Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/2613f3f7-60d2-3644-87f5-381f608c7546.roa
File: 2613f3f7-60d2-3644-87f5-381f608c7546.roa (raw, json)
Hash identifier: vaZqAK9Zntjt0++NWvQBP22KE3mvJSJd3EaBb/B+Wxc=
Subject key identifier: 98:4D:C3:F4:F5:E6:17:F2:8B:27:AF:A7:68:CB:44:67:28:33:D9:F3
Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial: 010D0C9F4328584851A571BE8CE475DBB31FE200
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/2613f3f7-60d2-3644-87f5-381f608c7546.roa
Signing time: Wed 25 Dec 2024 02:00:38 +0000
ROA not before: Wed 25 Dec 2024 02:00:38 +0000
ROA not after: Tue 25 Mar 2025 01:00:38 +0000
asID: 16509
IP address blocks: 216.157.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:51:a5:71:be:8c:e4:75:db:b3:1f:e2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Validity
Not Before: Dec 25 02:00:38 2024 GMT
Not After : Mar 25 01:00:38 2025 GMT
Subject: CN=59fb303d-083f-49a2-b435-7e9417103bc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a8:e9:9a:a2:02:1c:e7:14:65:2e:cf:85:be:
84:c1:42:66:58:c6:6b:4c:59:77:e3:ae:d1:42:05:
0c:03:4b:73:51:4f:fc:6b:6d:35:61:0c:c8:fc:cb:
d9:ca:b3:a4:e6:05:02:6d:e1:e1:75:cd:11:c8:0f:
31:88:e5:2a:77:5b:c4:71:63:8f:06:11:d1:2c:33:
90:02:34:0a:91:94:04:a4:98:4e:1b:75:da:19:16:
9f:12:48:2f:ad:ad:61:2e:c1:6d:02:8b:94:15:67:
9a:69:1b:f9:52:8d:4f:04:f0:41:6f:10:a0:f1:17:
6c:f8:57:75:03:b2:24:69:5d:b4:21:ef:1e:1f:1f:
66:3e:b5:65:a2:92:e2:d3:99:47:0d:73:93:0e:b4:
b5:d8:38:b6:15:de:f3:94:4c:7f:0e:02:59:2f:b7:
ba:28:f7:e6:c8:44:ff:52:f5:40:d7:79:63:57:80:
1c:e4:5b:50:4b:c8:57:c6:be:ab:22:f5:28:8a:17:
58:19:90:fd:4d:26:1f:fa:07:0b:ff:ff:64:76:89:
38:ad:4f:54:0b:e1:48:92:d7:af:7b:f9:f1:2f:c0:
0d:4c:d4:e7:c6:a5:e6:f3:bd:3f:c7:4d:62:e6:74:
5c:22:34:07:f7:a3:10:77:7a:87:c4:d2:a0:f2:5b:
36:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:4D:C3:F4:F5:E6:17:F2:8B:27:AF:A7:68:CB:44:67:28:33:D9:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/2613f3f7-60d2-3644-87f5-381f608c7546.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
X509v3 Authority Key Identifier:
keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
sbgp-ipAddrBlock: critical
IPv4:
216.157.139.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:0e:b1:fd:f7:6d:e1:57:f5:f0:6c:d2:ce:ad:72:11:76:e5:
a8:46:c0:0b:49:6c:70:3a:a1:77:f7:0e:d0:bd:5c:7f:5b:de:
e7:d5:c5:93:d5:a7:9a:8a:b8:39:b3:2b:3b:d1:7c:63:ae:d5:
5c:5d:75:d7:5c:0a:e2:e6:e2:19:01:c7:b5:9f:1f:3e:1c:86:
97:98:54:e7:2e:b8:06:c6:29:5b:b2:42:eb:d5:1a:e7:36:08:
62:50:aa:dc:71:79:35:bb:b0:7b:90:d8:7c:75:66:5a:bc:19:
fc:ae:93:68:77:06:bd:7f:03:12:9b:99:82:44:cc:e2:b4:fb:
49:fc:2c:25:34:86:a5:f8:00:75:98:3c:b1:0e:51:56:f3:f8:
60:9a:f9:81:14:d3:54:d8:d3:39:83:28:80:00:e2:62:7b:6f:
4f:cf:a1:07:d1:e0:a0:71:08:97:71:d2:17:22:e4:f3:d8:9a:
23:10:41:a4:d0:02:58:a2:20:5f:97:01:83:0f:b3:72:2b:d0:
1d:ba:ef:79:96:2a:ba:ac:09:9a:29:c1:a7:4c:af:c3:dc:a7:
c1:54:80:54:d9:92:2d:01:36:31:7a:0f:ea:28:b3:1c:04:d2:
c9:9a:dd:f7:ee:97:c8:5d:96:f4:35:a6:0e:0b:83:c4:2d:a8:
00:0c:8a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:44:13 2025 by rpki-client