Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/dbaccf53-10d1-3f27-a036-29c22e6f8dd2.roa
File: dbaccf53-10d1-3f27-a036-29c22e6f8dd2.roa (raw, json)
Hash identifier: 6x0MPV7b9fi0zODUyXDgaD6s9Xfc+B2mH61kg9sO4kg=
Subject key identifier: 38:50:A3:31:E8:53:9F:7B:A6:F1:F1:E3:66:43:90:F9:FB:3F:52:52
Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial: 010D0C9F4328584851A571AC17872EDDC1DFAE60
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/dbaccf53-10d1-3f27-a036-29c22e6f8dd2.roa
Signing time: Wed 25 Dec 2024 02:00:38 +0000
ROA not before: Wed 25 Dec 2024 02:00:38 +0000
ROA not after: Tue 25 Mar 2025 01:00:38 +0000
asID: 14618
IP address blocks: 216.157.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:51:a5:71:ac:17:87:2e:dd:c1:df:ae:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Validity
Not Before: Dec 25 02:00:38 2024 GMT
Not After : Mar 25 01:00:38 2025 GMT
Subject: CN=c45faa55-10be-417f-8c08-6e6b9e6aee4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ec:22:ea:1d:91:f6:f7:b8:67:14:89:e9:85:
15:11:aa:e4:9d:c4:31:b8:70:46:69:ea:76:44:95:
f5:7a:3b:02:62:0e:35:46:45:c1:42:81:57:1e:e5:
49:4e:36:49:9b:52:9b:e4:69:98:49:b8:1d:1e:36:
84:81:e3:05:ad:28:39:3e:43:71:e1:5f:c4:f0:b7:
1c:5a:be:46:ce:29:02:b6:f2:44:9c:0b:25:4d:6d:
7d:4a:e9:b5:66:d6:0b:91:29:39:72:53:8c:7e:a6:
30:fa:b7:6b:15:48:be:02:6a:d7:8a:66:51:44:14:
c2:33:7a:57:85:db:46:0e:71:76:54:fd:b4:cb:d3:
3b:51:21:04:39:23:1b:ef:28:87:70:0f:a0:88:e6:
5f:1a:b4:ed:1b:aa:15:b8:16:79:3e:43:c9:ec:47:
0c:97:53:ee:f9:33:f1:11:8c:f8:d3:9a:d5:61:d7:
7f:f6:fe:57:e2:ce:66:4c:78:f4:9e:52:96:b5:2b:
e1:11:cc:54:80:6e:9b:b2:fa:69:23:81:c0:37:98:
bd:39:91:1d:7a:99:42:08:a3:0f:4b:98:01:19:be:
91:3c:a8:e6:49:03:29:9e:2e:41:9a:58:b0:8a:da:
d9:b9:61:f8:2c:7e:54:d0:b0:75:fe:11:7c:ac:cb:
06:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:50:A3:31:E8:53:9F:7B:A6:F1:F1:E3:66:43:90:F9:FB:3F:52:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/dbaccf53-10d1-3f27-a036-29c22e6f8dd2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
X509v3 Authority Key Identifier:
keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
sbgp-ipAddrBlock: critical
IPv4:
216.157.139.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:64:77:f4:f9:a4:25:95:ab:b9:d1:a6:99:27:fc:4c:b2:e8:
d5:1f:b2:bd:52:b6:f3:67:56:a1:50:17:9e:e9:5b:86:bb:6e:
c5:6e:d9:e4:db:a6:e3:46:26:1d:0f:b9:0f:11:44:f9:34:c5:
ef:88:56:31:cc:02:7f:98:3e:f0:99:14:15:b5:1d:40:ba:de:
dc:91:cd:f7:cd:60:65:ec:b3:96:8c:0c:4c:56:e4:81:49:98:
4d:19:0d:10:c0:52:39:48:f2:fc:0c:6c:86:ac:53:d6:6b:ad:
3f:78:57:47:e3:f8:50:4c:05:a8:52:8e:4c:5e:67:06:20:ca:
fb:af:e5:09:4b:06:9d:55:64:f3:4d:5b:81:bc:6e:ad:e0:1f:
68:47:ae:16:a0:7b:36:08:5e:91:f1:bb:e8:6c:8e:75:27:08:
e0:de:16:c6:16:22:33:aa:5c:17:cc:e8:ed:be:16:64:66:de:
8c:58:e2:35:5c:5f:dd:f4:e4:bf:61:c0:c5:56:e9:62:ab:b6:
eb:f6:4f:f6:35:c1:a1:43:62:9b:70:06:1d:00:85:81:10:e0:
42:fc:ef:73:4b:48:dd:26:d4:4f:75:b1:94:42:2f:75:5b:57:
22:41:a4:a3:54:a9:97:3b:26:24:5e:93:b9:01:cf:1b:0b:20:
0d:e7:80:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:40:48 2025 by rpki-client