Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/a4f4dfbb-438b-39fb-98db-aed5cbd0c9c2.roa
File: a4f4dfbb-438b-39fb-98db-aed5cbd0c9c2.roa (raw, json)
Hash identifier: smi+nBhMKH+mpwnk3ELVJVDQhW4lKgN5N+b85QJgAIg=
Subject key identifier: 73:5D:39:F7:6F:CF:CE:61:7F:AA:72:D3:1E:B2:66:80:7F:AF:29:5C
Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial: 010D0C9F4328584851A578806823453003E1B980
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/a4f4dfbb-438b-39fb-98db-aed5cbd0c9c2.roa
Signing time: Wed 25 Dec 2024 02:00:38 +0000
ROA not before: Wed 25 Dec 2024 02:00:38 +0000
ROA not after: Tue 25 Mar 2025 01:00:38 +0000
asID: 9009
IP address blocks: 158.115.232.0/24 maxlen: 24
158.115.233.0/24 maxlen: 24
158.115.234.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:51:a5:78:80:68:23:45:30:03:e1:b9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Validity
Not Before: Dec 25 02:00:38 2024 GMT
Not After : Mar 25 01:00:38 2025 GMT
Subject: CN=bf4ce447-4466-4e8b-9c61-fd251521624e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:11:26:eb:a5:97:2d:2f:ad:a7:49:2d:86:70:
17:76:89:2c:63:b4:f8:8f:31:56:9e:60:3e:54:bc:
4d:1e:b1:aa:b5:67:03:21:ed:b2:50:07:94:78:ac:
0f:0b:42:18:bc:51:ed:31:82:0f:4b:23:fd:2c:ca:
15:31:bf:8f:18:a9:27:fa:25:fa:a6:bb:09:ea:4e:
ac:41:18:5a:f5:93:91:67:9b:69:89:05:4f:bc:c6:
15:c5:3d:f7:79:b8:d8:9d:1b:f5:f8:91:1f:7b:3d:
47:d1:c7:b9:51:8b:fb:17:01:aa:9a:19:a8:d5:6a:
db:d4:47:43:e6:bc:18:b3:e7:20:25:aa:fa:4f:c2:
9c:6d:37:48:56:e5:8b:ea:b5:23:4f:91:53:7c:71:
16:01:ae:0c:99:8d:c3:7c:4c:3d:5b:a3:d3:4c:19:
37:42:df:38:c5:01:d3:43:67:d1:40:e4:f9:a3:57:
8b:e1:65:16:57:f1:06:10:0a:6e:ad:1e:46:e4:93:
8a:ab:b0:e7:98:b1:eb:99:8e:40:b7:f9:3c:f9:8b:
49:03:e9:c7:3e:0e:b0:6b:9f:39:c4:ae:3d:07:79:
0c:e5:aa:77:1f:73:e3:55:d1:a3:15:b8:72:95:d4:
f7:2f:b8:d0:38:fa:c7:a7:6d:81:e6:3f:18:e7:a1:
f6:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:5D:39:F7:6F:CF:CE:61:7F:AA:72:D3:1E:B2:66:80:7F:AF:29:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/a4f4dfbb-438b-39fb-98db-aed5cbd0c9c2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
X509v3 Authority Key Identifier:
keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
sbgp-ipAddrBlock: critical
IPv4:
158.115.232.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:f9:f9:ee:e4:8f:51:9f:ce:4b:ff:83:0b:f2:b0:a8:0e:bc:
57:c8:70:42:8b:06:a3:1f:22:de:22:e9:44:92:2b:9e:6b:5c:
2f:ab:b4:8b:67:bd:06:43:35:56:5f:1a:44:27:40:4a:bb:38:
09:c2:6f:e3:06:5a:c3:28:b1:67:99:39:b1:b6:17:65:ee:8a:
5f:8c:eb:29:72:16:26:c7:1c:9d:80:4c:7f:12:fa:d7:da:84:
22:ce:b1:24:7b:7f:22:7e:44:79:c3:76:52:81:3b:7a:4c:ca:
e6:72:2c:b6:6d:8a:4b:3e:4b:72:80:1c:88:a2:8b:54:11:58:
1d:23:ca:2d:bf:9d:65:94:da:63:f1:17:c4:d1:af:62:ca:ad:
3f:67:45:93:96:5f:2c:eb:fc:1a:f6:1f:dd:f3:9c:e2:83:bc:
e5:52:91:e8:e2:0e:18:e9:ff:65:0a:a2:d3:61:f7:8a:61:31:
eb:6b:8e:a2:ed:41:03:02:0b:a7:fc:96:3c:bc:93:eb:e8:24:
4d:31:e1:f1:98:0c:7e:1b:45:0a:70:cf:1e:c5:32:8d:e2:2a:
00:ba:c8:de:23:28:c5:30:ca:b8:cf:21:c9:86:cc:43:80:d3:
f2:f9:f6:16:76:87:d2:17:4b:96:97:a9:7d:a4:41:f2:2e:37:
fb:7c:f4:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:23:38 2025 by rpki-client