Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/a5c5b016-cf10-329d-abb7-002e0ccfb803.roa
File: a5c5b016-cf10-329d-abb7-002e0ccfb803.roa (raw, json)
Hash identifier: v3kD+1tCUFasHJvkRa5fojggsfmTEUIWJnLKUrta8H4=
Subject key identifier: 31:D2:CF:37:45:39:74:47:F0:9E:A4:A6:86:4A:E9:6C:42:82:C3:AA
Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial: 010D0C9F43285848A99626D18E1E3BEF0E942A80
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/a5c5b016-cf10-329d-abb7-002e0ccfb803.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 395831
IP address blocks: 158.115.146.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:26:d1:8e:1e:3b:ef:0e:94:2a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=2c43bcfb-735b-4c06-a9d8-299211caef16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:be:c9:c9:77:07:db:47:57:92:93:c1:25:81:
21:00:c6:fa:c3:55:5e:44:7b:a5:f8:96:fc:55:10:
c4:8e:fe:3a:b0:d2:b8:6a:ae:c1:0d:a7:a8:e5:24:
b6:4d:4e:48:90:b9:eb:f9:0c:1a:30:a8:52:d2:72:
cc:a0:fe:14:1f:6b:b3:9a:59:5a:e5:71:37:9e:c0:
2d:3a:69:65:d8:10:2b:c3:17:71:d6:cd:51:f9:5d:
83:bd:87:91:3a:7f:a7:59:4b:06:66:fc:2e:5b:6c:
0d:99:04:85:7c:5a:33:d8:95:4a:22:b8:26:de:0d:
da:7b:07:2c:3f:44:2e:7a:b7:57:15:c4:51:7f:3c:
d0:92:be:64:8f:48:6f:23:03:49:f3:97:b9:76:6d:
b5:27:81:e7:93:60:93:56:35:87:a5:c4:6c:cf:cb:
2b:5e:5c:0a:da:05:1a:a2:94:54:51:22:0b:5c:45:
f7:ac:1c:0e:6e:71:9d:bf:05:2b:9e:11:a9:0f:81:
c2:0e:5d:16:08:61:fc:46:fa:e3:15:d5:6c:7f:be:
10:66:22:26:22:fb:9f:a8:56:de:77:32:55:51:aa:
d5:27:c9:e6:7f:17:1c:41:b7:20:0c:3d:ac:02:a9:
d4:a9:76:d4:21:7e:00:21:48:a9:65:b2:91:5e:38:
c0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:D2:CF:37:45:39:74:47:F0:9E:A4:A6:86:4A:E9:6C:42:82:C3:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/a5c5b016-cf10-329d-abb7-002e0ccfb803.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
X509v3 Authority Key Identifier:
keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
sbgp-ipAddrBlock: critical
IPv4:
158.115.146.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:74:f4:e2:19:fa:13:2d:89:d5:b0:ae:3d:25:69:e0:4c:0b:
39:78:fe:35:8b:04:42:4c:b1:bb:b6:b4:c1:de:fd:23:b5:44:
62:59:59:dc:e4:cf:94:aa:bb:35:93:b2:d4:5d:37:ac:cf:c1:
8d:da:46:30:25:e4:11:20:78:8e:4f:e5:e2:fe:78:56:98:70:
35:26:13:3a:e9:72:fe:b4:ee:9c:06:37:09:fb:f4:68:63:04:
61:dd:19:f3:f8:de:43:6c:03:c9:d7:1e:54:40:e1:a6:2a:1e:
b6:2a:83:a4:58:60:7b:3e:a4:a3:29:32:00:1e:7d:92:3e:9c:
18:39:92:17:ae:e0:4a:0c:ed:ef:40:7e:0e:6f:cf:94:ee:8e:
a5:b9:1b:0b:3b:dd:60:4c:39:bf:a2:59:57:60:3b:e9:40:1f:
4b:30:5e:65:a6:d1:8b:3a:0f:17:5d:2d:53:06:f6:16:41:bf:
ac:93:7c:7a:06:2e:0a:e9:2a:80:2a:53:59:db:4f:61:f7:f9:
6f:92:4f:7a:47:c1:49:4a:f4:04:4c:d1:d5:29:2b:9f:82:8f:
06:7c:7f:ce:e7:ed:87:58:05:20:60:53:0e:ac:74:21:5e:a0:
1d:e2:46:77:4f:a0:f5:66:74:12:44:da:93:48:ee:6f:ce:9c:
fc:50:30:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:17:04 2025 by rpki-client