sat 22 Feb 2025 02:00:38 +0000
ROA not before: Sat 22 Feb 2025 02:00:38 +0000
ROA not after: Fri 23 May 2025 01:00:38 +0000
asID: 40364
IP address blocks: 164.153.17.0/24 maxlen: 24
164.153.18.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f6:5b:d2:54:55:e8:a8:0b:19:81:93:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3
Validity
Not Before: Feb 22 02:00:38 2025 GMT
Not After : May 23 01:00:38 2025 GMT
Subject: CN=588f6231-5b8c-401e-a765-deec360288ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:20:a4:b7:8a:b0:2e:cc:81:ea:c0:02:9c:b5:
72:a3:ee:d8:47:93:87:a6:c7:73:19:04:eb:48:be:
e5:20:e0:c8:6d:d9:02:56:67:05:ab:9d:75:bb:c9:
14:42:18:d9:5f:dc:90:e7:ff:0d:6d:4a:81:7f:16:
74:73:9e:e4:b7:38:42:13:61:7e:43:c7:17:2f:3f:
21:6d:a3:d2:6f:c0:ab:44:e3:0b:66:b4:bf:18:aa:
fa:fe:69:19:18:4e:29:a1:d2:ef:04:fb:df:dc:8d:
cb:03:09:84:d5:37:0e:11:eb:46:c7:36:d1:a6:ca:
ea:d2:61:bf:d6:d4:32:7b:3f:25:a0:1f:2e:88:c3:
33:e7:9a:6c:ad:59:73:ec:61:59:60:23:9b:6a:e0:
0f:3b:a6:54:ee:b0:cf:74:b3:4a:e7:c8:58:e0:a3:
24:0f:42:64:30:b1:70:62:27:8c:c9:24:f7:32:20:
ed:e7:c3:92:d2:69:1f:72:83:10:e1:9a:ce:2c:65:
10:d1:5b:bc:19:65:8d:92:9f:6e:48:65:03:92:eb:
55:eb:e7:2c:fc:1f:ab:98:bf:8a:43:38:e9:e1:f0:
20:10:ba:59:62:1b:6e:e6:08:87:2f:58:b3:59:f4:
c4:fe:fb:5f:31:34:30:6f:b5:fa:89:5c:c4:5d:01:
0a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:B5:FE:5C:C2:BC:80:FC:0C:8C:A8:29:3D:34:26:F4:D2:A3:C7:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/058edd1a-30df-3d68-aecf-592a9cdc1c57.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl
X509v3 Authority Key Identifier:
keyid:8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer
sbgp-ipAddrBlock: critical
IPv4:
164.153.17.0-164.153.19.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:70:2a:ce:70:12:92:19:60:a5:fa:8c:4b:56:55:64:2b:a3:
bd:13:fb:07:40:07:cd:a0:58:57:d7:28:5d:87:89:3b:ea:a4:
e9:33:d2:cc:11:ac:36:05:d6:d9:46:e6:6d:56:e8:75:fa:83:
1b:54:80:37:4c:61:36:07:8b:ce:d9:a2:5d:b9:8a:1e:46:ab:
a8:b2:8d:af:e4:3e:72:7d:74:4e:23:39:9f:14:a3:df:c9:47:
1c:c3:d9:19:3e:f1:1d:b0:0c:80:c2:c7:db:c5:03:ef:a5:36:
ca:f9:52:7c:75:71:b5:57:65:13:29:a8:ec:59:cb:97:5e:bf:
e5:32:4f:e4:d7:6e:cc:30:03:76:2d:bc:f5:c1:4b:83:5d:7b:
65:ad:03:10:8f:e7:74:5d:a0:f1:e5:46:f9:fe:9c:49:12:18:
65:52:a3:48:44:29:ed:ee:f1:62:11:0a:bb:71:94:c3:a8:72:
ae:73:74:01:27:ed:ae:25:9d:9b:78:75:fd:19:89:0a:50:4d:
f5:e2:23:a3:3d:6c:bb:8b:8a:c0:e2:ce:87:51:a7:8a:c4:25:
99:83:76:72:ef:61:3c:95:14:04:ae:a4:53:27:06:4f:05:b8:
15:3e:f8:b3:1a:2d:48:ff:b1:15:ef:e0:4b:0f:14:11:7e:ab:
60:1e:a2:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:01:59 2025 by rpki-client