Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/23002cf9-daa2-312f-aa9c-f06f11f75bc5.roa
File: 23002cf9-daa2-312f-aa9c-f06f11f75bc5.roa (raw, json)
Hash identifier: a9Zl0KMuLSFwY1K6CgWBxYK1XJEqPprrrNEyX5vnqzc=
Subject key identifier: 67:3A:6E:57:E3:CE:4C:19:C9:81:B9:DF:03:4E:9A:F4:AF:18:A5:92
Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial: 010D0C9F4328584845158BBCA052C4E06B4C7280
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/23002cf9-daa2-312f-aa9c-f06f11f75bc5.roa
Signing time: Fri 20 Dec 2024 14:00:51 +0000
ROA not before: Fri 20 Dec 2024 14:00:51 +0000
ROA not after: Thu 20 Mar 2025 13:00:51 +0000
asID: 395831
IP address blocks: 158.115.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:45:15:8b:bc:a0:52:c4:e0:6b:4c:72:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Validity
Not Before: Dec 20 14:00:51 2024 GMT
Not After : Mar 20 13:00:51 2025 GMT
Subject: CN=e9f3070a-6403-4a46-8987-1e1f8172fec8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d4:a8:db:ae:fe:a6:d4:cf:bd:16:6a:bd:3f:
2c:b3:c0:ef:9e:2c:fa:c3:c7:1d:3f:03:66:6d:1d:
ea:ed:c5:16:a1:6c:f7:f3:62:e9:e3:cf:f8:ba:46:
64:20:32:b4:68:6d:73:04:6a:40:b3:2c:7d:83:0a:
1d:d4:6c:01:03:e7:e4:5b:09:fc:14:d1:61:5a:56:
96:68:0c:09:77:69:6c:cd:75:bf:68:6c:e5:35:ca:
86:66:a9:25:f3:d5:13:22:b5:9c:ea:67:f0:6e:54:
71:e5:a7:23:5a:83:71:a9:f3:6e:b8:de:53:ef:71:
4b:2a:62:60:8e:27:4d:85:b6:0f:99:99:1f:ac:2c:
47:ab:e6:1d:e7:2f:74:31:09:f1:2c:4f:17:61:9c:
0d:bf:1b:59:0a:69:10:ac:f0:5c:69:3b:32:0d:39:
ec:61:34:9a:9d:c4:53:98:51:76:14:65:0c:f8:33:
eb:03:10:47:77:01:56:ec:4b:19:e2:2d:02:ca:4e:
1f:6d:9c:c3:19:92:9f:fe:b1:73:07:a6:18:ed:31:
4e:63:fb:a4:0f:8c:ca:32:b1:34:7a:e3:e5:01:63:
58:a3:03:32:fc:5c:ba:8d:de:8c:e1:2f:d2:58:e4:
49:4a:43:bb:11:c3:4e:48:04:4c:18:49:d9:43:34:
44:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:3A:6E:57:E3:CE:4C:19:C9:81:B9:DF:03:4E:9A:F4:AF:18:A5:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/23002cf9-daa2-312f-aa9c-f06f11f75bc5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
X509v3 Authority Key Identifier:
keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
sbgp-ipAddrBlock: critical
IPv4:
158.115.156.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:09:7c:60:80:8a:5a:8c:ca:52:50:d7:13:72:59:94:f9:74:
5f:4d:f0:6a:23:38:ea:3e:18:03:a0:ee:1e:0b:13:83:f9:89:
90:ef:e9:ff:f6:94:af:3e:d6:35:99:fb:17:f0:7f:9c:a7:ae:
af:23:ae:ad:73:b4:28:ab:37:35:83:89:14:e3:28:a6:8e:19:
05:46:65:2b:a0:46:fc:99:9d:9e:2f:d0:21:5c:45:e7:79:d4:
a5:46:65:35:cf:a4:5c:35:07:41:eb:82:f2:0b:31:fe:bf:62:
88:4c:a0:b8:ed:27:68:a0:4f:a1:53:1b:d8:0d:2b:87:66:42:
63:5d:d9:66:d0:15:4c:16:49:35:15:4a:a0:dc:7f:92:51:c1:
cc:5c:fb:4f:d0:77:80:b1:42:48:c2:6f:73:4d:e6:48:18:97:
c0:19:7c:f6:a2:3f:5f:62:f5:c8:36:16:ec:7d:5c:98:77:5e:
b2:6e:7a:1f:3d:ce:aa:f7:f1:cc:4e:58:cd:52:a4:19:99:23:
d9:13:4d:58:84:55:3f:cf:89:c7:12:03:1c:8c:4a:9e:7e:f4:
fb:55:90:b3:6b:92:c5:86:cd:5e:05:02:e9:69:42:83:de:2b:
cc:77:60:cf:2a:76:ab:8c:71:f5:3c:b8:b7:5c:f1:d1:b5:1c:
c9:57:d1:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:14:53 2025 by rpki-client