Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/c2fd3f1d-7df7-3ce0-9230-7aa700cdb64a.roa
File: c2fd3f1d-7df7-3ce0-9230-7aa700cdb64a.roa (raw, json)
Hash identifier: /S/OKhjUqslEuOUrYHH5OQmqRk1gIT9Az5BuUoqL2LI=
Subject key identifier: 75:36:A1:36:8F:BB:59:6B:03:A6:B3:B6:4E:EC:C4:CC:9F:73:6D:1C
Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial: 010D0C9F4328584851A571CFE654E7663DC93C00
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/c2fd3f1d-7df7-3ce0-9230-7aa700cdb64a.roa
Signing time: Wed 25 Dec 2024 02:00:38 +0000
ROA not before: Wed 25 Dec 2024 02:00:38 +0000
ROA not after: Tue 25 Mar 2025 01:00:38 +0000
asID: 395831
IP address blocks: 216.157.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:51:a5:71:cf:e6:54:e7:66:3d:c9:3c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Validity
Not Before: Dec 25 02:00:38 2024 GMT
Not After : Mar 25 01:00:38 2025 GMT
Subject: CN=6dbb3391-7dfe-44a1-85b2-2783b70687e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:c5:68:5f:c8:62:52:0a:d5:d5:e8:65:2e:cb:
dc:74:fe:20:35:19:fd:61:83:3a:e8:42:4b:3d:68:
91:42:63:a9:5a:69:2f:30:8c:8b:e1:0e:19:79:2e:
c9:fa:75:df:7c:6e:cb:7b:bc:21:06:7e:ec:d8:a3:
c0:c1:8a:95:77:b3:b1:24:6c:df:85:f8:90:69:e8:
c2:b0:a0:56:07:4e:e6:3a:cf:03:20:63:60:4d:43:
01:d2:80:ab:f7:5f:3f:dc:e9:f8:81:8b:f1:b7:3f:
c3:de:f6:19:b9:c5:97:77:5f:73:58:8c:64:84:5d:
d1:03:85:f1:c2:a0:79:58:38:0f:06:41:a8:4d:cd:
23:30:6b:63:f9:5f:d1:df:72:19:03:2c:ed:1b:c7:
eb:3e:ac:8c:a4:70:d6:11:45:83:b3:b6:90:a2:a1:
a6:f0:57:18:33:ac:09:af:99:eb:a2:44:c9:fe:ab:
ae:c2:44:74:c8:70:ef:60:cc:dc:da:e8:99:08:ca:
62:d7:fe:dd:52:41:b4:d4:4b:d2:56:62:5a:2b:b0:
b4:35:8c:cf:84:35:10:89:39:64:5c:ff:bc:35:6e:
b0:39:4d:e4:6d:e6:41:0f:86:9c:b8:a2:28:5d:7e:
98:5d:59:a5:c6:f3:77:cc:ed:7c:36:a5:95:40:d3:
88:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:36:A1:36:8F:BB:59:6B:03:A6:B3:B6:4E:EC:C4:CC:9F:73:6D:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/c2fd3f1d-7df7-3ce0-9230-7aa700cdb64a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
X509v3 Authority Key Identifier:
keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
sbgp-ipAddrBlock: critical
IPv4:
216.157.139.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:df:14:3e:73:f2:59:e5:67:0f:ee:fa:c3:7b:f0:d6:bf:37:
74:af:f8:ed:6e:1d:8a:fc:74:55:1c:4a:10:c7:de:71:a4:49:
52:d5:98:e6:17:13:7d:7b:da:29:43:2d:de:ce:76:b7:00:ef:
bb:c7:c4:1f:62:55:a5:c8:30:ed:e4:92:49:a4:4f:e0:59:32:
5f:6b:1b:a4:b2:8c:0f:99:59:ab:75:68:1b:77:e2:3b:3e:54:
67:15:8f:e0:7f:5a:29:3d:9a:c8:dd:3f:34:e3:f1:30:3f:25:
30:06:c2:d2:5c:7f:99:67:f4:9d:a9:e8:75:61:34:7e:7d:2b:
8c:b5:8e:72:4f:cc:87:d5:a2:da:13:3a:31:bc:f9:37:56:0d:
a3:5b:4a:41:a8:c3:04:95:23:a4:ec:7f:a4:0c:f7:98:fa:4f:
70:fd:e3:34:de:0c:55:52:04:1d:d5:c2:24:38:e7:55:ec:a1:
7f:22:e4:db:3c:c0:97:50:d8:87:67:f9:a8:49:d4:c4:9b:64:
4e:df:49:9f:a9:46:0d:db:44:3d:32:e8:87:3d:df:d9:61:91:
b3:73:7d:7e:00:f6:f2:24:1c:55:1d:a5:23:3c:25:e7:34:c6:
4e:12:dc:fe:7a:a6:47:6a:9b:8d:e9:a1:da:05:41:c4:07:d2:
e1:b5:25:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:45:41 2025 by rpki-client