Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/2f247cbb-2a74-3f35-b54f-a42a2616a74a.roa
File: 2f247cbb-2a74-3f35-b54f-a42a2616a74a.roa (raw, json)
Hash identifier: toJOJJl2jP7Ywbs/JQd2xGDP7D5tmc0CTB87lleFVtE=
Subject key identifier: 6A:C1:0C:66:CF:F5:F2:B2:F9:DE:AC:9B:AE:78:5C:AD:7D:4F:BF:9F
Certificate issuer: /CN=8a8a1a2d-c949-4896-93b9-71f917048e79
Certificate serial: 010D0C9F4328584900215A888AC83FF775B643C0
Authority key identifier: CA:65:E2:79:44:A5:9C:CA:6F:1B:C6:65:BC:37:0B:8D:6F:B8:CF:EB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/2f247cbb-2a74-3f35-b54f-a42a2616a74a.roa
Signing time: Tue 25 Feb 2025 14:00:52 +0000
ROA not before: Tue 25 Feb 2025 14:00:52 +0000
ROA not after: Mon 26 May 2025 13:00:52 +0000
asID: 399804
IP address blocks: 158.51.124.0/24 maxlen: 24
158.51.125.0/24 maxlen: 24
158.51.126.0/24 maxlen: 24
158.51.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:00:21:5a:88:8a:c8:3f:f7:75:b6:43:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a8a1a2d-c949-4896-93b9-71f917048e79
Validity
Not Before: Feb 25 14:00:52 2025 GMT
Not After : May 26 13:00:52 2025 GMT
Subject: CN=ca65e873-c259-4e04-9c87-670941e611ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:d6:1e:41:44:5f:d7:f9:6d:d8:5d:bc:53:a7:
4f:3c:6e:df:60:ab:aa:3e:d3:eb:95:21:95:80:54:
ef:be:ff:a8:f6:0c:98:2f:c5:be:2e:6e:39:5d:8f:
94:f4:8f:47:d6:ab:11:d4:4f:5a:40:95:6e:dc:b1:
05:38:9e:37:62:ff:fc:6d:c1:34:6a:b1:8f:27:2b:
bc:8c:93:cc:fe:44:ba:b9:5e:b6:3f:13:21:ac:26:
1d:36:8e:15:c8:3f:69:2f:ce:57:77:29:0f:60:05:
5b:e9:5f:0e:2a:a1:76:7e:b0:bb:67:81:73:25:e9:
4c:24:7b:52:92:15:64:cc:1b:a6:2e:a7:c3:7d:da:
fc:7a:4f:79:74:e5:02:c4:21:6a:92:42:c7:fe:61:
8b:cb:41:11:4e:24:e2:e0:fe:cb:51:4b:74:f0:ed:
9a:a8:df:f8:da:47:db:39:56:16:21:8f:e0:54:70:
66:2d:80:bf:76:aa:3d:6d:38:cf:d6:79:1f:6c:2d:
a6:0f:1c:42:72:7c:19:41:6e:91:98:a1:89:dd:76:
d5:6f:88:e4:b7:da:74:38:dd:b9:3f:05:de:c8:c9:
bf:fd:1b:cd:44:68:eb:b9:09:35:06:8c:b6:1d:fe:
34:34:ac:d0:01:1f:61:8d:8d:c9:97:23:c6:4a:7f:
06:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:C1:0C:66:CF:F5:F2:B2:F9:DE:AC:9B:AE:78:5C:AD:7D:4F:BF:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/2f247cbb-2a74-3f35-b54f-a42a2616a74a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8a8a1a2d-c949-4896-93b9-71f917048e79.crl
X509v3 Authority Key Identifier:
keyid:CA:65:E2:79:44:A5:9C:CA:6F:1B:C6:65:BC:37:0B:8D:6F:B8:CF:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79.cer
sbgp-ipAddrBlock: critical
IPv4:
158.51.124.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:ba:3f:eb:d0:af:5f:79:2e:b7:97:86:63:bb:17:04:60:14:
2e:1c:52:c8:d1:77:48:f4:81:0b:3a:06:1a:80:18:c3:82:30:
24:01:79:0b:ed:1a:9f:c3:70:1e:7d:3a:b2:3d:26:f1:aa:27:
7a:44:39:bf:06:f0:3f:e1:0a:db:ec:37:c2:94:d4:f7:cb:d3:
8a:10:36:18:ae:29:62:32:2f:01:5b:f8:31:9e:ad:49:1d:ec:
f6:02:1c:06:38:57:64:d7:5a:ef:a8:89:dd:71:26:ff:e0:c0:
95:89:1c:19:92:03:1a:58:fa:27:11:09:6d:09:40:92:15:14:
02:de:5e:48:5c:50:da:bb:a7:4e:81:a6:ee:e9:4d:ac:00:a8:
fd:07:55:95:86:cd:c1:b1:d9:30:49:d5:cc:6c:ea:2a:77:d7:
39:97:44:39:a5:2f:e8:94:5e:00:a6:f2:46:c1:1d:82:e9:af:
aa:11:ce:e6:57:f3:76:2c:8d:59:d4:3e:fb:25:cc:a2:0e:4d:
55:b5:fc:19:8a:a5:1a:e6:81:29:71:e1:9a:6a:ae:71:a9:df:
88:06:6c:95:77:fa:37:17:ca:e3:a9:05:f8:bf:7d:ad:6f:12:
d6:c5:60:71:30:db:91:42:5a:3c:1b:29:75:70:99:82:6d:69:
cb:08:74:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:55:43 2025 by rpki-client