Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/d030c1ee-6b70-3dad-a950-15c9e7a41af6.roa
File: d030c1ee-6b70-3dad-a950-15c9e7a41af6.roa (raw, json)
Hash identifier: ojUU6VE+OaX5wki2mm5SIsyQiCA13eDAtgWUEljcxRg=
Subject key identifier: FB:40:EC:DC:87:36:94:6B:DC:39:43:B7:26:23:2D:F3:97:71:B3:D8
Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a
Certificate serial: 010D0C9F432858484EDABDBD8A34DDE5ED3D9280
Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/d030c1ee-6b70-3dad-a950-15c9e7a41af6.roa
Signing time: Tue 24 Dec 2024 02:00:38 +0000
ROA not before: Tue 24 Dec 2024 02:00:38 +0000
ROA not after: Mon 24 Mar 2025 01:00:38 +0000
asID: 0
IP address blocks: 157.133.232.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4e:da:bd:bd:8a:34:dd:e5:ed:3d:92:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a
Validity
Not Before: Dec 24 02:00:38 2024 GMT
Not After : Mar 24 01:00:38 2025 GMT
Subject: CN=8f0a52b8-2f86-4300-89ed-c3c65e719b87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:9c:f7:22:74:16:98:41:ad:93:d9:71:73:30:
71:9f:fb:5a:e3:5f:59:b8:87:8a:56:1a:c1:85:4d:
39:00:fa:fd:48:f3:63:b8:e2:0d:8c:38:2f:21:fb:
2e:b2:53:0a:40:ee:47:16:14:ee:f7:b8:c2:71:72:
d0:26:26:87:2f:5e:7c:42:00:29:9a:2c:75:36:15:
2c:65:96:49:3b:09:ad:e8:96:ea:38:7f:8e:2a:d8:
38:91:60:61:5e:32:6e:e3:4a:57:78:1f:a9:0f:46:
38:87:65:3b:8d:a9:fd:53:a5:06:56:c9:f0:eb:33:
19:ab:67:34:dd:b3:5d:73:6d:80:e0:52:0a:a5:8b:
9b:62:e4:1c:12:fe:6d:5b:e5:44:ce:c2:fd:69:3f:
64:c1:10:5e:0e:f5:50:b5:05:27:10:c0:00:f5:15:
9e:51:e3:7d:41:f7:ad:9f:c6:b8:56:f6:a8:13:7c:
f0:27:0a:2f:0e:06:68:6f:7e:14:cf:36:f0:b3:8c:
b5:2b:01:cc:cc:20:f1:62:2a:90:68:dc:6c:23:74:
33:5e:f8:79:4d:74:0b:fa:ca:73:bb:29:c7:3e:2d:
40:46:63:46:32:03:e9:ec:a0:3d:be:0a:b3:8e:d3:
9f:7c:ca:a5:22:97:6a:ef:e1:8c:e4:a4:99:2d:38:
b8:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:40:EC:DC:87:36:94:6B:DC:39:43:B7:26:23:2D:F3:97:71:B3:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/d030c1ee-6b70-3dad-a950-15c9e7a41af6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl
X509v3 Authority Key Identifier:
keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
sbgp-ipAddrBlock: critical
IPv4:
157.133.232.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:97:0f:a3:8e:1e:ba:d7:5c:c0:ea:fd:e5:fb:9c:2f:e2:d1:
9c:f6:91:c5:1d:db:e7:b6:5a:0b:4e:32:c8:bf:85:9a:1f:f7:
b3:e7:08:80:c1:c8:39:06:e8:aa:6b:29:e1:6f:62:d9:51:0b:
39:84:07:6a:c1:5a:d6:8c:a4:3b:9a:84:a7:24:80:d4:f4:7b:
32:8b:47:99:c9:32:cf:50:c9:a1:44:cf:e9:03:83:54:23:50:
3f:78:b2:dd:24:93:02:a4:85:e8:a3:6b:31:ba:df:db:f1:8d:
91:d3:61:af:7c:b2:e4:59:64:b1:66:e0:30:5e:af:8f:45:e6:
0a:9b:70:27:cf:8b:8c:6e:c5:46:14:30:cb:f4:58:21:ce:0d:
48:42:35:fd:14:e8:fd:e6:ba:55:e1:f9:33:19:55:b8:da:2a:
a0:c7:11:69:de:75:e7:fe:3b:14:00:3d:88:3a:b3:5d:fe:89:
2e:cf:ef:de:5b:a5:ef:97:0b:b8:d5:e2:08:04:61:70:7e:6a:
fb:65:01:90:ab:ad:62:7c:40:7b:1d:0d:8f:8f:ba:e5:7b:84:
73:e1:55:42:74:5d:fb:f3:20:ee:cd:27:44:b7:7c:18:de:09:
3a:02:b8:25:89:ed:c0:b8:f6:bc:4b:90:da:62:4f:72:f4:11:
4d:27:85:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:29:55 2025 by rpki-client