Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/87954fed-dfd7-33f5-b195-f52a604ac05c.roa
File: 87954fed-dfd7-33f5-b195-f52a604ac05c.roa (raw, json)
Hash identifier: 52C2VXsyicrinQR93cyy8p6UkLNBty8SDChCW3oXFMg=
Subject key identifier: 2B:C8:0B:45:9E:02:CD:BC:FE:46:BB:7A:1B:03:30:AE:3D:4B:E2:79
Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial: 010D0C9F4328584851A577B51E3E9E36921B1300
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/87954fed-dfd7-33f5-b195-f52a604ac05c.roa
Signing time: Wed 25 Dec 2024 02:00:38 +0000
ROA not before: Wed 25 Dec 2024 02:00:38 +0000
ROA not after: Tue 25 Mar 2025 01:00:38 +0000
asID: 395831
IP address blocks: 216.157.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:51:a5:77:b5:1e:3e:9e:36:92:1b:13:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Validity
Not Before: Dec 25 02:00:38 2024 GMT
Not After : Mar 25 01:00:38 2025 GMT
Subject: CN=bc9b36ca-5dc8-413f-baef-fa6192612e35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8b:67:19:97:f4:da:22:4a:c9:6e:68:0c:10:
da:d8:f4:2b:bd:6b:1c:d4:8a:bd:1e:d3:11:c8:4c:
44:f2:1c:3b:f2:56:9f:49:53:72:6c:29:b7:92:ba:
dd:e8:18:94:c8:d5:f9:f6:06:4b:90:6f:fa:f6:59:
00:ed:5b:4a:01:80:7c:d4:b0:1f:7e:f9:2a:3d:45:
07:9c:ff:db:38:84:71:c9:ee:e5:72:77:4b:b0:59:
e6:55:7b:c4:bc:91:fd:d9:20:19:fa:a0:37:80:85:
b9:0c:6b:0d:25:e0:71:1c:8a:0e:46:80:57:ae:65:
a9:2a:e5:0a:83:1e:93:9e:29:aa:2f:98:4b:10:80:
0e:3b:4f:79:fb:58:53:44:43:bb:eb:d4:72:e7:63:
4e:0e:25:70:f8:5d:9b:a0:6d:b5:13:d2:45:70:37:
b5:ac:06:71:0d:2b:68:80:cd:9b:45:e4:4e:ad:ad:
49:6b:80:e3:fe:c1:d5:68:a5:0f:8c:38:dc:08:30:
a8:8a:7d:05:aa:0f:0d:5d:97:77:49:c0:a3:ae:b8:
92:70:a1:72:ae:41:77:b2:ac:03:12:06:15:a8:cf:
b3:55:a2:bd:52:56:b4:46:59:35:fe:38:de:4f:83:
f5:8c:f6:0c:48:88:13:3f:ee:54:1b:7a:2e:d0:57:
dc:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:C8:0B:45:9E:02:CD:BC:FE:46:BB:7A:1B:03:30:AE:3D:4B:E2:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/87954fed-dfd7-33f5-b195-f52a604ac05c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
X509v3 Authority Key Identifier:
keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
sbgp-ipAddrBlock: critical
IPv4:
216.157.133.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:18:54:98:3d:6c:fa:12:2a:3f:2e:ee:20:72:ef:83:4a:7b:
61:dc:65:96:7d:d9:1d:d5:58:1a:93:eb:8b:e9:9b:43:b4:85:
ef:5f:13:07:d7:cd:d4:36:df:33:57:72:63:d1:e5:a0:1b:0f:
10:5f:a1:ec:06:b3:d7:4e:ff:2d:67:d0:09:fa:d6:ec:ce:4f:
92:18:f4:f7:4b:f4:70:37:78:ea:18:7e:e2:3b:b8:6f:7c:4f:
f8:5a:87:f6:9d:5f:cb:68:6d:fc:78:d3:65:1d:fd:cc:67:3b:
69:96:e6:33:67:de:d1:08:30:ef:db:a6:51:12:b1:1f:59:79:
a4:0b:51:15:ec:a4:d4:17:3f:94:7b:70:ba:ad:36:b2:9c:a5:
c1:9f:37:91:ec:57:ae:81:d9:2f:0b:ca:05:2d:c7:c0:dd:03:
90:13:1a:7e:9e:db:9e:58:94:8a:dc:e1:e6:da:eb:6e:ca:3d:
18:81:c2:2d:88:24:43:cb:8a:5b:ce:92:7b:01:f5:04:71:b7:
8f:e9:82:ff:46:4a:5b:48:fc:7f:6d:69:90:59:fb:bc:13:26:
df:76:b4:b9:29:e5:be:94:21:db:15:92:71:53:ae:8d:77:0a:
d1:8b:03:5f:01:af:13:ab:11:81:04:cc:88:ef:ac:ce:d6:49:
0d:89:7c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:17:15 2025 by rpki-client