Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/752ee1ac-3a3a-3437-8c09-9f21c38dec58.roa
File: 752ee1ac-3a3a-3437-8c09-9f21c38dec58.roa (raw, json)
Hash identifier: O0HZE3FUTjYp19n0dFxLLweVRFc8weIMgY6FY0LOX8c=
Subject key identifier: F3:69:01:F0:52:1A:0A:A8:2E:9E:04:25:90:AA:7B:6D:A8:66:AE:39
Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial: 010D0C9F4328584851A57182E6201C19CB3B7B40
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/752ee1ac-3a3a-3437-8c09-9f21c38dec58.roa
Signing time: Wed 25 Dec 2024 02:00:38 +0000
ROA not before: Wed 25 Dec 2024 02:00:38 +0000
ROA not after: Tue 25 Mar 2025 01:00:38 +0000
asID: 14618
IP address blocks: 216.157.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:51:a5:71:82:e6:20:1c:19:cb:3b:7b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Validity
Not Before: Dec 25 02:00:38 2024 GMT
Not After : Mar 25 01:00:38 2025 GMT
Subject: CN=2601a334-ef5a-4985-8ee6-228adfdb50e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d1:11:02:bb:4d:e4:26:98:9e:a2:f1:48:96:
20:4c:9d:1f:ad:35:75:aa:6f:cc:60:7d:cf:79:3b:
ac:06:30:70:b2:91:16:08:f4:ae:9b:98:e3:f0:2a:
39:0d:6a:3e:7a:a8:23:39:55:9f:3d:8e:4e:af:6b:
d2:40:bc:50:36:10:71:3b:41:f6:49:24:b7:c3:49:
c3:51:a0:c9:39:6b:c1:c6:a8:21:72:94:7d:39:55:
72:bb:25:9e:8c:b7:4d:15:59:da:e8:24:06:18:bb:
cb:fa:ef:bc:2c:4b:4a:20:26:38:f8:03:df:2f:cc:
bd:13:b2:88:4b:65:54:17:48:b2:92:88:7f:da:e9:
59:ca:a6:d0:4d:bc:d8:f7:9d:94:5a:be:aa:38:f4:
da:17:62:d7:a3:ec:ab:ce:07:2b:1c:b5:f8:07:da:
2d:a7:2e:a7:db:0a:87:ec:67:e3:a8:4f:e6:cb:13:
db:9e:81:cd:a5:5c:28:ab:a9:4b:98:40:c4:cf:05:
35:18:82:4e:97:da:d2:7f:4f:e7:b0:28:a5:43:93:
10:0f:4b:df:33:3f:b7:cb:8e:13:a5:d1:62:14:56:
97:87:c3:c7:26:9f:81:9c:d8:88:63:ab:c5:81:1e:
7f:fa:2a:ce:a4:d7:fe:07:ce:4a:17:2a:42:79:f5:
8e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:69:01:F0:52:1A:0A:A8:2E:9E:04:25:90:AA:7B:6D:A8:66:AE:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/752ee1ac-3a3a-3437-8c09-9f21c38dec58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
X509v3 Authority Key Identifier:
keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
sbgp-ipAddrBlock: critical
IPv4:
216.157.133.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:7f:46:87:af:53:32:02:a8:32:4f:37:0b:97:db:8c:93:c8:
ad:69:56:bf:16:b4:ae:25:5e:19:15:52:e7:9c:92:78:50:ea:
db:a7:6b:80:23:b4:54:c6:44:22:14:73:52:ff:a2:a7:c7:e5:
7d:f5:fa:5c:d9:82:19:b8:67:8c:d7:1c:23:bd:58:03:c2:5c:
8f:79:c3:1f:2b:e8:a1:16:f6:36:47:b8:02:35:9e:b1:9f:35:
51:1a:ec:28:9b:77:f4:a2:42:5d:f6:31:44:4c:23:4a:0e:12:
a0:a9:5b:60:98:2f:b6:fa:21:2e:54:7e:63:ab:eb:37:9c:24:
cb:7c:eb:b0:88:f5:56:a6:03:e1:51:1c:e3:7e:cd:40:eb:d1:
a7:59:c6:9f:4f:2e:3f:fb:8a:e4:4d:e3:5d:b5:d9:68:c8:e9:
dd:a5:8b:48:f3:cf:ca:e8:a0:dc:8c:fd:38:ef:d9:4d:b0:4f:
aa:3d:2d:ff:ed:e2:fa:5b:4c:0b:35:e9:7e:d1:67:43:3e:ce:
df:5c:2a:5b:f5:21:f2:5d:4b:8e:49:77:36:74:81:ce:a3:46:
3c:72:fa:92:1a:dc:9e:94:b8:6d:59:fd:29:1e:40:f3:4e:1d:
22:a5:ca:05:cb:a2:f6:7b:aa:bd:62:50:39:8a:b2:aa:78:fc:
9b:bf:b3:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:38:13 2025 by rpki-client