Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/c0271d02-e45f-3dda-8c9a-2468641ab27b.roa
File: c0271d02-e45f-3dda-8c9a-2468641ab27b.roa (raw, json)
Hash identifier: ZgjaL6nfZD0a7INcUWu7WbSUc7V3dzcc42mJLnn+6jA=
Subject key identifier: 66:32:20:41:DD:18:7B:53:26:DC:AE:6C:3C:57:E2:0E:57:26:76:FA
Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial: 010D0C9F43285848186A819379028944E81E1A00
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/c0271d02-e45f-3dda-8c9a-2468641ab27b.roa
Signing time: Wed 04 Dec 2024 14:00:52 +0000
ROA not before: Wed 04 Dec 2024 14:00:52 +0000
ROA not after: Tue 04 Mar 2025 14:00:52 +0000
asID: 11426
IP address blocks: 158.115.236.0/23 maxlen: 23
158.115.238.0/23 maxlen: 23
207.230.100.0/23 maxlen: 23
207.230.102.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:18:6a:81:93:79:02:89:44:e8:1e:1a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Validity
Not Before: Dec 4 14:00:52 2024 GMT
Not After : Mar 4 14:00:52 2025 GMT
Subject: CN=43fd71b7-de09-4cc9-8a1a-6f4c15300e71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:db:8d:4f:82:5a:0f:7d:39:ce:ef:53:8b:93:
1d:d7:74:60:58:ac:0b:fe:73:0c:34:b3:0f:98:f6:
11:bc:83:83:99:3f:7a:50:ed:fb:00:3b:07:93:6f:
81:1d:6b:44:1e:fd:47:3c:a9:b8:4f:d0:b3:c1:a6:
36:71:5b:0a:e3:c6:1a:84:83:56:55:07:74:b0:b8:
fa:e2:28:2c:94:f2:26:2f:d5:d8:6e:13:79:af:4f:
df:4a:19:28:53:d9:3b:3a:f6:37:f2:95:8b:ce:fe:
d8:3d:ea:03:49:e4:08:b5:86:6d:fb:7d:a4:96:d3:
ca:aa:bf:e8:39:c9:8c:5f:51:26:f7:b1:1c:93:6d:
ae:b2:b6:68:90:be:c8:d8:67:41:44:75:9b:09:6b:
30:f6:3c:a7:21:29:3c:08:9f:3c:52:cc:c7:dd:4f:
1e:fa:3f:13:0e:7c:70:3b:14:b8:a4:09:1d:39:37:
6a:8d:0d:bc:d1:30:37:fb:90:a3:72:d6:3e:a2:85:
40:dc:7b:2a:aa:7b:97:e7:43:6f:10:d7:e4:02:d1:
3a:73:6b:32:a2:a0:9c:55:f0:d9:32:0a:a4:61:5b:
dd:bf:1b:6e:a8:1a:bd:7a:2c:62:46:e4:33:4f:32:
8c:b0:e0:32:47:86:1b:64:75:8d:0c:8c:f1:2b:99:
92:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:32:20:41:DD:18:7B:53:26:DC:AE:6C:3C:57:E2:0E:57:26:76:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/c0271d02-e45f-3dda-8c9a-2468641ab27b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
X509v3 Authority Key Identifier:
keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
sbgp-ipAddrBlock: critical
IPv4:
158.115.236.0/22
207.230.100.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:5f:a9:55:33:71:4f:f9:1e:c5:93:86:30:7f:0c:40:8c:b7:
03:d5:03:2e:60:c4:2c:ad:f5:ef:7d:11:cd:87:d0:a9:22:9e:
e8:a2:fe:66:2c:08:88:91:5b:a7:d2:da:87:20:dc:d5:eb:38:
dd:ad:da:ef:af:3d:b0:73:4d:b6:59:62:5e:66:34:c8:c5:b5:
1a:c2:be:ab:45:27:c5:6e:4f:5c:39:9d:c9:42:1a:bb:0c:56:
66:09:1c:b3:2e:4d:10:9d:9b:e8:db:e1:4f:1c:09:19:47:0b:
72:56:a3:ec:d0:68:fa:e2:38:44:e4:7c:b6:f3:81:75:74:86:
5e:f5:5f:30:95:2c:9f:d1:74:e5:e7:ff:e2:5d:bd:ac:70:3e:
7a:ab:e8:61:74:cc:4a:b8:8d:1a:bc:1c:4f:1d:52:fb:96:aa:
1c:5f:b5:27:1a:c0:8c:6a:73:30:1c:47:57:df:59:6c:e9:b9:
ef:68:76:81:29:93:a7:41:0b:f2:c2:ec:27:34:82:1c:98:5c:
dc:8f:4a:8d:2a:36:ce:f5:a0:9b:97:80:b2:c5:18:8c:b7:30:
45:38:a3:36:18:55:1f:54:64:ef:ff:cf:c7:04:23:7e:85:f0:
67:c5:05:1a:00:16:78:18:6b:63:e0:23:18:87:dd:72:a1:46:
6a:b2:5d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:26:23 2025 by rpki-client