Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/28f0139c-9371-3365-b4df-a8964e3aa355.roa
File: 28f0139c-9371-3365-b4df-a8964e3aa355.roa (raw, json)
Hash identifier: ecL9wID5Ig2Cb2NlOQwatO+j7d/pPcznqbY6or4uF8c=
Subject key identifier: E5:BC:4A:D8:EB:E3:38:6F:41:0D:11:09:C0:5F:82:5F:7C:1D:91:A2
Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial: 010D0C9F43285848FD56CC23CDCD91E0797F7F00
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/28f0139c-9371-3365-b4df-a8964e3aa355.roa
Signing time: Mon 24 Feb 2025 14:00:52 +0000
ROA not before: Mon 24 Feb 2025 14:00:52 +0000
ROA not after: Sun 25 May 2025 13:00:52 +0000
asID: 54113
IP address blocks: 157.52.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fd:56:cc:23:cd:cd:91:e0:79:7f:7f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
Validity
Not Before: Feb 24 14:00:52 2025 GMT
Not After : May 25 13:00:52 2025 GMT
Subject: CN=b8b734bd-fda7-40b8-80d5-935245c27665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:59:49:24:08:57:d9:31:5c:f4:f7:2c:ad:90:
9f:b4:38:17:dd:60:0b:b7:6c:8a:f0:f6:18:bb:1d:
f5:96:3a:26:ca:f0:2e:cc:c0:9f:c8:13:ec:67:c7:
98:53:79:7f:06:b1:4d:6a:cf:41:17:ac:e9:7f:3c:
1b:f1:cf:04:df:bb:11:e5:89:c0:33:55:f5:18:1d:
3c:22:bc:a4:1a:f1:ff:22:fe:c5:ef:30:56:4d:59:
4a:a7:c6:12:01:ee:41:c0:f5:f2:34:57:5e:1e:02:
d2:5f:b2:68:52:26:ae:3a:55:87:bd:a5:ac:8f:5c:
22:a3:e8:5f:e2:46:92:25:79:27:04:82:86:3b:1a:
20:95:1f:ec:d8:2f:b7:39:e0:04:d9:54:d3:36:5d:
d6:4e:d2:d7:a2:6f:f8:e5:6f:d2:8e:26:3e:c2:76:
5e:02:64:5c:be:a2:9d:1b:01:4c:76:0f:ff:e9:11:
37:2c:17:3d:d6:3c:48:6a:66:db:2f:8c:8c:a4:06:
52:98:9e:eb:3f:65:85:fe:03:ba:77:0c:81:69:3c:
b5:7f:c5:4e:4b:86:3c:ba:cf:c7:f6:00:6d:ba:ba:
37:d2:53:16:34:7e:5e:dd:0d:49:10:25:fa:be:ff:
8d:2a:7f:45:0c:67:17:b3:13:d6:9a:f5:b5:32:79:
59:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:BC:4A:D8:EB:E3:38:6F:41:0D:11:09:C0:5F:82:5F:7C:1D:91:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/28f0139c-9371-3365-b4df-a8964e3aa355.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
X509v3 Authority Key Identifier:
keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
sbgp-ipAddrBlock: critical
IPv4:
157.52.112.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:38:3e:82:0b:c5:9b:c7:16:00:b2:ac:cd:05:41:03:10:ce:
ad:94:c5:de:fb:03:aa:a1:73:a6:b7:2d:a0:22:d6:f2:e1:4a:
9d:2b:66:98:e7:15:c5:6f:a2:9b:2d:2f:7a:8f:88:ac:55:2e:
d0:37:a2:a0:7e:2e:0b:41:7b:f9:c0:e4:c4:fc:2a:2f:99:b6:
c0:66:32:df:83:67:9c:12:28:d3:dd:20:98:be:22:a5:e6:22:
db:3d:6a:9f:67:82:90:0d:f0:0a:7b:ef:5a:6f:a1:70:2d:0e:
4d:1c:e1:e3:2c:de:e8:d2:52:18:e7:f1:90:a8:20:e2:0a:b1:
58:88:44:0e:61:e1:67:46:12:06:f2:e8:70:a8:29:ff:57:71:
89:0c:fd:c5:e1:b2:7f:9e:63:9b:34:62:14:29:6b:d1:39:f8:
79:9c:22:44:31:6b:4f:23:5a:74:d7:09:a7:29:eb:0b:7f:fb:
76:88:85:82:01:3c:49:59:79:7c:de:7f:63:e7:48:a7:26:8f:
c0:32:b5:1a:3b:a1:b4:2a:9b:e0:23:2f:db:3f:ae:ad:a1:b0:
3c:96:bc:42:70:52:67:56:51:18:59:d6:d6:83:35:f8:b4:45:
39:ce:a2:c5:6b:dd:1e:66:00:f7:92:b3:ca:33:e5:75:2a:46:
5b:e7:38:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 02:53:40 2025 by rpki-client