Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/146ef9ae-f845-3565-9b2c-e21a984d126d.roa
File: 146ef9ae-f845-3565-9b2c-e21a984d126d.roa (raw, json)
Hash identifier: N95td4B/TzuTukdKwPwUPU+4ov3vvokAUr8J/u3UdYk=
Subject key identifier: BF:BF:F4:5D:E9:42:23:D2:43:FE:3B:FD:CC:52:4B:40:C0:A2:83:FB
Certificate issuer: /CN=8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee
Certificate serial: 010D0C9F43285848D2113C68E3B07C79909E0B00
Authority key identifier: 92:15:36:2F:1B:1E:90:72:AF:90:24:E2:1F:13:67:D7:7A:09:E9:B1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/146ef9ae-f845-3565-9b2c-e21a984d126d.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 53407
IP address blocks: 158.120.32.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:11:3c:68:e3:b0:7c:79:90:9e:0b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=5905e867-34d3-4a88-bd37-d57d87beb25b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e4:62:ed:fd:cb:d0:e5:3f:39:23:cc:07:64:
85:a5:e0:5c:c7:b3:3b:bd:09:ed:6e:b6:a0:77:97:
e4:4d:ee:c7:d5:17:b2:e5:92:2b:b3:1e:54:c3:aa:
0e:a5:d0:cd:9e:7a:df:95:3e:c0:75:bf:cf:8b:32:
e2:a9:41:f0:65:0b:91:bf:67:ea:9c:ff:bb:26:08:
e9:35:39:3b:45:02:53:df:19:6c:4d:06:75:a1:2f:
9d:3c:c8:43:29:56:f0:71:ac:3b:d2:ca:93:59:95:
f3:e2:bd:df:f0:bd:5a:7c:44:8c:57:2f:72:ac:02:
af:c8:36:06:1c:8b:b2:18:07:c9:5d:bb:be:fc:23:
7b:f8:71:22:f4:0a:e7:83:01:c5:1e:70:16:15:3f:
24:9b:51:df:45:33:80:94:20:2f:e9:0f:c6:a2:6f:
ee:bb:d3:0d:09:fb:6e:c5:50:39:72:e9:63:68:7e:
49:63:92:8e:12:31:f8:4a:55:54:d7:7c:d2:14:29:
21:7f:ec:0f:7a:fa:ac:20:72:74:e2:f0:43:5c:ac:
f5:99:a0:ad:28:02:a0:21:a0:08:ea:c2:72:a6:7d:
c6:4a:00:07:69:a1:67:ff:a2:3c:55:08:b8:bd:bc:
43:d0:3b:6a:09:e2:94:78:d9:e5:eb:21:67:10:71:
76:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:BF:F4:5D:E9:42:23:D2:43:FE:3B:FD:CC:52:4B:40:C0:A2:83:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/146ef9ae-f845-3565-9b2c-e21a984d126d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.crl
X509v3 Authority Key Identifier:
keyid:92:15:36:2F:1B:1E:90:72:AF:90:24:E2:1F:13:67:D7:7A:09:E9:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.cer
sbgp-ipAddrBlock: critical
IPv4:
158.120.32.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:57:44:31:c6:e0:8b:4f:e2:51:e1:17:5a:aa:48:b7:0c:f0:
cf:38:e8:4c:5e:48:04:d8:ad:0a:34:e9:4a:f4:eb:e3:d6:41:
e9:5a:3b:96:00:54:3f:fb:67:24:72:cc:d4:f2:78:19:e6:f5:
ce:5e:e5:13:fc:b6:08:a5:26:50:b5:2f:45:77:62:ba:36:b2:
1a:1b:70:a5:18:86:8d:7e:ea:ed:58:e3:f5:69:0e:a4:72:d6:
c5:b1:5f:05:28:3f:de:a1:52:37:30:ad:8f:b9:f2:ad:49:79:
7d:76:c3:e7:16:e9:d9:86:52:2b:b8:0b:a2:bf:e6:40:b1:e3:
9a:69:5f:f9:eb:bf:56:88:99:0d:0c:0b:dc:a8:d1:19:66:df:
7d:54:c6:26:ef:f4:9b:d6:48:dd:40:39:d6:a2:af:9f:d0:f9:
6b:9b:33:fc:01:9b:d8:96:ad:44:e8:db:cf:2e:13:f4:ba:4e:
d6:8f:bd:4c:c2:af:49:72:36:4e:7d:cf:61:3f:13:79:a8:63:
9d:81:19:fb:09:66:e8:11:52:13:0b:67:12:1b:58:e9:d4:9a:
d4:9c:89:ad:6a:92:ed:ca:99:c3:d4:b0:c6:64:28:28:bc:14:
98:d1:e6:78:ec:75:41:c6:cf:1a:08:10:28:61:9a:82:47:5c:
b1:fd:5a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:40:55 2025 by rpki-client