Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/9695b1ee-8536-335c-9ab7-83c3002ed5e7.roa
File: 9695b1ee-8536-335c-9ab7-83c3002ed5e7.roa (raw, json)
Hash identifier: 9MWg7irn8ZBwhPP/2nYwO3yN8U9ROVmiX+EcsRpMdbA=
Subject key identifier: 6D:55:0C:F9:B2:F0:91:B6:CE:06:9D:EB:37:1F:13:17:51:D7:44:85
Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a
Certificate serial: 010D0C9F4328584855D58FF3AC04B27EA164D880
Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/9695b1ee-8536-335c-9ab7-83c3002ed5e7.roa
Signing time: Thu 26 Dec 2024 14:00:52 +0000
ROA not before: Thu 26 Dec 2024 14:00:52 +0000
ROA not after: Wed 26 Mar 2025 13:00:52 +0000
asID: 0
IP address blocks: 157.133.1.0/24 maxlen: 24
157.133.2.0/23 maxlen: 24
157.133.4.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:55:d5:8f:f3:ac:04:b2:7e:a1:64:d8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a
Validity
Not Before: Dec 26 14:00:52 2024 GMT
Not After : Mar 26 13:00:52 2025 GMT
Subject: CN=558c7f49-4009-478b-b2e3-67db5690dd5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:9d:c4:34:0e:b4:1e:ab:64:38:77:8f:6a:ed:
00:7f:cb:6e:c3:e0:a2:92:d9:01:67:fd:3f:38:27:
9e:ba:8e:59:00:84:14:e8:5b:95:51:c2:e1:7f:dc:
97:0b:69:c8:a2:b5:9a:76:15:a5:74:47:63:34:52:
bb:52:d2:cb:e6:c0:02:0d:f5:5b:a7:e0:7b:4f:da:
e1:68:bb:15:a8:6c:72:d6:c4:f4:f5:ec:cd:99:b2:
4c:26:19:42:3e:dd:f2:4d:54:d3:b2:3c:2e:5c:4a:
fe:8e:46:f1:70:eb:c6:67:3b:33:17:2c:99:57:d9:
ed:27:c9:f5:c0:d0:84:a8:5e:a6:85:b8:be:b6:e8:
89:80:b1:ab:77:e7:54:e3:fc:bc:05:06:fd:54:62:
31:d5:c8:23:0c:ac:a8:26:37:af:78:06:da:b5:00:
ef:db:f1:9f:2d:cd:46:c4:d5:7a:e2:5b:7f:48:78:
ef:f0:bc:3b:35:24:03:f2:c0:14:e2:ab:9a:12:4a:
4f:a5:62:e3:40:2f:d3:f5:e2:e8:b5:cd:59:fc:42:
06:1c:8f:2a:3c:79:72:54:78:bf:e9:56:c8:c0:a6:
54:36:1f:9a:e6:59:3c:7a:cc:79:eb:33:80:61:c0:
18:d9:a8:ff:b1:28:62:db:2e:0e:ac:32:41:02:c4:
16:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:55:0C:F9:B2:F0:91:B6:CE:06:9D:EB:37:1F:13:17:51:D7:44:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/9695b1ee-8536-335c-9ab7-83c3002ed5e7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl
X509v3 Authority Key Identifier:
keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
sbgp-ipAddrBlock: critical
IPv4:
157.133.1.0-157.133.7.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:42:9b:d4:f6:53:b4:7e:87:1e:9f:59:ed:26:2a:c0:c3:f5:
db:08:d7:57:08:47:f8:c5:d8:b1:8b:a7:a5:11:28:2e:39:50:
cf:16:7d:12:5f:72:be:e2:59:07:f5:74:91:fb:31:4d:fb:37:
45:14:0f:f5:1e:13:79:ae:21:31:66:46:f6:d3:69:28:73:d4:
ee:0f:ca:09:bd:04:ab:19:06:67:64:1d:8b:4d:b2:a6:af:7b:
99:c6:eb:ec:8f:06:58:62:4a:15:20:2e:73:47:21:8e:f9:42:
46:0a:b7:e7:85:8d:08:9a:d7:32:96:67:a2:ab:0a:a8:21:83:
41:c2:15:d1:d9:93:e9:f0:db:55:2e:e9:a9:52:6b:4a:05:7d:
8c:68:3d:cf:78:16:a3:3f:0c:7e:83:ad:fd:d4:b2:9e:1b:73:
9d:d5:79:e3:2b:2c:7c:f8:5c:47:00:a6:56:bf:4f:a0:3f:b7:
1e:f7:e6:04:13:59:a8:10:c0:69:11:73:5b:db:f7:95:18:8a:
af:39:fe:74:ab:f4:05:4f:48:ef:af:8b:b3:af:3a:4e:6e:80:
96:dc:31:a3:09:b7:20:26:e8:c8:cb:37:c4:4d:1f:13:df:9f:
69:1d:b6:ae:86:a1:03:14:a0:ba:e3:3b:1b:71:64:ec:7d:be:
59:2c:00:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:29:56 2025 by rpki-client