Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04d70e06-3aa0-4536-a3c7-ee27a8dde5fc/88c3cfdb-1c95-378e-98ed-7259a5d31ff1.roa
File: 88c3cfdb-1c95-378e-98ed-7259a5d31ff1.roa (raw, json)
Hash identifier: lv9lclCLw2th429C2b3Ly8fG6+wQDWL7MUp5Ip6a49I=
Subject key identifier: 57:21:94:9F:C7:64:36:F6:DF:69:BC:0A:1F:26:3E:FC:1A:97:A7:1B
Certificate issuer: /CN=04d70e06-3aa0-4536-a3c7-ee27a8dde5fc
Certificate serial: 010D0C9F43285848854B470AAFA6FA81946B3420
Authority key identifier: 71:5D:86:B5:41:98:4D:51:6D:E9:C0:4A:98:5A:F7:88:C6:6A:25:E0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04d70e06-3aa0-4536-a3c7-ee27a8dde5fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04d70e06-3aa0-4536-a3c7-ee27a8dde5fc/88c3cfdb-1c95-378e-98ed-7259a5d31ff1.roa
Signing time: Sun 12 Jan 2025 14:00:53 +0000
ROA not before: Sun 12 Jan 2025 14:00:53 +0000
ROA not after: Sat 12 Apr 2025 13:00:53 +0000
asID: 397265
IP address blocks: 158.51.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:85:4b:47:0a:af:a6:fa:81:94:6b:34:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04d70e06-3aa0-4536-a3c7-ee27a8dde5fc
Validity
Not Before: Jan 12 14:00:53 2025 GMT
Not After : Apr 12 13:00:53 2025 GMT
Subject: CN=9d2356ef-6999-4a30-a456-8225fd1f6045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a5:50:b6:a7:92:04:5e:a7:fc:6e:8b:dd:82:
bb:be:72:63:04:c5:f2:f7:f3:24:ba:5b:a9:32:68:
ff:d8:f1:f2:1e:20:0d:5b:c6:be:b3:34:f9:52:ac:
d6:be:08:c6:c9:7f:31:d7:32:5c:4c:2c:63:bc:38:
f3:1c:3c:9a:9c:2c:42:4e:fa:f2:69:ac:24:9d:ac:
da:fb:9f:14:8f:39:8f:eb:a9:f8:9d:ff:b1:9f:6e:
63:e2:91:80:97:4f:bb:c0:d1:79:b1:c5:ab:8c:ba:
65:39:63:92:e6:6b:9a:bb:ea:4e:e9:6d:be:26:47:
43:38:00:06:55:1a:bb:c3:f0:1e:bd:59:b1:19:06:
a1:12:e8:8e:5d:67:00:ee:08:7c:8b:c6:ec:7b:cd:
bd:47:89:7c:4b:05:e4:b1:96:85:b1:3b:78:48:da:
8e:e6:30:a1:e7:1d:68:e7:7b:b9:2a:22:cd:a2:6d:
5c:04:72:05:52:d7:16:ae:3b:9b:6d:85:db:67:21:
8d:31:50:0d:e8:25:ee:7e:11:c3:3d:28:f5:b9:3f:
ce:54:19:d2:80:8e:15:da:b1:3d:6a:2b:9b:43:9d:
a5:c1:68:34:da:50:b7:cc:56:5b:23:63:12:b6:18:
33:44:08:6b:f5:7e:24:dc:94:74:d9:4c:12:16:ca:
b6:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:21:94:9F:C7:64:36:F6:DF:69:BC:0A:1F:26:3E:FC:1A:97:A7:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04d70e06-3aa0-4536-a3c7-ee27a8dde5fc/88c3cfdb-1c95-378e-98ed-7259a5d31ff1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04d70e06-3aa0-4536-a3c7-ee27a8dde5fc/04d70e06-3aa0-4536-a3c7-ee27a8dde5fc.crl
X509v3 Authority Key Identifier:
keyid:71:5D:86:B5:41:98:4D:51:6D:E9:C0:4A:98:5A:F7:88:C6:6A:25:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04d70e06-3aa0-4536-a3c7-ee27a8dde5fc.cer
sbgp-ipAddrBlock: critical
IPv4:
158.51.201.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:f5:73:39:dc:62:97:3d:9a:22:53:fa:cc:98:aa:02:b2:87:
8c:32:4d:9a:8c:90:b1:71:cc:42:06:79:3d:e0:53:90:4b:ff:
00:2b:c6:f4:02:38:0a:95:1a:5f:78:57:fb:2b:eb:99:49:15:
56:ed:de:6f:5f:46:a2:b3:e2:55:58:da:e4:c9:c6:1f:05:07:
48:c3:db:6f:e2:03:26:ef:73:7e:7b:20:58:4d:ba:9f:fb:9e:
3a:9f:db:7a:85:c5:18:8c:25:2a:f9:f3:82:5c:6b:d8:8c:c8:
ea:b5:00:a8:61:b6:62:71:2a:e2:b0:0e:8f:91:55:8e:5e:42:
42:f9:9f:56:94:e3:cc:5d:09:ff:41:c0:b3:0d:65:2b:25:bc:
77:40:6f:64:d8:43:08:a8:f0:4e:63:4d:cd:c2:a4:99:b6:55:
ad:50:47:18:02:51:e9:54:7d:0e:3b:a1:bc:87:b5:4a:6c:14:
9d:d2:22:ca:fd:7c:5d:de:14:3b:8d:34:0a:16:79:9f:e9:57:
2e:98:3a:a9:94:43:36:af:35:8b:45:ba:48:a6:91:24:f3:31:
a9:99:4b:35:81:49:c0:4a:3a:ab:af:92:68:2a:c1:9b:bf:3d:
0c:73:49:15:2a:87:50:c1:ab:3b:72:5e:1e:c8:97:cd:af:28:
fe:12:82:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:26:43 2025 by rpki-client