Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/a4f4dfbb-438b-39fb-98db-aed5cbd0c9c2.roa
File: a4f4dfbb-438b-39fb-98db-aed5cbd0c9c2.roa (raw, json)
Hash identifier: vvEB7Ejdy8aYQsbEHeaiYYFpL+ZhGErsDJFJp0ODoEs=
Subject key identifier: 84:14:24:9C:40:DD:6B:39:DC:AC:8A:AD:A7:38:E4:47:92:30:1C:47
Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial: 010D0C9F4328584930DE70A7421462FE8FC7EFC0
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/a4f4dfbb-438b-39fb-98db-aed5cbd0c9c2.roa
Signing time: Sat 15 Mar 2025 01:00:39 +0000
ROA not before: Sat 15 Mar 2025 01:00:39 +0000
ROA not after: Fri 13 Jun 2025 01:00:39 +0000
asID: 9009
IP address blocks: 158.115.232.0/24 maxlen: 24
158.115.233.0/24 maxlen: 24
158.115.234.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:30:de:70:a7:42:14:62:fe:8f:c7:ef:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Validity
Not Before: Mar 15 01:00:39 2025 GMT
Not After : Jun 13 01:00:39 2025 GMT
Subject: CN=0a5bf1da-76d6-402e-bedb-dafd57eb8db4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7f:26:13:85:7d:4f:c5:ea:ec:7f:cc:16:37:
23:c8:a4:ae:44:be:91:47:a8:52:44:d4:e7:3d:53:
b4:4d:a7:dd:18:9e:c7:5a:42:e1:98:82:10:55:c5:
91:24:33:7f:bd:ea:76:e6:7d:4a:51:c3:1b:e0:80:
5c:2f:d2:19:4e:92:eb:bd:e6:8e:82:b2:95:4a:e9:
a1:b9:2d:eb:f8:49:02:b1:37:3a:d7:02:46:bc:21:
00:68:66:69:9d:b1:fa:30:25:6c:2a:55:92:35:ee:
5d:d8:4c:a7:76:3a:cc:23:19:18:38:1e:a5:d7:eb:
92:d4:78:ec:b9:61:ca:32:89:1d:77:a4:69:ce:e7:
96:03:51:59:ce:ea:52:68:c9:6d:7e:b3:bb:d8:0c:
62:e0:49:5f:30:e9:5f:d9:32:3a:29:51:b7:86:27:
89:5c:7f:73:da:18:b5:53:4a:a9:e8:5b:3f:9b:1a:
26:f9:70:1c:2b:7e:3f:be:8a:af:71:c1:e9:49:18:
3b:b3:01:97:10:77:e7:6d:6f:be:97:53:a1:3f:5c:
fe:bb:c2:6a:42:76:1a:37:a4:e8:88:cf:ce:39:c4:
bc:0a:8a:7c:5d:2d:c3:b9:96:42:51:32:54:18:81:
ef:c4:85:37:92:23:06:0b:ce:aa:46:b4:77:e1:f8:
8e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:14:24:9C:40:DD:6B:39:DC:AC:8A:AD:A7:38:E4:47:92:30:1C:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/a4f4dfbb-438b-39fb-98db-aed5cbd0c9c2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
X509v3 Authority Key Identifier:
keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
sbgp-ipAddrBlock: critical
IPv4:
158.115.232.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:b1:48:7e:c9:ed:db:1f:cf:1e:2c:cd:b3:5f:c3:a1:ab:39:
8d:2d:6c:33:b8:78:c2:06:ff:72:60:61:0e:f8:ac:6f:98:e5:
7c:77:f4:29:03:8e:9b:a8:07:2b:a1:15:31:56:0b:6b:9a:3d:
98:68:a9:57:ea:a7:f6:65:f8:8e:46:75:18:1e:bd:1a:4f:19:
7a:97:eb:8d:4a:40:e1:57:43:0f:18:c6:87:73:24:7b:47:98:
09:3d:d5:47:dd:ed:30:81:4b:d9:85:3f:4f:1b:99:25:ed:27:
c2:34:dc:d0:15:6e:17:95:cb:3c:7e:0d:e6:20:05:9c:1b:fd:
9d:76:17:a7:92:0e:14:0d:ad:79:c6:1f:b2:b6:7a:98:7b:87:
a7:b8:4e:b2:fb:cf:20:8d:35:3a:47:22:d2:7e:3f:3b:1a:3d:
c9:2e:de:cf:b3:ac:38:80:63:01:ff:0d:8c:f5:f5:32:a6:d6:
c6:8d:34:bb:85:bc:8f:59:ff:e5:07:22:be:14:1b:be:84:1c:
72:e3:cd:c8:9a:4c:67:3d:2f:42:f1:a1:a2:ef:62:73:19:bc:
fa:86:a3:dc:37:07:9a:f1:c5:98:74:88:2f:4d:7d:a9:cd:79:
6b:2e:69:ac:09:f5:c6:56:8f:bd:76:4a:5e:47:3e:3c:c9:fb:
8a:f7:29:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:02:45 2025 by rpki-client