Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/b3d1be67-5383-349f-9c24-699e17fb4c78.roa
File: b3d1be67-5383-349f-9c24-699e17fb4c78.roa (raw, json)
Hash identifier: N++IWRNoXDHGASEPxh3LBn8T3xdcteJZfj2/5BQ0YRs=
Subject key identifier: 6C:74:78:34:52:81:A1:FC:E2:B7:3B:4A:B8:1B:D7:AE:AE:F3:A6:F0
Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial: 010D0C9F4328584845158BDC098457EC4D261D80
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/b3d1be67-5383-349f-9c24-699e17fb4c78.roa
Signing time: Fri 20 Dec 2024 14:00:51 +0000
ROA not before: Fri 20 Dec 2024 14:00:51 +0000
ROA not after: Thu 20 Mar 2025 13:00:51 +0000
asID: 16509
IP address blocks: 158.115.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:45:15:8b:dc:09:84:57:ec:4d:26:1d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Validity
Not Before: Dec 20 14:00:51 2024 GMT
Not After : Mar 20 13:00:51 2025 GMT
Subject: CN=65d8a582-6506-4a13-8963-a4b10ff2ebd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:af:85:59:4e:20:2d:eb:71:57:76:1a:d1:31:
96:c6:17:8c:c6:08:96:4e:e3:d8:ff:07:fd:bd:38:
cd:b9:fe:d7:b7:13:58:2e:24:cd:2a:6f:0a:8c:3e:
f2:dc:38:7b:94:7b:71:b3:ed:5c:29:af:e1:73:07:
86:0c:d8:61:14:c3:8e:97:1e:71:94:4a:1b:91:2b:
73:93:af:75:c8:ef:1d:6e:f4:e5:69:98:29:b4:ca:
db:16:15:ba:1b:ab:4a:70:6d:ff:be:05:3c:b3:66:
f9:d5:8d:f8:2e:f0:83:f1:d9:e5:f3:36:76:98:80:
9a:e5:a6:06:67:b4:23:65:77:82:63:e4:3a:1e:6a:
a3:7b:f9:40:fb:11:9f:94:29:0a:7b:9f:18:9e:9a:
e0:d1:16:c3:e9:cc:a0:8b:b7:05:c4:82:5b:e7:15:
ed:d9:9f:0b:e4:fd:70:e8:9e:97:a0:2c:77:95:f4:
91:e6:49:18:b4:be:7c:17:c0:79:70:b4:79:84:9c:
88:8a:09:db:7d:0b:fe:96:9e:b1:4d:33:72:47:cc:
66:b4:c8:2c:ce:51:75:35:37:d9:8e:29:39:28:0e:
77:47:5c:87:80:e0:78:65:fc:da:16:68:1d:8b:89:
84:82:ee:0e:4c:17:41:8b:cb:b0:3e:33:2f:ca:9b:
48:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:74:78:34:52:81:A1:FC:E2:B7:3B:4A:B8:1B:D7:AE:AE:F3:A6:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/b3d1be67-5383-349f-9c24-699e17fb4c78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
X509v3 Authority Key Identifier:
keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
sbgp-ipAddrBlock: critical
IPv4:
158.115.156.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:36:89:8d:7c:7b:c0:a5:31:40:15:79:26:10:f0:3d:79:84:
9f:a0:9d:50:41:b0:41:50:ee:08:e4:49:b5:91:7b:68:e8:fc:
01:87:b8:71:0e:8f:77:c9:69:94:0a:9b:78:82:56:d4:f6:bb:
38:b2:de:73:e1:5c:4b:64:55:73:db:64:41:c1:2f:e4:6f:3f:
0e:02:c7:dd:24:08:07:97:09:57:cc:0d:b2:9d:72:6e:9f:1f:
27:06:7b:32:3f:27:dc:71:70:8e:d8:3a:86:c0:df:a2:d4:52:
20:e7:ac:71:1a:6c:bb:01:ff:30:a3:a0:b2:0d:35:ab:94:79:
fd:12:82:66:a5:32:b9:0b:b8:a6:a6:65:bf:55:2d:88:df:8d:
eb:11:19:31:c7:ac:cd:46:82:f4:61:9d:61:82:57:c4:f2:7c:
63:ee:b9:7f:8f:ee:86:95:2c:f1:c4:0b:ee:60:e5:26:c9:c9:
51:f8:36:c0:ec:48:50:b0:0d:29:47:13:c6:fd:92:89:c6:45:
c4:6e:c9:84:0d:3c:94:df:d7:d7:dc:1a:d7:c2:e7:5c:8f:25:
c4:c9:cb:dc:40:01:c8:68:f3:dc:2b:87:2b:72:3c:73:c4:e6:
f3:09:56:31:af:66:8a:2a:22:40:94:b1:c2:ba:c4:d0:2d:5c:
37:95:40:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:40:34 2025 by rpki-client