Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/aee1a109-6c8a-3502-9111-b9b5953b35f9.roa
File: aee1a109-6c8a-3502-9111-b9b5953b35f9.roa (raw, json)
Hash identifier: 9k3WPjLe3fsaLuUsfAn9KDpW2zyJYJhcwhIbQj0Wxew=
Subject key identifier: 4A:1C:55:BB:EC:DC:9E:99:C5:43:F0:E6:19:DD:84:DC:9D:77:F0:2F
Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial: 010D0C9F4328584875F058A0AE635AD3F69E6040
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/aee1a109-6c8a-3502-9111-b9b5953b35f9.roa
Signing time: Tue 07 Jan 2025 02:00:39 +0000
ROA not before: Tue 07 Jan 2025 02:00:39 +0000
ROA not after: Mon 07 Apr 2025 01:00:39 +0000
asID: 395831
IP address blocks: 216.157.130.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:75:f0:58:a0:ae:63:5a:d3:f6:9e:60:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Validity
Not Before: Jan 7 02:00:39 2025 GMT
Not After : Apr 7 01:00:39 2025 GMT
Subject: CN=791ef027-8d4c-4230-bc65-7eecd1d01ba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:79:b0:9d:c0:11:54:1d:8f:2e:1f:95:a1:86:
9d:80:49:db:b4:cd:72:99:8a:fd:9f:aa:2e:96:39:
fd:ab:65:99:d3:16:2d:6a:49:bf:e9:8f:ce:ea:fc:
96:07:43:eb:95:a8:a0:58:60:f0:cd:12:0b:68:4c:
7b:2f:a4:b3:d4:fe:93:4d:12:6f:33:28:56:20:57:
19:b4:2d:a2:e9:18:0b:e5:da:45:01:22:b7:86:40:
b3:58:43:6c:f3:78:fb:cc:c2:fc:75:4a:0b:7a:c3:
38:25:30:7f:de:6b:60:b8:d0:f2:42:99:63:33:a9:
23:1e:93:5a:fe:aa:c6:84:d9:9c:4f:e2:72:81:b9:
dc:fa:05:67:13:11:b7:4d:d2:b4:6f:1a:7d:14:d6:
37:f6:78:1d:49:da:64:db:7b:c2:bf:66:9d:82:82:
73:21:3e:10:b9:ca:16:17:55:ea:1a:bc:a2:0f:59:
8a:a7:96:22:19:49:d2:b9:eb:b0:49:90:a5:b1:33:
5e:33:9f:4e:40:dd:17:7d:31:19:62:d9:6d:7a:34:
28:9d:9c:98:93:ed:58:bf:31:21:a3:1c:0e:03:c2:
28:79:b6:28:26:46:55:38:bb:85:9d:fa:60:31:c3:
b8:3e:89:6c:55:72:1f:0f:c1:c3:7c:4b:61:d6:92:
97:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:1C:55:BB:EC:DC:9E:99:C5:43:F0:E6:19:DD:84:DC:9D:77:F0:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/aee1a109-6c8a-3502-9111-b9b5953b35f9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
X509v3 Authority Key Identifier:
keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
sbgp-ipAddrBlock: critical
IPv4:
216.157.130.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:57:0e:30:2b:6f:89:a9:ac:50:bf:5c:18:9a:a5:d0:c1:e5:
7d:af:54:70:c3:79:74:76:76:18:5f:a5:64:20:e9:ef:1c:24:
82:64:e6:35:fa:5e:7e:98:d4:1e:46:c6:b4:21:07:d0:12:2d:
e1:fb:e3:8a:cd:97:bd:38:e2:06:1f:28:22:78:f0:00:c8:54:
99:f0:aa:2c:fb:89:60:42:81:24:c8:2e:80:b5:df:ae:85:cb:
84:d3:50:d8:81:4e:67:62:b7:5b:cc:52:bf:f5:ed:32:74:83:
60:e8:c3:c7:ae:e9:f6:f4:6c:1f:05:36:90:b9:a9:ba:b7:25:
3e:a9:c3:31:d0:36:d8:83:37:54:f8:fd:bc:0e:18:aa:67:df:
ba:1f:e0:7e:3d:01:2f:72:26:4b:4a:6a:90:3f:ef:80:aa:c6:
98:c7:87:43:f2:47:50:01:dd:8d:61:e8:24:32:10:90:d1:d9:
af:6b:3a:79:93:07:54:b2:a4:47:e0:e8:79:78:cc:ca:ec:ad:
4b:01:c5:53:44:3c:e7:93:d2:26:16:d4:53:9d:22:50:2c:dd:
f7:f0:16:48:73:02:94:db:59:64:3d:03:a5:ca:91:76:85:64:
36:96:69:21:06:68:83:bb:b3:75:a4:ba:5b:36:64:a2:a5:24:
a6:89:02:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:23:41 2025 by rpki-client