Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c/a4ae1ebe-985c-33c8-ae90-8ca338a4ec52.roa
File: a4ae1ebe-985c-33c8-ae90-8ca338a4ec52.roa (raw, json)
Hash identifier: +MHDzx8k0TOeSlCoPWTrq1YM4p0Xrj7lCvpTY2nK8Po=
Subject key identifier: 1A:4A:86:47:50:69:DE:70:E4:BD:90:4B:6A:89:3C:8E:1C:16:D6:C8
Certificate issuer: /CN=d886f3a2-7325-4b74-8802-19528a9f380c
Certificate serial: 010D0C9F43285848AC60D68619F23A04BC8A5640
Authority key identifier: 70:9B:AD:F1:42:CD:12:10:59:1D:C9:FB:36:1B:32:19:4A:12:B3:5A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c/a4ae1ebe-985c-33c8-ae90-8ca338a4ec52.roa
Signing time: Sun 26 Jan 2025 14:00:52 +0000
ROA not before: Sun 26 Jan 2025 14:00:52 +0000
ROA not after: Sat 26 Apr 2025 13:00:52 +0000
asID: 397735
IP address blocks: 158.51.44.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ac:60:d6:86:19:f2:3a:04:bc:8a:56:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d886f3a2-7325-4b74-8802-19528a9f380c
Validity
Not Before: Jan 26 14:00:52 2025 GMT
Not After : Apr 26 13:00:52 2025 GMT
Subject: CN=b6960f53-5d25-4461-935e-4034253c63ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c3:83:07:89:f1:c8:fa:33:75:a2:76:96:d7:
85:8d:9d:89:99:54:0c:6a:37:a8:be:8d:9b:85:ad:
7b:f7:0f:39:0a:b1:87:f6:d4:c6:65:6e:04:0a:19:
1d:f1:87:63:76:06:ff:ef:53:db:cf:f0:64:7b:45:
dc:92:94:b0:10:49:6f:4f:27:5d:c1:c3:9f:6d:a5:
04:7f:99:dc:4a:62:bf:82:9c:fe:51:c2:ce:79:f0:
74:d1:07:16:16:16:dd:ba:9a:86:a9:9e:dc:48:0e:
42:1a:79:74:f8:0a:56:ed:88:66:49:e2:e3:2b:e2:
d4:70:43:94:4e:59:ea:88:1e:bc:97:0c:4b:18:c3:
a1:27:4a:01:0e:76:28:3e:99:e0:b8:03:a5:96:ca:
38:da:14:0c:99:0e:d3:3d:c2:0b:0d:08:97:3b:21:
7d:70:9a:fd:54:3c:53:91:ab:8f:28:a4:93:4f:88:
0a:25:b4:ef:41:03:e6:d8:43:bd:6d:86:69:55:84:
9a:56:ef:11:72:5d:1d:75:fd:ba:62:0b:4c:ac:93:
7a:b8:15:bb:d3:c8:e2:4c:e8:78:0c:4e:31:e5:7d:
28:0f:0b:cb:cc:3a:3f:0c:f7:67:50:ba:aa:65:e6:
ae:1b:83:7c:13:27:86:e9:ed:91:32:1c:b7:a2:db:
13:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:4A:86:47:50:69:DE:70:E4:BD:90:4B:6A:89:3C:8E:1C:16:D6:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c/a4ae1ebe-985c-33c8-ae90-8ca338a4ec52.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c/d886f3a2-7325-4b74-8802-19528a9f380c.crl
X509v3 Authority Key Identifier:
keyid:70:9B:AD:F1:42:CD:12:10:59:1D:C9:FB:36:1B:32:19:4A:12:B3:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c.cer
sbgp-ipAddrBlock: critical
IPv4:
158.51.44.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:f6:da:5c:1e:a8:31:88:55:73:0a:ad:08:4d:78:95:94:d8:
59:ae:98:72:ce:1c:f1:b5:9f:75:9c:4b:0a:d3:0f:7e:65:0f:
62:f8:50:53:2f:87:c4:22:66:39:64:c3:90:ca:c1:b8:36:7c:
ef:47:cb:df:77:e9:a3:fe:f3:2e:e9:e0:db:79:29:e5:84:06:
74:99:74:39:43:de:55:35:8a:a6:eb:6d:66:d7:4b:6a:77:7b:
ff:18:28:ef:62:42:ba:f5:67:b8:52:6e:1b:83:1c:4d:f3:05:
80:e1:aa:f2:8c:99:04:9d:1f:fc:bb:68:97:2a:3d:06:66:8c:
5d:40:93:ef:18:55:9f:f5:4b:56:5e:12:f1:d0:e0:c1:49:50:
9b:c1:70:2a:18:c3:b8:c1:f4:7c:96:7f:ee:51:6c:2f:53:26:
1e:15:f2:a2:08:52:e9:c1:f2:f3:42:d1:68:40:54:c3:8c:c7:
bc:a8:13:af:71:3b:f5:37:4e:c7:ea:0f:47:86:56:f6:86:18:
1f:c0:ed:e9:a7:7c:27:79:fe:a4:4e:9f:28:71:ec:bc:27:aa:
88:8c:29:59:30:6a:ac:1c:cf:dd:6e:57:4b:35:4d:4e:c4:ea:
a2:fc:82:59:d1:d9:a5:60:7f:a4:53:1b:db:09:96:17:b8:32:
2f:85:1c:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:14:04 2025 by rpki-client