Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0a222cf3-16b7-3e07-99d9-c6618d558bab.roa
File: 0a222cf3-16b7-3e07-99d9-c6618d558bab.roa (raw, json)
Hash identifier: N9w7LwP0kyH6zNBI7FMNwNm+0tHIjRMYxBcrLfWg3es=
Subject key identifier: 06:A8:C9:81:C6:CB:0A:AD:A5:F6:84:CC:84:8B:19:22:CB:2A:0C:90
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F43285848BFEBC60A14BEE32D1FAAAFC0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0a222cf3-16b7-3e07-99d9-c6618d558bab.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 54113
IP address blocks: 157.5.88.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:c6:0a:14:be:e3:2d:1f:aa:af:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=d5f91632-d8b5-4bac-987a-92c64a81b7ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:56:d8:4a:fb:19:1c:87:29:e6:78:9c:b7:95:
93:e9:a2:6d:ac:f6:d9:fa:e6:69:57:e3:99:89:c5:
4b:86:18:68:c2:93:2d:63:11:7d:ac:34:33:d9:03:
9f:84:0c:9a:a3:c7:f6:0b:ba:4b:c4:9f:1a:92:1f:
c2:5e:35:12:da:43:66:9f:63:c7:37:83:0c:3d:3b:
7a:44:5f:c4:f8:2e:3b:e4:3b:3d:b0:cd:42:98:66:
d6:11:50:27:f8:75:39:5d:1e:02:9c:ea:69:91:0c:
3b:49:ef:25:7d:a5:f0:a2:f7:0b:22:ec:97:db:24:
c1:26:14:0c:8c:1f:ae:ec:08:7e:5f:a2:b6:64:26:
e6:c4:38:20:0c:a4:3b:06:ba:77:e4:f2:51:9d:cd:
e6:ed:88:66:60:e2:8b:39:77:7e:2c:e6:87:1d:48:
3b:15:09:d6:ac:52:65:62:a1:f0:91:f8:02:ae:9d:
e2:8b:61:79:42:6a:f3:f6:c4:31:a6:1c:7e:9f:b6:
f2:53:fd:3c:6a:93:43:e4:44:c9:3b:77:90:d6:8b:
e7:9e:09:30:fb:ff:bc:8f:22:5d:6a:38:6c:77:55:
3e:4d:91:2c:e9:50:f3:f9:8d:75:db:97:47:8e:81:
83:74:a2:b3:0d:10:ec:df:71:55:47:60:21:36:df:
40:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:A8:C9:81:C6:CB:0A:AD:A5:F6:84:CC:84:8B:19:22:CB:2A:0C:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0a222cf3-16b7-3e07-99d9-c6618d558bab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv4:
157.5.88.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:91:4a:4c:6b:3a:cd:62:7d:26:66:98:7f:cc:3b:87:65:b7:
8a:19:ad:74:c7:3a:d7:9b:7f:49:fe:8e:f8:fa:f0:21:fd:bb:
dd:9d:32:47:e7:e4:9f:fb:50:89:24:22:e0:cc:82:6f:a5:dd:
ea:6a:21:c6:cf:bd:00:07:41:73:d7:f7:79:35:73:08:b6:5c:
57:12:31:03:d6:d0:ff:fb:d3:ab:88:4d:13:69:99:77:1d:85:
98:ad:a8:3f:b6:6f:4e:2f:a5:71:61:c6:c3:04:6e:3e:2d:63:
ca:f3:a8:7e:2e:a5:ad:ae:15:c0:2e:5e:a6:a6:c5:6f:93:23:
f3:b5:46:de:4c:63:be:3c:db:b7:9b:c1:8f:87:9c:db:97:28:
f3:ac:c1:6c:18:32:a2:b5:8c:8a:5c:8f:68:2b:6f:e0:a3:5c:
10:42:54:f0:71:d9:65:c6:4f:0d:e5:5f:ef:31:b2:75:c8:5a:
c4:ea:d8:21:2e:f6:9c:ef:31:0b:05:56:b6:15:d5:4c:f8:dc:
a4:fd:28:53:4b:dc:f3:cb:e5:04:1d:11:c7:ae:b5:33:52:58:
c1:3c:a2:9d:db:2f:4e:c2:aa:97:42:fb:06:db:dd:d6:26:50:
fe:3b:fa:01:19:c3:2f:08:1f:03:1f:c4:fc:07:89:8d:cd:d0:
d6:29:08:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 05:28:25 2025 by rpki-client