Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/12b5d41e-17b7-36e2-8c6d-e1b544e1a752.roa
File: 12b5d41e-17b7-36e2-8c6d-e1b544e1a752.roa (raw, json)
Hash identifier: glyEbFq7ptOrubOuRd7jIqLcTareK4+K9PPeTbiaEAY=
Subject key identifier: 8D:E4:43:5D:70:56:7E:C7:3E:DC:A8:1D:0C:AE:6A:C2:72:15:C9:EE
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F43285848BFEBC64758A4FA34EFEE7C00
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/12b5d41e-17b7-36e2-8c6d-e1b544e1a752.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 54113
IP address blocks: 157.5.110.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:c6:47:58:a4:fa:34:ef:ee:7c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=6da97bb6-2dbb-4956-a03d-23bddb8b6626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:6a:c7:0c:8b:4e:d6:0b:da:89:a6:5c:82:ef:
f9:2a:15:43:d3:e1:12:ff:86:a1:c1:bf:58:bb:6a:
ba:d9:7f:5e:5b:9a:03:c3:3d:85:42:e2:d7:25:3a:
f0:99:46:26:d1:17:61:77:d2:5e:f0:33:0a:1e:a4:
cb:b4:17:66:35:29:c6:c1:4c:69:45:0f:71:b5:e3:
ca:0e:a9:ba:45:3e:ff:0f:fa:d6:b4:08:a1:8b:8a:
b1:0b:19:d9:1a:1e:b2:de:ea:6a:8c:66:d8:c9:86:
a9:83:32:26:56:4a:f0:f9:68:48:ec:d8:7d:47:09:
cd:8f:9d:1b:0f:ae:68:a2:1f:18:86:85:4f:0d:14:
ec:73:ba:b6:27:07:c8:f3:da:78:c0:4c:7c:54:20:
f9:08:3e:b4:27:37:4c:fc:ad:9b:06:ef:9f:52:00:
d9:28:53:4c:86:15:4b:ac:21:b7:2a:e7:79:08:08:
8b:11:b0:88:69:5e:3e:a3:62:0d:c5:91:91:b6:29:
52:81:c2:4c:f6:df:94:53:f8:fd:13:04:4d:c7:d6:
48:99:83:29:36:4d:a6:61:d9:3f:e5:4c:a5:2a:be:
dc:46:fc:a5:97:ff:78:50:8f:5b:47:a7:d4:d2:a7:
03:e3:4a:9d:19:ac:9b:6b:59:06:c1:cd:77:59:39:
35:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:E4:43:5D:70:56:7E:C7:3E:DC:A8:1D:0C:AE:6A:C2:72:15:C9:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/12b5d41e-17b7-36e2-8c6d-e1b544e1a752.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv4:
157.5.110.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:fe:70:de:07:a8:e5:04:2a:b1:01:a3:c1:19:96:06:b1:74:
ae:97:a9:0f:d1:2d:2f:71:e1:f7:5b:cb:c8:08:2f:af:83:a6:
b8:81:9c:92:b4:66:9f:46:00:5e:a2:62:89:34:4b:f7:a0:15:
8c:5f:50:0d:75:f4:88:44:7c:30:82:e5:83:d7:ad:e5:06:64:
b5:e4:73:b0:0e:9f:fe:5e:07:06:f5:8a:09:e8:24:a6:68:56:
6f:ee:01:18:cd:1b:f2:73:07:28:3b:bb:ae:e1:bf:57:a9:a9:
61:93:6a:c2:91:2a:2e:fb:5d:b8:59:15:23:d9:a4:d0:4c:67:
67:e9:9e:70:ee:de:82:df:90:36:c0:3a:84:6e:93:0c:fc:3c:
bf:4f:df:40:b0:ad:e3:f3:5d:26:3c:fa:fa:30:4a:8f:cd:d9:
39:85:7f:36:e6:d2:52:90:5b:c9:b5:bb:72:e0:95:3b:75:26:
0a:5a:1c:5e:2e:a0:47:46:0e:1a:98:61:e7:78:96:e4:14:72:
04:7e:52:3d:0b:00:7c:56:e5:d2:0c:22:e7:d0:42:f9:d8:8c:
a9:52:87:6f:ec:bc:89:46:fe:5c:f2:8b:3f:09:ef:73:c2:3a:
12:f9:3b:2a:78:32:88:d8:b2:ef:59:9c:10:e9:f0:e6:9b:ef:
10:7e:00:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 02:43:32 2025 by rpki-client