Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/1cafc32e-37ff-3be5-8b34-b31586912636.roa
File: 1cafc32e-37ff-3be5-8b34-b31586912636.roa (raw, json)
Hash identifier: 0Ww9HEEuvzDCZj1+WNkNZqrgMIKre4nWXworFZaZoUc=
Subject key identifier: 4E:07:1B:46:0F:12:6A:4A:7D:F6:F5:15:5E:AE:E4:76:81:17:73:CC
Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial: 010D0C9F43285847FC7F8F9148EC7E0DEE7F5280
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/1cafc32e-37ff-3be5-8b34-b31586912636.roa
Signing time: Sun 24 Nov 2024 14:00:39 +0000
ROA not before: Sun 24 Nov 2024 14:00:39 +0000
ROA not after: Sat 22 Feb 2025 14:00:39 +0000
asID: 16509
IP address blocks: 158.115.157.0/24 maxlen: 24
2606:7bc0:1092::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:fc:7f:8f:91:48:ec:7e:0d:ee:7f:52:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Validity
Not Before: Nov 24 14:00:39 2024 GMT
Not After : Feb 22 14:00:39 2025 GMT
Subject: CN=763650df-db6c-4d47-887e-c59b1c3c0922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:44:c3:43:bc:01:b9:94:4b:5e:fc:30:d7:03:
77:7c:1f:b6:b3:78:5a:a0:46:a7:dc:3c:2f:ce:1d:
80:70:94:4b:50:41:d7:ae:59:69:ec:98:4e:b2:e4:
d1:b1:c8:66:cb:bc:42:da:ef:f6:e4:d6:db:55:39:
51:21:55:0e:f1:7c:dc:b9:15:0c:63:d4:11:96:89:
09:19:3a:2d:ea:5d:6b:68:12:af:66:e8:18:5c:70:
03:b7:cd:68:c1:5a:f2:39:8a:03:62:2c:c7:14:78:
7f:fb:aa:d1:74:65:6f:cd:aa:fa:8e:43:e1:a5:ae:
79:fb:8e:0a:bb:61:f4:47:f3:48:d8:74:aa:8f:59:
71:05:87:6d:dc:f9:fb:b9:41:cc:6e:8e:2c:f2:52:
f0:ec:ac:65:f2:95:84:bb:b4:19:03:0c:f0:35:57:
6e:2a:f6:66:e8:09:c1:7c:44:87:f8:a5:f8:27:c2:
4f:cc:a4:a1:b1:0b:5f:7d:d3:1a:18:ea:e5:59:2c:
58:bc:ed:d2:cb:3f:f6:09:43:d3:0f:18:14:d2:e9:
82:87:ca:c5:73:cb:da:78:37:9b:57:63:68:5a:db:
53:24:dd:c9:24:bf:77:12:9a:f8:1d:fd:d6:03:0c:
ac:86:13:9e:94:6d:63:73:4a:2e:aa:4a:9b:5c:33:
54:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:07:1B:46:0F:12:6A:4A:7D:F6:F5:15:5E:AE:E4:76:81:17:73:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/1cafc32e-37ff-3be5-8b34-b31586912636.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
X509v3 Authority Key Identifier:
keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
sbgp-ipAddrBlock: critical
IPv4:
158.115.157.0/24
IPv6:
2606:7bc0:1092::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:d7:19:6a:3c:ee:05:27:97:99:4c:78:be:fa:60:62:e6:ce:
3f:c6:8c:fc:b1:76:3a:13:3d:28:ff:39:cd:cf:84:35:02:23:
c3:53:67:b7:0a:8d:bf:51:88:b4:d6:fb:bf:48:1a:39:06:e4:
c0:c1:6e:dd:a9:8a:7d:ce:94:97:41:86:35:67:45:39:6e:9b:
96:67:c6:2f:86:59:4b:01:92:a1:16:53:c3:2c:11:7d:40:dd:
4f:e9:18:67:ec:11:d8:73:f6:b5:d6:35:bf:43:07:b6:9c:c9:
0a:5f:7e:fb:f9:75:97:55:24:e4:95:34:01:52:e0:20:e5:5d:
b7:3a:d2:3a:f3:95:2b:e2:7b:94:99:94:5d:39:69:c5:04:d1:
64:2c:6d:d3:5f:1d:4f:4a:9d:bc:17:41:cd:42:19:71:bc:b5:
fc:b5:a7:9b:05:71:97:cc:2f:4a:29:27:25:4e:6c:73:86:be:
c4:bc:49:1d:ed:32:ef:cb:00:b0:23:7f:5e:74:4a:26:15:3a:
0e:fd:5e:3b:cc:25:7f:e8:f2:5a:14:db:b6:00:4b:30:1e:c8:
a5:06:88:7f:9f:61:f9:b1:3b:ed:18:4d:b5:91:0a:1c:54:4b:
4f:c4:b4:38:4d:3d:b0:21:38:98:c6:03:e9:f0:ff:2b:74:2a:
9b:c5:83:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:48:52 2025 by rpki-client