Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/857207aa-33ba-3517-ba92-dbeae756a93f.roa
File: 857207aa-33ba-3517-ba92-dbeae756a93f.roa (raw, json)
Hash identifier: mhx45RDRqxO0kS4D0+K4I9B/pD0M5ZOypeLHI3VR97M=
Subject key identifier: A2:1D:90:D7:0A:38:E7:DC:9D:FF:EA:D8:12:52:8A:16:43:79:92:75
Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial: 010D0C9F4328584900215F7F38162075F95E2600
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/857207aa-33ba-3517-ba92-dbeae756a93f.roa
Signing time: Tue 25 Feb 2025 14:00:52 +0000
ROA not before: Tue 25 Feb 2025 14:00:52 +0000
ROA not after: Mon 26 May 2025 13:00:52 +0000
asID: 212238
IP address blocks: 158.115.252.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:00:21:5f:7f:38:16:20:75:f9:5e:26:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Validity
Not Before: Feb 25 14:00:52 2025 GMT
Not After : May 26 13:00:52 2025 GMT
Subject: CN=29a14509-ebc6-433e-878c-4f987c2f2d0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:24:c4:91:31:12:25:22:17:e8:2c:7b:3f:72:
39:46:a2:ea:72:3f:2e:36:4d:96:4f:fc:c2:12:67:
ca:f4:ad:8e:d5:9a:d4:1f:63:eb:41:47:39:79:61:
ca:a7:89:aa:68:3c:59:89:2b:fc:c9:0d:87:d2:5d:
56:fa:20:ad:0b:63:c4:ff:12:28:d0:35:01:5f:26:
b4:e0:3c:bb:51:54:03:b7:9b:0f:fd:f5:24:4e:c6:
b5:e7:15:16:de:42:ae:2e:82:a9:2e:c9:b7:54:fa:
61:75:6b:4b:55:bf:a6:19:09:61:ee:00:28:b0:2f:
f6:e3:c1:78:95:6d:9d:c5:c5:ae:cb:da:6b:c3:17:
89:81:ba:87:aa:db:25:6f:ec:f3:40:47:66:18:bf:
cb:f2:64:7f:be:6c:aa:4f:72:9f:34:01:e2:19:bc:
eb:98:76:b7:08:fc:09:06:28:71:62:ea:c7:8f:38:
23:33:8d:33:cd:7c:79:78:6c:42:5a:9a:7b:a4:72:
a0:8c:df:07:99:b9:e2:f4:ca:9a:27:89:c8:4e:68:
60:5f:af:7e:06:62:3d:1c:77:04:36:b2:df:ff:b2:
3e:32:e8:12:89:06:e5:70:41:22:4b:67:10:e9:e0:
b0:84:ba:e3:1d:0e:0d:ad:11:a2:c0:8a:aa:32:e8:
f7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:1D:90:D7:0A:38:E7:DC:9D:FF:EA:D8:12:52:8A:16:43:79:92:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/857207aa-33ba-3517-ba92-dbeae756a93f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
X509v3 Authority Key Identifier:
keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
sbgp-ipAddrBlock: critical
IPv4:
158.115.252.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:26:e7:e1:60:bf:11:33:e8:fb:dd:94:f7:1d:55:81:a7:07:
05:bf:71:b9:9d:7d:2e:2c:31:ba:e1:db:9c:22:52:8f:07:8b:
c9:67:06:c6:50:2c:ba:da:83:5d:cf:ab:fa:21:ce:38:5a:f7:
b4:55:a8:9a:2f:b6:4b:a8:9b:0c:21:d2:d5:f0:d7:f2:e0:38:
02:8d:f0:6c:1d:39:5d:f5:5e:fb:1b:d4:9f:23:a1:db:5b:d2:
b8:b1:0e:98:6e:e1:9a:9c:a9:5f:c9:e1:e5:27:78:c4:92:e5:
4c:40:8e:84:71:64:c4:33:93:76:21:da:34:fe:70:96:75:0b:
45:db:72:03:1e:09:ea:1b:a8:97:24:ec:4a:c6:af:42:9e:c8:
f3:6c:09:ee:29:01:76:59:5e:3c:c9:08:d4:0c:8e:5f:57:9b:
4d:53:fc:42:c4:26:3b:ec:5d:0f:76:2c:a7:61:0d:f5:a6:20:
b1:0d:92:a2:a6:ac:f1:68:ac:16:43:d9:fb:f0:c7:07:7c:f0:
df:99:fe:65:83:45:82:5c:67:34:2b:58:c4:07:ad:b9:b3:14:
9c:0b:d1:72:42:18:0c:66:d0:a7:23:71:58:8a:5a:3b:63:4f:
ec:f6:ec:45:74:68:b0:25:5e:ab:58:87:47:fd:16:b6:ea:6b:
13:05:2b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:07 2025 by rpki-client on console.sobornost.net