Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/f40db607-ba51-31dc-a3de-582414ffec4b.roa
File: f40db607-ba51-31dc-a3de-582414ffec4b.roa (raw, json)
Hash identifier: q07o1Ib94WOQa6W3yh74GPZsjIdqiuOpR6S4l4UoCio=
Subject key identifier: 91:D4:4A:BD:CD:70:8D:5D:C5:0D:D3:97:6B:A2:30:CE:CC:03:F9:6B
Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial: 010D0C9F4328584953C4388CAFA20F3DADCCF8A0
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/f40db607-ba51-31dc-a3de-582414ffec4b.roa
Signing time: Thu 27 Mar 2025 13:00:52 +0000
ROA not before: Thu 27 Mar 2025 13:00:52 +0000
ROA not after: Wed 25 Jun 2025 13:00:52 +0000
asID: 54113
IP address blocks: 157.52.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:53:c4:38:8c:af:a2:0f:3d:ad:cc:f8:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
Validity
Not Before: Mar 27 13:00:52 2025 GMT
Not After : Jun 25 13:00:52 2025 GMT
Subject: CN=5bacc4c7-9cad-4965-96d7-1d92fbb643b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5a:4c:6a:95:38:8d:e2:04:f3:d5:e3:f2:b1:
97:e1:47:a6:0c:aa:dd:e3:32:43:30:2f:d1:ab:eb:
c1:1e:33:6d:c7:99:cb:c6:e6:0e:51:ae:35:fe:95:
7c:86:ab:da:94:12:fe:c0:92:dc:69:2f:d0:df:3b:
45:97:ea:da:f4:2a:4d:92:6a:b2:da:e0:81:d9:28:
81:91:66:ea:51:b7:00:f8:78:45:e4:b0:4d:de:cf:
1d:8a:60:52:d3:bb:34:62:ec:65:d0:0b:c6:f7:98:
ea:6c:9a:bf:04:30:20:7f:e7:10:21:0a:0b:aa:22:
4e:78:44:54:b7:e5:91:5c:f0:5a:f1:54:c5:cc:4e:
29:e4:c7:86:d0:d1:9e:a2:f4:0c:91:c0:29:31:ce:
a0:97:46:77:92:fa:7d:0a:9b:33:34:0c:b9:f9:c1:
a3:5e:6e:80:84:c8:a0:b4:7a:c9:4e:1c:f5:7b:dd:
58:a4:74:0c:f6:2c:19:a9:40:86:f0:42:61:0a:88:
5f:12:ac:d5:15:ea:10:8e:f9:03:65:ef:d3:77:d7:
0c:b9:d9:e4:e9:49:32:0e:66:45:bc:b3:a6:db:6f:
9d:dd:8f:57:06:c9:7e:5a:52:31:40:42:21:ca:15:
05:24:20:cd:7e:fe:56:31:c4:e7:d0:6d:90:9a:d8:
c4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:D4:4A:BD:CD:70:8D:5D:C5:0D:D3:97:6B:A2:30:CE:CC:03:F9:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/f40db607-ba51-31dc-a3de-582414ffec4b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
X509v3 Authority Key Identifier:
keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
sbgp-ipAddrBlock: critical
IPv4:
157.52.94.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:9b:72:94:08:93:36:a2:f4:d8:35:03:c2:20:01:75:26:a9:
58:5b:72:c8:b6:a8:51:91:85:f0:bf:2d:e3:b5:9e:ee:e7:b8:
02:a0:40:32:1d:de:a8:43:98:f9:19:b3:5b:34:36:19:71:0f:
ad:f7:72:8c:1a:0b:ed:b6:3a:ff:aa:20:db:55:20:84:ec:a9:
1b:1b:f3:da:e4:fb:fb:12:bd:97:57:11:4d:eb:59:d3:63:ea:
6a:ae:55:8c:43:17:7c:0f:0c:e5:f3:a4:b2:42:55:59:fa:8c:
ab:72:7a:3f:c8:c5:f0:e5:f9:f0:4d:f9:84:25:47:63:c8:21:
8f:ed:07:81:f8:99:f6:75:5b:d5:36:d4:04:61:a0:0c:55:0b:
95:53:e4:e2:1f:21:8c:19:7e:52:f9:0d:12:d9:98:b0:41:ad:
3d:55:d3:34:cb:42:86:0b:ff:d6:b7:83:a0:21:cf:51:54:11:
f2:3e:5a:3b:dc:4c:ca:38:6d:39:e8:c8:e3:77:18:8b:59:79:
1f:1d:e2:8c:3c:90:a2:2f:39:91:18:c3:fb:49:8f:38:73:4d:
95:1d:93:1b:8f:b2:0e:f6:b2:fd:f7:74:77:43:b3:fa:02:3f:
a2:bf:cf:63:2c:f4:e6:07:f1:4e:62:dc:ad:ef:df:fd:2e:2f:
87:89:55:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 02:59:41 2025 by rpki-client