Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/693a7f7c-ef92-3044-b13d-b2ec55d3212a.roa
File: 693a7f7c-ef92-3044-b13d-b2ec55d3212a.roa (raw, json)
Hash identifier: 0JKhbb2/3R/lrpBTsUBKDsFkAsMkzrEyWYbqcEIg7Bk=
Subject key identifier: 28:62:35:6E:55:71:B3:54:3A:26:CA:38:BC:DF:A8:28:08:02:9C:32
Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial: 010D0C9F4328584851A5751825DD716B0B1A2380
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/693a7f7c-ef92-3044-b13d-b2ec55d3212a.roa
Signing time: Wed 25 Dec 2024 02:00:38 +0000
ROA not before: Wed 25 Dec 2024 02:00:38 +0000
ROA not after: Tue 25 Mar 2025 01:00:38 +0000
asID: 395831
IP address blocks: 158.115.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:51:a5:75:18:25:dd:71:6b:0b:1a:23:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Validity
Not Before: Dec 25 02:00:38 2024 GMT
Not After : Mar 25 01:00:38 2025 GMT
Subject: CN=34eb5fe7-7407-4a9d-aab0-24a7a08b63bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3f:7e:f3:11:b0:5c:e9:0c:71:10:c9:16:17:
18:21:7d:14:00:8b:2b:5d:86:5b:2c:eb:d9:4a:ee:
a4:34:65:93:d4:26:24:33:31:6d:ec:bf:de:9a:fa:
3c:24:0f:9e:9b:ab:6a:0d:94:7f:98:9f:af:d2:34:
03:45:9e:22:12:e1:74:a2:bb:b3:d0:35:b9:f1:d2:
54:6c:8f:af:66:a9:21:19:dd:e0:14:12:42:e5:7d:
7f:66:f6:a2:21:9b:8e:bb:93:54:ee:cd:78:32:e9:
37:39:61:62:3d:e5:16:3d:69:fd:5d:6d:ee:fe:ce:
3a:1e:26:40:a2:2e:91:f9:75:6f:63:31:ce:f2:3f:
ca:9e:1f:46:bf:1a:cb:ef:d1:cb:c9:57:2f:f0:e8:
29:f2:dc:c8:47:e4:d6:5a:ba:89:5b:91:76:44:a4:
68:6c:20:93:5d:15:25:fd:b3:67:82:79:61:8b:24:
ba:fd:5a:97:4e:80:f1:d6:db:ec:39:7a:7f:a2:a3:
f6:94:40:69:f1:6e:d9:87:91:1f:f8:11:84:73:b6:
18:c3:4b:88:a0:84:cd:db:63:01:d3:58:e9:84:01:
ed:d7:7c:19:2d:79:85:5e:36:24:6e:08:99:3c:4f:
e8:ac:dd:d3:83:46:bd:d3:73:1b:12:5e:3b:a5:af:
c2:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:62:35:6E:55:71:B3:54:3A:26:CA:38:BC:DF:A8:28:08:02:9C:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/693a7f7c-ef92-3044-b13d-b2ec55d3212a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
X509v3 Authority Key Identifier:
keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
sbgp-ipAddrBlock: critical
IPv4:
158.115.147.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:63:d6:07:a4:16:70:85:1f:fe:4f:7a:7d:4c:13:c6:50:25:
5a:20:f5:52:6e:1c:98:41:0e:46:3a:c1:dd:19:91:70:64:7f:
eb:03:ba:2a:38:e6:90:96:0d:11:66:cb:60:29:f6:5a:8a:0c:
4f:83:cd:98:ee:15:e9:00:5b:af:6a:b5:71:ee:64:7f:f0:0d:
99:11:b2:bf:3e:7b:98:1d:af:6a:16:3a:3a:a7:1e:9f:a8:fb:
e0:03:21:04:ba:44:76:5d:e8:82:34:11:26:35:c4:bd:12:f2:
6f:fd:19:03:d1:03:f8:dc:a0:f9:e7:3c:b3:f2:d5:1e:fd:99:
10:fd:84:d9:11:53:ce:ea:47:40:da:a8:8c:8d:f3:85:14:e4:
f3:a6:75:65:96:e2:fa:4c:8e:dd:53:0c:26:90:48:b6:49:59:
8a:6b:20:d5:8d:23:49:0b:11:5c:8b:ac:4d:3a:53:f5:86:01:
6d:8b:2a:f7:17:69:39:7f:ba:e1:56:d9:4c:14:a4:ac:95:0f:
81:23:20:eb:b1:b0:6b:72:33:15:e4:2b:80:f3:24:56:77:0b:
1c:fc:97:11:a4:d3:1b:bc:fc:8d:da:ee:72:db:d8:3c:2b:12:
74:b0:6e:17:f1:a4:7d:e1:ee:0e:39:98:d9:12:79:ae:42:8d:
03:84:77:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:59:35 2025 by rpki-client