Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/a6a369ce-f8e2-3690-9de9-31da83e4f39d.roa
File: a6a369ce-f8e2-3690-9de9-31da83e4f39d.roa (raw, json)
Hash identifier: 4VxHebszbMV21621ltoD4G8rCRR/MMeUl28LHowTYGc=
Subject key identifier: 2F:FF:47:32:E8:AC:A8:C9:3C:A1:D0:DB:15:79:2A:FF:64:C9:BD:A4
Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial: 010D0C9F43285847FC7F8FB8D778A15A5DBECBC0
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/a6a369ce-f8e2-3690-9de9-31da83e4f39d.roa
Signing time: Sun 24 Nov 2024 14:00:39 +0000
ROA not before: Sun 24 Nov 2024 14:00:39 +0000
ROA not after: Sat 22 Feb 2025 14:00:39 +0000
asID: 395831
IP address blocks: 158.115.157.0/24 maxlen: 24
2606:7bc0:1092::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:fc:7f:8f:b8:d7:78:a1:5a:5d:be:cb:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Validity
Not Before: Nov 24 14:00:39 2024 GMT
Not After : Feb 22 14:00:39 2025 GMT
Subject: CN=3d864bbe-cc9c-46cb-95aa-5b179c4b843d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b3:10:52:cf:5c:0f:19:98:d5:08:20:a5:8a:
59:12:6d:c5:f8:45:fc:bc:2a:bc:16:82:8b:c5:85:
0d:13:14:77:e1:7a:25:ce:68:b6:79:42:76:c6:48:
b3:89:6c:f8:79:1d:9c:14:2e:e4:13:62:64:1e:6e:
2e:87:40:04:d2:ee:64:53:6e:4e:55:a8:26:1d:f5:
a0:47:70:31:30:da:85:81:5e:b9:14:94:1f:c4:3c:
39:60:b7:f7:0c:41:65:f6:9e:87:ff:76:16:f6:30:
bb:3c:6c:70:3d:af:6b:82:6b:63:c5:83:63:03:f6:
91:f2:ee:7e:26:72:73:cf:95:13:65:90:d3:fc:1c:
a2:a2:90:50:2d:73:b8:2c:c1:52:1a:63:45:53:a7:
00:ce:29:41:f0:bc:98:18:cd:51:bf:d9:51:ce:df:
58:c3:fc:94:c3:60:6b:77:92:08:96:fc:fc:53:b6:
a5:1b:38:1c:12:f0:fd:fd:c2:3f:97:50:e0:e7:7b:
cc:3c:ed:05:46:07:b8:05:8a:55:59:11:8a:24:f6:
f7:90:aa:9a:90:43:c0:32:22:2a:1e:72:f2:26:3b:
de:9a:0d:ce:76:ae:63:e9:36:eb:aa:69:1d:1d:6e:
04:1e:7f:b8:4a:62:29:2b:24:4d:b3:c9:b4:b0:12:
74:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:FF:47:32:E8:AC:A8:C9:3C:A1:D0:DB:15:79:2A:FF:64:C9:BD:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/a6a369ce-f8e2-3690-9de9-31da83e4f39d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
X509v3 Authority Key Identifier:
keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
sbgp-ipAddrBlock: critical
IPv4:
158.115.157.0/24
IPv6:
2606:7bc0:1092::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:c2:71:e6:44:1b:99:23:8d:63:1f:43:a7:d7:78:5d:59:b2:
8e:0b:e6:65:b9:f1:92:cb:d1:b1:49:41:51:3c:dc:70:ef:7e:
13:b3:14:02:84:67:a8:5e:41:c9:b3:0a:02:52:36:77:a9:43:
6f:64:19:74:ea:d0:00:5a:02:4d:37:ce:02:85:ec:fc:41:f0:
4b:ed:b5:dc:0f:cc:f6:9f:b1:ad:c7:d1:8c:fe:16:c3:c4:a2:
be:78:da:0c:f8:54:5d:a9:51:d0:01:a3:b2:d0:19:5b:b0:4d:
76:5c:81:de:29:f0:db:79:50:12:fc:75:1e:c6:64:14:9d:bf:
9a:1a:e4:6d:fc:0e:59:42:dc:37:44:76:33:f8:24:f5:08:ff:
9d:e6:88:5d:f9:dd:43:fa:60:d5:5b:88:df:74:52:5e:f9:8a:
13:be:96:18:a2:ca:b1:77:4a:93:f4:13:54:57:ce:64:9f:b1:
b2:cb:4e:b5:b3:fb:64:73:3b:31:20:44:6f:84:bb:39:5e:19:
b1:2a:67:dd:f0:5c:45:eb:5f:28:83:35:58:03:2b:8b:c6:28:
c5:43:59:e5:fc:54:b4:6a:51:94:54:63:c8:b2:78:51:15:e2:
45:15:19:fc:e2:38:6c:47:b2:f1:c5:8c:c2:6b:8d:7e:06:00:
21:1c:31:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:43:54 2025 by rpki-client