Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/fc45277b-bace-3155-ab01-df8aa64aa547.roa
File: fc45277b-bace-3155-ab01-df8aa64aa547.roa (raw, json)
Hash identifier: cwMZMmAwAd0GoPIquyshDM8ktI+KRhAGWGSFG3BFKso=
Subject key identifier: A9:F3:D4:45:90:B2:89:13:D7:C1:0B:FE:34:AD:34:54:9F:6F:42:B1
Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a
Certificate serial: 010D0C9F4328584855D5901AB9D8DF154B2EA680
Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/fc45277b-bace-3155-ab01-df8aa64aa547.roa
Signing time: Thu 26 Dec 2024 14:00:52 +0000
ROA not before: Thu 26 Dec 2024 14:00:52 +0000
ROA not after: Wed 26 Mar 2025 13:00:52 +0000
asID: 0
IP address blocks: 157.133.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:55:d5:90:1a:b9:d8:df:15:4b:2e:a6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a
Validity
Not Before: Dec 26 14:00:52 2024 GMT
Not After : Mar 26 13:00:52 2025 GMT
Subject: CN=9251b41d-5797-4ed7-ab70-02c0c799ded9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c1:e4:99:f9:27:88:cc:37:f2:c7:04:2b:9e:
0e:9c:b1:90:ba:4b:c9:0c:9e:7d:82:40:77:9f:f0:
1f:d9:6a:62:e0:69:4e:71:02:0e:47:5a:67:d8:09:
c5:97:cd:70:7f:3f:2d:8f:46:d2:1a:b1:e8:9d:96:
44:ea:75:43:46:e6:ae:2d:02:59:27:63:cb:91:e1:
bd:b9:33:53:84:d1:78:35:91:70:f9:01:91:81:87:
5a:2d:58:a0:ff:70:c2:8f:db:37:6d:d7:07:fc:a3:
48:ba:9d:fb:0b:e7:da:43:d2:b3:8e:24:39:9e:64:
7f:2a:fa:72:70:b4:01:70:dd:06:11:8f:9f:a4:72:
81:0b:f8:16:94:f8:49:2c:8d:f9:cf:77:14:94:f8:
06:dc:d7:55:13:9a:0b:60:88:4d:f7:b9:90:1b:25:
3c:72:64:3f:3c:5b:d1:35:4c:26:64:94:e8:fa:f3:
6c:1d:ef:ae:56:2c:6d:b2:3b:d9:17:c1:d2:58:59:
d4:99:e3:ae:02:6e:89:45:62:52:71:ff:1e:dd:d5:
5f:f5:8e:30:38:dc:b0:62:f2:a3:a3:3b:f5:ea:d4:
60:0e:1a:4e:65:b3:e0:9c:85:a7:86:cc:3a:53:20:
59:8c:41:5a:0e:1a:88:51:81:8d:a8:e1:d6:3c:7c:
a7:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:F3:D4:45:90:B2:89:13:D7:C1:0B:FE:34:AD:34:54:9F:6F:42:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/fc45277b-bace-3155-ab01-df8aa64aa547.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl
X509v3 Authority Key Identifier:
keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
sbgp-ipAddrBlock: critical
IPv4:
157.133.8.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:89:9a:44:69:c2:8c:fb:f0:52:9d:85:84:3d:4f:3b:92:b0:
e2:72:b7:f3:df:61:7d:25:bc:92:0e:f9:8f:b6:31:af:be:ae:
aa:6f:3f:65:f9:dd:fc:0a:65:92:9a:41:2c:46:91:5b:5c:a9:
6e:cc:08:12:4f:28:58:89:b0:04:b5:5a:f1:6b:8f:1d:76:c1:
e3:e7:f4:4d:90:96:80:3a:76:f0:db:25:9b:e7:0a:4c:20:33:
63:25:97:1f:9c:f6:69:bc:50:61:47:7e:c3:21:bd:c7:74:58:
2e:d2:2a:c8:ca:a3:ca:f0:83:fd:ad:9c:e7:38:c1:13:76:56:
19:80:32:4f:ae:8b:af:bf:07:88:65:1e:bb:0f:70:b1:70:e1:
35:65:02:67:2c:98:13:85:6b:b0:5f:d5:96:70:fd:2a:a0:81:
4e:b3:79:ea:ec:ed:ac:c0:e8:90:1b:5c:62:3a:f0:1b:c7:8d:
53:fb:7d:f5:3b:ca:34:44:07:4f:10:f0:bd:d1:aa:3d:6a:73:
d1:20:e9:08:05:3f:35:b7:1d:25:08:6e:53:db:2c:cb:aa:48:
b5:5a:35:b6:3b:0c:ff:38:78:ba:e5:b1:ec:dd:a4:8c:ce:b8:
7d:c9:b3:f9:57:3b:c0:cb:0e:7b:25:d3:0a:67:59:de:19:d1:
9e:17:25:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:30:15 2025 by rpki-client