Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26/d5aaebb6-4e45-3566-bea3-8e881f0c07bf.roa
File: d5aaebb6-4e45-3566-bea3-8e881f0c07bf.roa (raw, json)
Hash identifier: rq7XxS0VLevNDbp2M7oLaRlxTU/i4XsmdYDGjWP2/ZA=
Subject key identifier: 21:EA:5E:CE:AB:7A:5A:7B:4B:9F:06:4C:25:2F:FC:AB:B3:9D:AE:2D
Certificate issuer: /CN=53047e29-2570-4585-9e69-b23797196c26
Certificate serial: 010D0C9F43285848116FBB446C1AA70B25064CB0
Authority key identifier: C1:B1:C5:FD:AA:78:4E:92:7E:E5:E5:27:7A:CE:EF:A0:FC:B3:11:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26/d5aaebb6-4e45-3566-bea3-8e881f0c07bf.roa
Signing time: Mon 02 Dec 2024 02:00:40 +0000
ROA not before: Mon 02 Dec 2024 02:00:40 +0000
ROA not after: Sun 02 Mar 2025 02:00:40 +0000
asID: 397183
IP address blocks: 158.116.32.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:11:6f:bb:44:6c:1a:a7:0b:25:06:4c:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53047e29-2570-4585-9e69-b23797196c26
Validity
Not Before: Dec 2 02:00:40 2024 GMT
Not After : Mar 2 02:00:40 2025 GMT
Subject: CN=20b1c823-d279-4111-8456-363dc8ebc70e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:89:8e:9f:7e:76:68:b1:ff:f1:28:8d:75:a4:
cf:cd:de:bf:a1:ce:29:90:78:c2:b9:26:70:5c:31:
bd:47:eb:c2:dc:1c:32:52:d5:f2:34:f7:35:0e:b0:
a8:14:db:cf:52:ec:b6:3a:59:af:00:91:4f:1d:3e:
f9:8d:0f:2a:21:c9:37:ff:31:c7:43:c7:f5:13:58:
6d:6f:2e:83:d7:6f:28:65:c2:4f:2a:cc:6c:c5:62:
38:5b:92:48:13:98:94:ca:fd:80:39:9a:c1:a7:c0:
d6:f3:ab:b5:10:1a:c3:25:5a:b8:cd:f6:30:d4:0a:
e4:df:11:f5:8d:2e:d7:f5:6e:bc:84:74:63:04:60:
e9:ad:fc:34:b2:cc:f9:ac:a2:f8:16:57:26:bb:a0:
36:00:93:d1:c6:27:1b:bd:e0:51:40:ad:4c:bf:32:
83:cb:e8:fe:5a:d3:f4:40:11:a0:71:57:67:40:22:
42:ca:cb:b1:06:85:c3:34:d1:c6:bb:cd:5b:d0:90:
8c:7f:75:0d:89:70:0d:bc:9d:38:63:b9:79:5d:d0:
59:b1:3a:e5:02:58:d4:3b:e7:17:4a:59:10:77:48:
0a:60:ce:d4:1d:ab:be:c8:4c:2d:12:16:a7:25:96:
59:56:d6:84:8f:4a:b0:ef:de:05:17:db:ae:44:25:
66:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:EA:5E:CE:AB:7A:5A:7B:4B:9F:06:4C:25:2F:FC:AB:B3:9D:AE:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26/d5aaebb6-4e45-3566-bea3-8e881f0c07bf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26/53047e29-2570-4585-9e69-b23797196c26.crl
X509v3 Authority Key Identifier:
keyid:C1:B1:C5:FD:AA:78:4E:92:7E:E5:E5:27:7A:CE:EF:A0:FC:B3:11:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26.cer
sbgp-ipAddrBlock: critical
IPv4:
158.116.32.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:d3:c3:d8:67:b6:13:56:9b:4b:1b:31:7b:0e:69:1f:5b:b8:
8a:80:ca:a0:82:30:fe:64:78:9e:ef:44:b0:01:23:17:26:24:
cf:f1:08:15:8f:26:69:a7:21:cb:b0:76:84:cc:43:05:df:d5:
73:ca:67:04:f3:24:1d:a2:3e:e2:cc:6c:c8:75:94:7f:c5:2e:
e8:e0:77:77:0b:fa:5d:32:ad:e4:18:fc:f3:f2:c7:a0:64:c5:
90:6b:7b:cf:6c:d7:a6:32:b6:34:f7:54:3f:db:0c:f4:d6:ab:
72:96:61:e1:26:ba:4f:86:35:14:8d:f4:8c:f2:47:1f:74:40:
bb:63:a5:df:13:4c:6d:f8:3f:0e:17:1d:df:a4:6b:df:c7:05:
33:6d:69:a6:b2:2b:8d:e8:62:a1:02:93:a8:c6:bd:e1:d7:03:
40:1c:87:d8:b0:8e:5b:8d:6b:c7:35:e3:02:fd:e0:78:31:0a:
09:bf:00:97:5a:e2:30:1a:a8:aa:af:9d:f2:ab:ac:fe:38:ba:
a0:f4:22:b4:b8:0a:66:28:7d:67:17:5b:7d:80:76:d4:22:a2:
97:c5:7e:e1:b3:16:6d:e9:43:8b:61:3d:e5:3d:ab:5d:34:37:
f4:20:3a:60:45:3d:fb:b5:03:55:d0:1b:ab:f9:ac:05:d6:b4:
c7:30:53:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:14:40 2025 by rpki-client