Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/898bf973-ef5d-356d-ab29-0182ccb0cee8.roa
File: 898bf973-ef5d-356d-ab29-0182ccb0cee8.roa (raw, json)
Hash identifier: kSpgTayPoWDYNe4GahHnTQePkJpS5Oi2V2m/WeG/9j0=
Subject key identifier: 44:14:45:80:E6:84:72:CC:E4:9A:83:E1:BE:C6:A5:B9:2F:A6:AF:CD
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F43285848B4C0D8457848962D5374F400
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/898bf973-ef5d-356d-ab29-0182ccb0cee8.roa
Signing time: Wed 29 Jan 2025 14:00:51 +0000
ROA not before: Wed 29 Jan 2025 14:00:51 +0000
ROA not after: Tue 29 Apr 2025 13:00:51 +0000
asID: 54113
IP address blocks: 157.5.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b4:c0:d8:45:78:48:96:2d:53:74:f4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Jan 29 14:00:51 2025 GMT
Not After : Apr 29 13:00:51 2025 GMT
Subject: CN=025311c4-4369-46bb-897e-550736e0f9ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:7a:e7:61:64:4d:60:b3:4b:78:70:08:c8:e7:
19:4f:e9:95:d6:68:49:d8:13:4c:48:f9:fe:13:97:
a6:9e:ec:79:df:74:32:b5:c8:98:32:c8:a1:6d:ec:
d8:7d:ab:d0:04:ea:b1:b2:74:88:13:2f:14:09:8f:
7a:21:99:ea:44:a4:ce:d8:bf:bd:8e:3b:7b:e5:02:
4a:6f:9b:73:59:f2:1d:25:f9:27:3a:64:26:8a:67:
86:b5:c2:16:f3:b2:02:88:81:fb:b4:8c:a4:c8:74:
46:22:54:be:f3:f2:9c:b0:cd:f9:b5:14:2c:cc:d4:
3e:4d:04:53:2d:85:ce:b7:be:f5:dc:11:44:48:00:
c4:59:ab:e1:67:51:bf:41:05:b6:e3:df:8a:ea:a2:
ba:fb:f8:d2:c2:86:70:2f:00:8a:71:6c:36:29:e2:
88:fd:f2:b8:44:8b:07:90:0c:78:47:51:92:e3:d1:
af:e1:52:26:a8:5a:d1:4b:b4:33:ff:2b:5a:dc:b6:
ef:20:2d:9a:39:f0:2d:09:3a:07:39:f1:72:84:2a:
29:68:a8:8c:dc:da:f6:25:17:10:9f:ae:b8:17:fb:
95:14:64:93:f4:e2:4a:27:d6:8d:12:56:7b:5f:8a:
b2:bc:0b:ba:5e:4f:92:2e:a6:fe:4c:cc:23:6e:00:
ff:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:14:45:80:E6:84:72:CC:E4:9A:83:E1:BE:C6:A5:B9:2F:A6:AF:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/898bf973-ef5d-356d-ab29-0182ccb0cee8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv4:
157.5.118.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:c0:f9:95:af:8f:ba:a5:61:f2:63:e2:a7:0d:1c:12:cb:97:
e4:13:e4:a1:28:a7:50:7e:7b:b3:3c:89:d3:37:c7:48:1e:5f:
f7:29:46:31:51:60:f1:ec:39:ab:ec:00:2e:16:60:f7:e6:ea:
80:d7:62:54:8f:94:04:bb:6a:50:b7:84:75:06:7e:49:f8:ba:
fd:e8:43:ff:76:d2:54:45:01:bf:52:fd:f2:c9:a7:50:de:6b:
6b:ef:ef:50:c9:19:ee:83:d8:65:b5:1b:70:c2:b1:2f:e4:44:
df:04:36:8c:24:1a:fe:ce:7a:f2:68:14:35:ae:d1:b3:3c:cf:
db:27:25:75:61:76:95:b2:ca:75:01:06:c4:75:6a:84:de:6d:
d7:58:b2:08:d0:a5:57:e0:29:78:2a:40:f6:c2:27:78:2f:7d:
1b:f9:1a:35:ff:6b:c8:0f:cc:09:da:c2:2d:62:36:9d:38:c7:
6a:5a:58:5d:4d:a6:1a:16:a1:c8:7f:e9:e0:9e:52:60:1c:1e:
14:71:0a:04:e1:b7:94:54:d9:66:67:30:6a:df:8d:85:7c:16:
0d:b6:bc:a5:24:49:03:ef:ed:8b:db:28:b4:90:d0:23:7a:ac:
ac:52:50:f3:73:da:e0:cd:f8:6b:76:57:bb:b8:a9:99:8a:22:
2c:f0:d4:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 02:47:22 2025 by rpki-client