Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/5c304d34-8950-35d5-acec-d2d13773b41a.roa
File: 5c304d34-8950-35d5-acec-d2d13773b41a.roa (raw, json)
Hash identifier: mkXmNWrKwTYL973TZul3VSF7YxCxjHpRWutGCKIrTA0=
Subject key identifier: F3:B4:55:19:C8:AD:41:76:A6:2B:63:5C:B7:64:8E:73:43:6A:A7:8F
Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial: 010D0C9F4328584875F058C243684726F0A79AA4
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/5c304d34-8950-35d5-acec-d2d13773b41a.roa
Signing time: Tue 07 Jan 2025 02:00:39 +0000
ROA not before: Tue 07 Jan 2025 02:00:39 +0000
ROA not after: Mon 07 Apr 2025 01:00:39 +0000
asID: 16509
IP address blocks: 216.157.130.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:75:f0:58:c2:43:68:47:26:f0:a7:9a:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Validity
Not Before: Jan 7 02:00:39 2025 GMT
Not After : Apr 7 01:00:39 2025 GMT
Subject: CN=95a96a6e-3577-493d-8265-7b95eb774fa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8b:6c:b0:46:92:94:ee:57:54:3d:f2:fb:2c:
6f:52:80:eb:a7:22:cf:03:b6:17:c0:3e:e2:8f:13:
ea:9f:bd:3b:08:e1:7b:a0:2e:51:91:a2:7a:a9:1f:
d4:a2:92:36:b9:e1:d9:0f:0f:eb:cb:68:62:36:bb:
c6:c4:18:e1:bd:b2:e0:ec:4c:1f:11:fe:3d:b1:31:
3c:64:b0:79:27:b8:f1:c1:b6:63:96:2f:66:49:54:
22:53:da:ad:fa:bd:f8:62:f9:86:b6:34:f1:14:a9:
dc:0d:b1:17:ed:af:98:64:ef:e5:48:ea:23:32:1b:
a7:eb:58:1e:bf:b9:dd:15:02:8c:5a:7b:ea:8a:c0:
b8:15:75:0e:de:22:08:0e:59:57:25:0f:d5:9b:3b:
6d:0c:a8:2d:d9:25:62:6b:5d:76:a5:aa:10:f7:62:
5e:3c:6b:6f:ca:0b:d5:1a:bb:2d:8f:0d:d6:9c:bf:
a1:85:59:25:38:b9:86:19:7c:c9:41:ad:12:de:98:
bf:47:66:c6:0a:67:4c:b0:02:02:a2:33:fa:1e:97:
0d:c5:13:ed:68:2e:43:1c:af:6b:40:53:d2:32:80:
11:52:21:71:08:7c:74:13:89:35:e6:85:b4:da:b1:
6a:ba:02:45:3c:86:8c:1f:74:5a:23:d3:c2:d9:60:
f9:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:B4:55:19:C8:AD:41:76:A6:2B:63:5C:B7:64:8E:73:43:6A:A7:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/5c304d34-8950-35d5-acec-d2d13773b41a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
X509v3 Authority Key Identifier:
keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
sbgp-ipAddrBlock: critical
IPv4:
216.157.130.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:c1:d9:1f:cb:67:29:b0:34:21:e7:8d:c7:95:41:36:f0:93:
54:93:c6:43:1b:ed:ee:e7:fc:b4:d1:34:35:58:b3:d4:04:5e:
d5:a0:ed:c9:96:d5:b4:08:71:f8:7b:22:7f:bc:22:41:ad:50:
4b:bf:a4:83:af:b5:ce:19:2f:1c:c9:b8:4b:ca:62:12:b3:e6:
28:92:d2:80:26:64:99:f6:ae:3a:0c:d2:97:3e:ed:ce:60:8a:
f9:22:e7:73:d8:6d:ca:a3:14:79:81:02:5a:eb:31:77:0b:6e:
83:c8:c7:0b:fe:cb:d1:d8:bf:fb:9d:79:17:4a:3b:dd:87:cf:
02:ff:c4:2e:9a:0b:b2:5b:55:54:8e:7d:5a:d3:c9:61:8e:8f:
a0:83:1f:ca:75:e0:69:e4:4c:84:4b:b4:b9:3c:c9:f1:fe:32:
1c:35:d7:61:70:29:28:2d:80:4c:3c:cb:24:93:11:bf:c5:6c:
e3:45:50:d7:31:0f:13:23:6f:38:85:fc:47:23:a8:9c:b6:95:
18:8b:3c:fa:93:c7:8a:4c:17:4a:7f:ad:01:85:78:b7:a2:fb:
5e:ca:d7:46:b6:b9:c8:b0:7e:94:fb:dc:de:10:ba:79:71:e4:
62:b6:69:33:d8:d6:73:df:b3:30:c9:7a:e9:02:ef:e0:4d:f5:
3e:54:bb:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:29:06 2025 by rpki-client