Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/e3d82341-289c-3a6e-b275-a759634f1b4a.roa
File: e3d82341-289c-3a6e-b275-a759634f1b4a.roa (raw, json)
Hash identifier: N5mQADMmFS82vzbsL+QOMGNAB2DPT6UZ0JzGt3+Z/Zw=
Subject key identifier: 79:B9:C0:76:CF:B2:C6:80:E5:01:8F:7A:52:48:8D:F2:A8:8A:F9:AD
Certificate issuer: /CN=2aa438c9-0cbb-4364-946d-9714249a8222
Certificate serial: 010D0C9F432858494F93EE278B837B64F4550580
Authority key identifier: 05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/e3d82341-289c-3a6e-b275-a759634f1b4a.roa
Signing time: Wed 26 Mar 2025 01:00:40 +0000
ROA not before: Wed 26 Mar 2025 01:00:40 +0000
ROA not after: Tue 24 Jun 2025 01:00:40 +0000
asID: 63293
IP address blocks: 157.240.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4f:93:ee:27:8b:83:7b:64:f4:55:05:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa438c9-0cbb-4364-946d-9714249a8222
Validity
Not Before: Mar 26 01:00:40 2025 GMT
Not After : Jun 24 01:00:40 2025 GMT
Subject: CN=bbe249bc-5400-4317-82c0-1f93459a7aca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a7:06:fe:3c:81:8d:2f:ff:0e:d3:88:44:34:
b6:e0:aa:7e:4f:6f:55:96:3d:a7:eb:a9:1a:62:19:
b7:13:01:f2:99:2a:22:de:b3:1e:0c:c9:5c:12:56:
43:c2:8f:23:45:95:1e:b1:25:8e:e6:0c:e5:d0:85:
a4:41:25:fe:89:f0:b8:75:72:30:d0:dd:ed:70:12:
1c:16:90:2e:f8:ba:dd:39:0b:ce:42:99:43:cf:00:
b3:4d:30:b3:64:90:22:57:ba:73:d3:e6:58:5a:46:
89:28:63:03:61:38:83:50:3c:86:c8:4a:33:68:0f:
17:41:bb:5b:43:1b:7c:10:11:2b:6f:a0:96:6b:8e:
c6:a4:94:5c:75:b7:74:f7:44:50:10:d0:2b:83:f7:
0f:34:fa:6f:10:be:22:8e:3c:2d:e2:25:c1:28:91:
96:e1:5e:d1:d3:a0:df:c8:73:fb:9a:ed:d3:e0:9c:
9a:75:42:26:62:51:2f:26:fd:8d:c5:f0:fe:0f:b7:
2e:f5:7b:43:51:a5:b2:47:1f:39:f4:d6:56:84:e6:
73:8d:fe:95:d9:e7:aa:68:19:40:1f:73:e7:bb:5f:
e4:75:96:7c:1c:21:97:f2:97:fa:56:ac:2d:a2:dd:
b7:16:bd:c5:0f:37:43:5a:00:81:c1:4a:01:d5:a5:
30:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:B9:C0:76:CF:B2:C6:80:E5:01:8F:7A:52:48:8D:F2:A8:8A:F9:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/e3d82341-289c-3a6e-b275-a759634f1b4a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl
X509v3 Authority Key Identifier:
keyid:05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer
sbgp-ipAddrBlock: critical
IPv4:
157.240.188.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:bf:45:6f:f6:12:f4:5c:64:ea:98:89:a1:20:1c:15:29:e9:
51:ee:25:6a:c6:ed:cc:04:7a:b7:d4:1e:94:35:5c:0b:3f:96:
bf:2c:f6:68:3d:88:45:3c:a9:47:37:d3:a6:bc:ab:e4:f5:5e:
60:ef:58:34:a9:7c:26:5b:00:84:1b:1a:f8:c9:86:f2:f1:a0:
cc:e9:d1:4e:25:7a:0a:1a:1f:52:d9:fd:b3:76:28:27:bf:0a:
02:6d:4e:f7:9f:e8:b3:c6:43:8e:a7:a7:a2:4f:46:1b:a1:6b:
50:2e:37:82:72:d6:79:35:0e:16:5b:f7:32:48:39:7a:0a:c3:
60:d9:0b:bd:37:b3:92:1b:94:89:c9:d3:29:3b:0c:b0:30:86:
0d:d2:be:22:ec:ec:d9:bc:7e:b1:c8:40:68:3d:de:52:a0:de:
9c:df:27:26:3b:b1:e5:b2:07:66:1b:4e:aa:4a:a3:d9:3a:6f:
07:83:c6:5d:99:cf:ed:71:15:96:2d:fb:d7:d4:29:1b:fd:20:
65:93:59:28:82:82:ad:73:df:cc:09:81:9a:90:07:6e:16:ea:
ab:75:f2:57:df:4b:ba:b2:52:b5:75:f2:30:21:bf:aa:74:fe:
dd:e1:6b:b7:0e:e1:f4:2d:8b:b6:44:35:ea:c7:a4:98:11:36:
b3:c4:9c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:08:37 2025 by rpki-client