Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/857207aa-33ba-3517-ba92-dbeae756a93f.roa
File: 857207aa-33ba-3517-ba92-dbeae756a93f.roa (raw, json)
Hash identifier: 52VNgZxLTB+NtZzFnLZzGq5IYnTe8TUVMQ9jkEma1es=
Subject key identifier: FC:23:EF:25:F2:49:84:44:D5:9F:C0:C9:45:09:DF:72:0C:04:2D:32
Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial: 010D0C9F432858481F6532EE6731043F75F9CD00
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/857207aa-33ba-3517-ba92-dbeae756a93f.roa
Signing time: Sat 07 Dec 2024 02:00:39 +0000
ROA not before: Sat 07 Dec 2024 02:00:39 +0000
ROA not after: Fri 07 Mar 2025 02:00:39 +0000
asID: 212238
IP address blocks: 158.115.252.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1f:65:32:ee:67:31:04:3f:75:f9:cd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Validity
Not Before: Dec 7 02:00:39 2024 GMT
Not After : Mar 7 02:00:39 2025 GMT
Subject: CN=bdb31d6b-b181-468d-9641-c9e7d386c962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:72:91:ea:98:b9:1f:f3:f8:c6:45:73:e0:bd:
5d:08:53:53:c7:7f:67:e4:07:a4:84:67:c5:da:6e:
86:b0:f0:a6:25:25:3e:0f:a3:fa:ff:90:46:07:ed:
20:0d:be:a7:48:3f:11:92:c3:96:32:d8:74:f8:5c:
80:00:cb:46:ec:b3:0a:77:c0:0e:e6:57:82:86:7f:
18:4a:30:65:3c:6e:f3:3a:64:98:0a:18:2c:b9:d5:
80:d9:56:cf:41:fe:59:46:8d:75:55:0d:8b:5f:7f:
b1:0e:3d:e5:a1:5f:26:c4:a6:a6:66:9c:2b:30:d9:
09:b8:55:d9:cf:39:de:1e:e7:0e:f8:cd:49:05:e4:
be:e0:b1:0d:e0:45:a5:73:4b:ad:02:50:7f:bf:18:
0b:71:a0:2f:44:fb:e4:e3:e7:33:a0:49:20:76:b1:
ac:43:11:21:39:d8:02:3e:36:48:ef:48:a5:cf:56:
d3:84:74:1d:33:2f:e4:49:1d:96:67:cc:13:2c:7d:
75:ff:3c:a5:7c:ce:cf:f7:4f:61:da:28:56:e3:46:
31:cb:a0:51:8d:fa:64:45:19:76:7a:a8:3b:d6:44:
00:70:7f:aa:12:be:aa:4f:f8:d5:f8:30:1b:73:8b:
ff:5d:8c:cd:94:22:95:58:af:7e:59:74:b8:9b:99:
e6:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:23:EF:25:F2:49:84:44:D5:9F:C0:C9:45:09:DF:72:0C:04:2D:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/857207aa-33ba-3517-ba92-dbeae756a93f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
X509v3 Authority Key Identifier:
keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
sbgp-ipAddrBlock: critical
IPv4:
158.115.252.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:dd:40:ec:5d:ef:0d:d0:24:e8:44:05:31:13:76:c3:f0:96:
6a:87:6e:5d:f3:52:25:47:25:6a:19:ce:1f:dc:10:2e:79:f6:
db:bc:8c:91:2c:c8:d3:08:78:5d:76:13:6e:14:c5:c8:58:f7:
ef:54:b4:30:e4:fc:96:1d:14:40:01:e9:06:d3:86:be:6f:53:
8f:4c:78:36:8a:e7:7f:40:38:a1:06:4c:24:d7:87:57:91:95:
ef:44:4b:f3:42:71:58:02:be:cb:43:6e:de:35:96:94:24:c4:
54:e1:0f:15:f6:02:b2:96:b6:cc:4b:bd:8a:9c:22:ed:95:f2:
74:2c:f6:07:a6:12:72:0e:9c:80:88:b3:0f:1f:f6:71:1c:c8:
af:fc:34:b6:82:fb:95:ff:26:4f:67:60:b2:cc:57:4d:a2:81:
78:48:46:9e:d7:3b:50:e3:b2:d7:aa:1d:23:07:73:42:4b:c8:
e3:7e:c3:92:7b:5b:45:8f:8c:82:85:2a:85:41:81:d5:87:8c:
45:9a:05:57:86:c7:7a:6a:2e:ec:ec:4b:46:b0:a5:cd:8e:c0:
d4:ec:f3:fc:4d:b0:26:90:49:4e:c8:9c:ff:8a:60:f5:b6:4d:
bf:96:99:05:64:b1:06:1a:11:ea:86:e9:98:46:06:93:05:5c:
7b:a2:a7:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:10:09 2025 by rpki-client