Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/8bae1904-38a9-3f12-95ef-f544365045b5.roa
File: 8bae1904-38a9-3f12-95ef-f544365045b5.roa (raw, json)
Hash identifier: ispfYzIlQk0n1U9N0ZTLcFQfJLNba1KlxCl1oI0f1Dg=
Subject key identifier: 30:28:70:78:BE:F1:DA:F4:30:88:C5:75:D6:6A:78:10:7F:79:DB:3B
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F43285848B4C0F46D461D5CDC8EC54D80
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/8bae1904-38a9-3f12-95ef-f544365045b5.roa
Signing time: Wed 29 Jan 2025 14:00:51 +0000
ROA not before: Wed 29 Jan 2025 14:00:51 +0000
ROA not after: Tue 29 Apr 2025 13:00:51 +0000
asID: 54113
IP address blocks: 157.5.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b4:c0:f4:6d:46:1d:5c:dc:8e:c5:4d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Jan 29 14:00:51 2025 GMT
Not After : Apr 29 13:00:51 2025 GMT
Subject: CN=e7730b5a-b031-4028-b04e-6567138cf9ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:7e:76:22:ab:3c:7b:78:54:10:12:e0:38:5d:
80:d0:d4:35:04:ce:87:8b:b5:15:b1:ca:23:cc:c7:
41:bd:1a:44:b1:bd:8b:0a:0c:f2:69:19:a9:85:5b:
d2:7b:12:95:80:f6:87:a6:29:91:0b:ef:50:f0:d9:
31:a1:19:10:a7:af:4b:54:59:ac:06:83:8b:fd:c8:
6f:08:fc:f7:ee:2c:bf:70:bb:05:78:27:78:d9:c4:
e6:4c:4b:66:7f:79:4e:d4:92:ac:91:62:3c:87:b0:
5c:25:be:5a:27:b6:f8:7c:42:92:7d:ea:85:da:64:
4a:ac:72:35:3a:36:4f:a2:ec:bd:81:93:e4:96:8c:
17:5a:de:80:56:91:b3:95:99:bb:30:ba:5b:3f:d6:
1c:01:94:0a:71:82:55:dd:c0:ff:ba:0b:03:ca:c9:
51:85:ca:7d:27:7d:e8:8b:0f:aa:8f:2a:ac:f2:ed:
43:f3:be:d7:46:0a:93:d2:9d:90:9a:29:e5:b5:3e:
b8:1b:70:97:8b:d9:5f:16:51:6c:3f:bf:30:94:c2:
bb:db:66:c3:4d:0e:07:0a:bf:69:6d:bc:07:01:47:
09:d1:65:30:8c:a0:a7:cc:a7:cc:b2:38:b3:11:67:
b1:3c:7d:2a:95:d7:78:20:53:4a:ac:44:e8:1d:8f:
c7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:28:70:78:BE:F1:DA:F4:30:88:C5:75:D6:6A:78:10:7F:79:DB:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/8bae1904-38a9-3f12-95ef-f544365045b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv4:
157.5.67.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:6e:02:f1:f7:78:cf:92:35:77:95:66:0c:b5:38:30:c6:da:
25:72:6e:25:c6:f2:cd:43:ee:0d:1a:d5:f3:0f:b9:f2:05:7e:
70:ba:a0:c9:19:85:c4:16:b6:3c:fd:94:0d:f2:95:00:13:e8:
89:dc:ae:9d:4f:d6:82:b8:b2:80:11:e7:21:ba:3e:f0:20:b3:
48:77:d8:33:b5:d1:94:43:ba:aa:63:77:f3:d5:e9:2a:7e:db:
86:c4:cb:91:22:d1:75:a3:04:b1:56:e8:b3:7a:48:a9:6b:11:
89:1f:a0:06:f6:b6:35:47:11:7f:10:a1:14:6d:4d:45:93:81:
99:f1:c9:b6:43:74:9b:fe:6d:36:f0:40:33:9e:6f:02:7e:af:
03:79:60:ce:7a:22:68:55:76:e8:ac:9b:a9:c5:37:64:2c:c6:
fa:65:ff:35:63:6e:90:41:d9:7f:8b:50:d9:b8:89:e1:c5:38:
0b:9d:35:14:b2:5a:4d:7f:88:b1:e6:f5:20:51:38:69:dd:01:
47:60:fa:5e:c7:97:79:2c:46:67:2e:26:6c:a2:a1:b8:a7:b9:
4a:8a:cd:ef:0d:74:b9:8f:82:7e:03:db:bc:f3:61:ad:8a:22:
4d:6e:da:6e:59:44:32:47:b0:1c:c1:72:5b:7b:07:36:25:95:
22:4d:7c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 02:44:32 2025 by rpki-client