Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/131c2c20-6fc7-3ee4-acbf-db942fd1d953.roa
File: 131c2c20-6fc7-3ee4-acbf-db942fd1d953.roa (raw, json)
Hash identifier: QjA0EFrIZGVT7yzV3MKVFAbb3TF7+NA8MGW8WvPXQAs=
Subject key identifier: FE:29:F1:2E:8B:47:5D:EB:6E:EA:53:96:A3:76:B5:CF:FF:65:8E:C0
Certificate issuer: /CN=2aa438c9-0cbb-4364-946d-9714249a8222
Certificate serial: 010D0C9F4328584949FEB27A5A518942DE7C6770
Authority key identifier: 05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/131c2c20-6fc7-3ee4-acbf-db942fd1d953.roa
Signing time: Mon 24 Mar 2025 01:00:38 +0000
ROA not before: Mon 24 Mar 2025 01:00:38 +0000
ROA not after: Sun 22 Jun 2025 01:00:38 +0000
asID: 63293
IP address blocks: 157.240.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:49:fe:b2:7a:5a:51:89:42:de:7c:67:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa438c9-0cbb-4364-946d-9714249a8222
Validity
Not Before: Mar 24 01:00:38 2025 GMT
Not After : Jun 22 01:00:38 2025 GMT
Subject: CN=5d81d768-7d51-4a42-9daf-7061575ccb2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:d6:79:b9:7a:ff:87:52:20:93:35:11:e2:63:
71:e2:8e:42:a6:aa:6f:cf:bb:d0:c1:8a:c3:47:4a:
c8:d9:f7:6c:85:04:7a:7f:e8:85:aa:31:88:56:fe:
f8:a6:fe:ef:b8:0d:01:be:7b:88:4b:64:ab:38:c4:
d0:fe:b2:04:74:db:96:81:a9:55:7e:71:8a:f5:c2:
e6:b2:c3:bb:11:2e:08:51:01:fe:fa:c4:06:5e:da:
79:c5:f9:4f:33:3b:4f:95:8a:d1:16:b4:89:bf:c4:
ee:0a:a4:fe:76:78:d7:6d:76:be:2e:ac:a0:14:7b:
b7:86:fb:ac:0a:87:e9:07:87:f4:73:7b:c1:64:a9:
0a:28:f4:97:c7:c3:a5:e2:80:92:e3:48:be:9d:03:
62:2a:2c:16:4c:cd:78:40:d0:f2:a0:bd:01:4a:2e:
97:4b:c2:71:58:31:d0:ed:8d:d4:03:fa:e1:a5:e7:
d1:40:4b:43:97:bd:17:63:2d:98:a6:49:83:83:11:
fb:c4:25:d9:f8:a9:40:f0:7d:fa:4b:7c:5d:33:ab:
65:46:bd:98:3f:dc:13:a9:ec:d1:02:fb:9d:56:36:
b9:c8:c9:cf:22:99:18:30:57:ff:f5:f1:1e:63:cb:
32:e3:dc:25:ec:83:58:eb:37:81:52:c9:45:8c:ec:
25:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:29:F1:2E:8B:47:5D:EB:6E:EA:53:96:A3:76:B5:CF:FF:65:8E:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/131c2c20-6fc7-3ee4-acbf-db942fd1d953.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl
X509v3 Authority Key Identifier:
keyid:05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer
sbgp-ipAddrBlock: critical
IPv4:
157.240.191.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:57:aa:46:72:79:c0:18:c8:e1:e5:83:d6:8c:21:f7:51:20:
13:f7:ca:76:3f:e1:8c:fa:6a:37:10:6e:03:87:e7:3e:43:25:
b6:29:23:6b:1c:e7:cc:43:7f:ec:68:1d:ab:6f:00:e5:93:30:
6c:96:1d:4b:cc:a1:14:b4:8d:59:85:9a:95:40:bb:1c:62:e2:
17:03:30:ab:2c:ee:ac:c4:c8:53:46:9e:47:ad:26:ca:c5:89:
fa:f3:de:b9:48:3f:64:52:35:29:fc:67:e2:bf:7c:8d:aa:8d:
21:3c:da:7f:5f:1e:fb:fa:65:88:dc:69:63:5a:25:b6:6a:1f:
b5:c4:e7:a7:41:1c:0e:e9:c0:2b:12:28:29:b3:61:d0:10:87:
cd:c9:99:3a:0e:2d:e6:47:e1:2e:7b:e9:16:c2:05:3b:ba:4b:
14:8b:2c:4b:2c:fd:87:60:69:37:d6:4e:b0:f3:b1:1f:e0:a8:
8b:fa:b1:18:75:11:66:73:01:ac:7e:07:98:e1:e0:19:58:8c:
32:12:4b:49:42:41:a0:82:bb:aa:a2:2a:e6:f8:75:bb:50:e2:
d7:c6:83:38:17:b7:76:20:28:d2:2d:3f:f5:a4:43:fd:ac:59:
9a:7c:25:17:b2:53:00:84:f4:64:c6:ca:64:d2:a4:54:16:04:
a5:72:26:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:00:10 2025 by rpki-client