Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/85240ca7-41e9-329b-8a29-307187f566aa.roa
File: 85240ca7-41e9-329b-8a29-307187f566aa.roa (raw, json)
Hash identifier: 5nywDf/yoXzJNXp5I2cXtGd2cUBp3wShXOXYpI/zpjs=
Subject key identifier: C8:B8:3E:63:CE:99:FF:04:C6:FF:D8:19:24:A6:80:6F:76:08:3F:1A
Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial: 010D0C9F43285847FC7F8FD590E052DDDF3669E0
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/85240ca7-41e9-329b-8a29-307187f566aa.roa
Signing time: Sun 24 Nov 2024 14:00:39 +0000
ROA not before: Sun 24 Nov 2024 14:00:39 +0000
ROA not after: Sat 22 Feb 2025 14:00:39 +0000
asID: 16509
IP address blocks: 158.115.158.0/24 maxlen: 24
2606:7bc0:1093::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:fc:7f:8f:d5:90:e0:52:dd:df:36:69:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Validity
Not Before: Nov 24 14:00:39 2024 GMT
Not After : Feb 22 14:00:39 2025 GMT
Subject: CN=4fbbd654-1e19-43d3-b017-1163fe6d804f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:81:7d:fa:e0:a3:f3:57:57:29:39:5a:cd:f2:
fa:0f:9e:db:6c:ab:5e:de:a9:45:88:5e:85:48:aa:
f7:ea:28:4a:81:60:58:0f:2c:4f:90:f3:54:c3:17:
67:58:17:27:eb:3e:39:76:55:52:8b:a4:d6:59:d8:
8f:f5:7e:94:55:d4:ed:ad:82:67:ce:e2:d4:84:ab:
86:b5:e3:ad:a9:59:56:05:54:11:31:bc:13:fe:aa:
30:40:fa:59:b3:40:ca:b1:21:90:25:01:13:25:66:
7d:33:15:a8:bb:da:e0:2c:b5:20:3f:4e:63:8c:7e:
7e:0b:bd:6d:f3:42:46:57:86:2c:c0:d9:8e:f6:0a:
8a:bc:32:be:9e:9a:d3:86:b5:9a:59:cb:66:18:af:
f6:67:cf:33:a8:98:c2:b0:a1:b4:ee:10:06:50:28:
f2:f2:88:3a:dc:33:ba:c0:d5:26:44:76:f1:e7:c5:
76:78:e9:a7:61:3e:d2:85:3d:7d:5f:f8:de:f1:ab:
d5:61:ac:6f:60:21:59:5b:b5:80:8c:fc:5c:2d:1a:
a1:c4:17:75:b8:42:de:60:fe:2f:09:4c:43:ce:e4:
60:48:86:e5:b2:0c:9a:c4:b0:d3:eb:d4:d2:49:79:
97:84:c8:68:4f:1d:70:a4:89:e1:eb:b1:ca:95:35:
d3:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:B8:3E:63:CE:99:FF:04:C6:FF:D8:19:24:A6:80:6F:76:08:3F:1A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/85240ca7-41e9-329b-8a29-307187f566aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
X509v3 Authority Key Identifier:
keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
sbgp-ipAddrBlock: critical
IPv4:
158.115.158.0/24
IPv6:
2606:7bc0:1093::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:36:09:d0:c6:2b:90:5e:47:e4:4f:a1:e6:ea:48:e0:22:a6:
62:76:17:48:27:ff:07:32:36:fd:37:02:6c:68:e3:15:c0:89:
d4:91:02:15:b1:5a:de:3f:94:89:3a:83:26:a9:25:44:e7:82:
f3:c9:53:24:df:6f:cb:d9:72:ca:39:34:59:e4:c1:f1:80:e4:
4c:e7:6d:3e:a6:66:41:e1:30:ca:32:b1:cf:79:c4:6b:40:59:
79:12:6f:24:19:39:92:be:87:55:3f:ac:82:02:e1:45:21:d7:
ed:52:09:5d:ad:3a:b1:b0:b3:a2:a8:9e:16:34:16:b9:aa:2f:
6c:a0:14:4f:6e:39:5a:59:c6:39:df:cc:78:cd:36:b4:d8:2e:
96:09:01:12:c6:60:5c:88:28:7d:42:21:39:8e:9f:53:89:6b:
94:b6:50:fd:dd:70:a9:57:1d:4f:da:53:5b:5d:32:3a:f3:e6:
ae:6c:64:81:58:ce:e3:b6:7e:cb:97:ef:e4:a4:8e:fa:03:b9:
62:56:07:3f:10:39:d4:f1:50:67:a6:3b:7e:69:2f:4c:ea:6b:
96:cd:94:31:97:7f:ee:ed:c3:f6:b2:41:a6:f5:d4:9b:de:57:
8b:ef:12:4c:89:a9:68:2c:ab:9f:b7:d8:80:67:dd:e4:16:a8:
48:c9:4f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:47:52 2025 by rpki-client