Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/27014688-301f-3289-8866-482ffdb25486.roa
File: 27014688-301f-3289-8866-482ffdb25486.roa (raw, json)
Hash identifier: eTKMMKfcFMTRVxmkl+sTo4ETxOaQWb6YHCKqwVj6XpA=
Subject key identifier: 3E:A0:24:F9:D7:10:6C:A4:D0:55:4A:1C:9E:4F:83:ED:04:4F:20:01
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F43285848B4C0D7743C0FDF1CC0870D00
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/27014688-301f-3289-8866-482ffdb25486.roa
Signing time: Wed 29 Jan 2025 14:00:51 +0000
ROA not before: Wed 29 Jan 2025 14:00:51 +0000
ROA not after: Tue 29 Apr 2025 13:00:51 +0000
asID: 54113
IP address blocks: 157.5.74.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b4:c0:d7:74:3c:0f:df:1c:c0:87:0d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Jan 29 14:00:51 2025 GMT
Not After : Apr 29 13:00:51 2025 GMT
Subject: CN=97d49829-8218-43de-aae0-b73b3dcf3598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:23:55:89:bd:69:0e:e8:ec:b1:c0:7a:1e:53:
09:58:d2:7c:e3:45:28:8f:bb:2d:f3:75:9a:bc:bc:
60:ec:fc:e4:6c:23:f7:8b:0c:e1:37:92:9e:b6:6a:
f2:9e:d5:5c:3b:62:b3:6b:bd:87:14:e7:df:d8:74:
98:74:52:a3:80:45:bc:a5:fc:a5:b0:ac:f3:e6:c6:
86:60:1e:2e:2d:17:5b:0d:20:0a:99:58:7e:e2:ab:
df:3d:06:d0:b6:b8:ac:c1:87:be:8a:36:5e:c4:54:
f3:25:04:26:e2:f2:e0:13:5b:4a:4a:11:52:13:ea:
a7:e6:64:cc:db:8c:8e:d7:47:ed:4c:b9:d3:24:65:
67:9c:e3:b1:1b:75:5d:d7:fd:96:f7:68:8b:76:02:
74:d3:5a:ac:3f:44:7c:71:72:5c:17:40:db:40:3f:
6b:8f:72:84:67:7a:bf:13:86:57:d9:12:db:9e:dd:
ce:04:f7:ca:62:f0:0b:5b:3c:d4:fe:e6:ce:fe:29:
f1:71:d7:57:62:96:cd:03:d4:92:9f:a6:02:2b:8d:
7a:8f:8d:2a:65:03:99:d6:8a:06:1b:8b:75:fd:dd:
30:e8:b4:ee:29:07:f1:40:1c:dd:d4:5b:a0:4c:5b:
64:cc:e6:42:7a:73:8b:bd:10:5a:ab:7d:84:02:d6:
a2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:A0:24:F9:D7:10:6C:A4:D0:55:4A:1C:9E:4F:83:ED:04:4F:20:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/27014688-301f-3289-8866-482ffdb25486.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv4:
157.5.74.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:bf:14:07:15:e7:6c:71:df:df:e8:30:9f:5a:fb:f2:58:e9:
74:4c:69:9c:65:ac:67:08:f9:87:f3:e9:0a:f9:b4:80:00:c2:
30:7c:23:9e:65:61:fd:f3:12:fa:c2:c6:39:69:97:9e:44:64:
9c:9a:e5:5c:98:06:7e:52:c9:52:8f:87:9d:02:6b:6a:58:5f:
91:47:e3:ac:b9:44:a5:6a:89:9e:4a:69:0c:f0:72:88:f4:67:
46:72:47:81:b7:7d:b9:df:bc:ef:29:ba:b0:53:73:44:72:6c:
cd:fe:25:64:91:30:37:17:ce:6c:55:e9:07:2c:c7:fa:14:a2:
0e:77:63:21:31:e0:20:6b:72:2e:5f:42:cf:54:1f:ae:96:16:
30:b9:6f:21:ee:03:fc:30:ab:f4:00:d5:68:22:df:0b:9c:2d:
31:9b:e9:c3:ea:c0:55:2a:a6:84:43:20:5f:5c:0c:e5:b9:ca:
ad:0b:7a:a0:09:a8:8d:29:73:8c:dd:57:6a:4e:8a:d4:54:0b:
7a:71:9a:38:63:6d:2a:1d:cf:b1:1b:38:25:c6:a9:07:76:f8:
45:4f:ba:6e:66:25:49:0f:e6:f6:8c:72:6d:a2:d0:5b:bf:28:
72:46:18:2b:cb:2f:37:9d:e9:62:65:a7:9b:8c:e0:cb:73:7b:
19:a3:21:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 02:56:48 2025 by rpki-client