Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/dab1f656-370e-3952-a1d7-0dd4adb670a3.roa
File: dab1f656-370e-3952-a1d7-0dd4adb670a3.roa (raw, json)
Hash identifier: hGFbRw3f5xlhjaq3G4ff4oVl54QrU1Lfr46qSI1c6xk=
Subject key identifier: AD:8B:75:1A:1E:12:30:74:A4:A6:5E:F1:CF:58:F2:E0:BC:92:BF:31
Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a
Certificate serial: 010D0C9F432858484EDABDA49649B5991307A600
Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/dab1f656-370e-3952-a1d7-0dd4adb670a3.roa
Signing time: Tue 24 Dec 2024 02:00:38 +0000
ROA not before: Tue 24 Dec 2024 02:00:38 +0000
ROA not after: Mon 24 Mar 2025 01:00:38 +0000
asID: 0
IP address blocks: 157.133.248.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4e:da:bd:a4:96:49:b5:99:13:07:a6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a
Validity
Not Before: Dec 24 02:00:38 2024 GMT
Not After : Mar 24 01:00:38 2025 GMT
Subject: CN=e97ceda7-475f-4378-a219-62c8d4df4df6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ee:f1:be:55:d9:17:eb:1d:5c:c5:75:ac:78:
9c:cd:33:c6:6b:e2:0d:05:b3:ef:11:9a:32:ff:7a:
c2:d3:0b:a5:ae:3b:81:a1:d8:08:dc:84:88:4f:03:
e0:d0:1d:2c:ca:b8:8a:d5:d6:2c:51:5a:40:a0:5d:
19:ee:44:f9:14:15:85:b6:d4:3f:9f:75:fe:e3:75:
c6:8b:34:8c:00:b0:93:04:c2:4a:94:e7:f3:f7:32:
7d:c0:81:d8:17:55:4a:88:e4:58:bc:e5:e5:69:38:
63:57:09:7f:77:a1:55:5d:47:81:4e:8c:5e:02:ee:
c6:3b:e1:41:6b:85:28:e2:67:e6:0d:9e:92:ad:8e:
90:9d:53:49:3f:e1:8b:16:0a:17:39:d8:d7:f9:91:
22:6f:ff:c3:8e:0e:82:46:e7:0a:12:33:57:7b:7d:
61:b4:b5:2b:98:54:46:54:4f:03:60:ed:fc:59:89:
41:88:7c:28:18:de:4b:c9:97:17:bf:cb:8f:48:79:
9e:20:f6:7c:33:7a:1d:56:1b:db:2b:4c:7a:fb:81:
e1:65:2c:c0:b5:25:2a:25:85:dd:8b:db:36:14:99:
94:2b:07:70:89:bf:b1:0c:5f:ea:c5:30:07:a6:de:
36:82:28:29:73:9c:10:c5:72:4a:f2:23:3b:93:0c:
2f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:8B:75:1A:1E:12:30:74:A4:A6:5E:F1:CF:58:F2:E0:BC:92:BF:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/dab1f656-370e-3952-a1d7-0dd4adb670a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl
X509v3 Authority Key Identifier:
keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
sbgp-ipAddrBlock: critical
IPv4:
157.133.248.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:c9:9d:0c:99:64:de:f5:26:87:ca:a9:cc:82:bf:1a:20:14:
bf:88:fa:80:22:72:8b:6f:db:de:55:e4:3a:82:05:bd:c4:ad:
a8:fd:95:5c:34:fb:cd:19:e1:69:7c:c7:ca:7c:13:5f:e7:8b:
bb:23:06:41:6b:64:05:15:14:23:7e:5c:58:35:ba:ce:15:46:
7f:e3:16:e6:23:70:8d:cf:93:c6:7a:c3:e1:54:b5:3c:54:13:
95:04:a7:3e:ce:f7:36:1c:c0:31:05:74:3e:da:5b:ba:f5:b4:
10:78:fe:84:c2:5d:1c:25:4c:ce:9f:85:fe:c6:72:02:ec:2e:
52:1b:bb:98:9a:c8:1f:22:97:d8:81:05:4e:43:4a:91:c6:53:
14:8c:20:80:bb:09:74:c3:fe:34:cd:0a:7c:df:f6:2b:9a:27:
e4:22:ed:d4:ea:65:c3:5a:db:2a:d0:b7:34:06:7b:0b:2d:80:
ae:bc:f1:6f:8d:80:9c:56:6d:2b:e1:7d:ff:aa:46:3a:ed:61:
bf:b1:87:ff:7e:68:b4:ae:b1:ba:55:7e:79:35:6b:dd:88:85:
9d:91:42:65:2f:38:09:bd:8b:f9:45:77:a5:3f:97:65:b1:11:
a9:04:6b:27:5c:ae:47:0e:55:a5:e7:c6:23:8a:a8:36:a4:e0:
5a:95:9e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:30:01 2025 by rpki-client