Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b4af9c38-642f-3034-a2cc-d6c945b1e743.roa
File: b4af9c38-642f-3034-a2cc-d6c945b1e743.roa (raw, json)
Hash identifier: B6TKBRn7LTFb1r65XT15ul9OcYpbrerQ37YzaH4g5Ro=
Subject key identifier: 50:BF:3D:81:41:91:A8:02:57:E5:31:86:36:FA:B9:D8:41:B0:EC:1D
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F43285848B4C0D8F263B8773FDBAD42E0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b4af9c38-642f-3034-a2cc-d6c945b1e743.roa
Signing time: Wed 29 Jan 2025 14:00:51 +0000
ROA not before: Wed 29 Jan 2025 14:00:51 +0000
ROA not after: Tue 29 Apr 2025 13:00:51 +0000
asID: 54113
IP address blocks: 157.5.92.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b4:c0:d8:f2:63:b8:77:3f:db:ad:42:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Jan 29 14:00:51 2025 GMT
Not After : Apr 29 13:00:51 2025 GMT
Subject: CN=c4ce6e9b-017d-429a-b72f-652c7bc4d37a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:23:03:b8:ab:02:29:1c:26:7b:72:bb:69:aa:
1d:06:a6:c1:d6:a7:a9:39:f4:c6:28:7a:a9:04:31:
f2:d4:fe:fd:98:b5:b7:9f:47:55:a6:81:47:26:f1:
6b:42:64:46:11:36:1e:3f:bb:ef:2a:55:c7:5c:af:
d4:aa:c1:23:0e:dd:46:1e:7a:9b:4c:9f:c1:a6:00:
91:7e:b9:7e:89:16:89:3f:9c:43:42:d0:fc:ce:df:
ed:91:1a:52:d4:cc:d9:72:8d:2e:75:25:9a:e0:48:
d5:09:04:5f:2b:9c:06:f9:7e:3f:de:4c:dd:7a:a7:
14:e1:b1:41:6c:af:5c:cd:63:05:81:b6:b5:f9:fa:
19:a4:39:6e:ea:69:8f:25:3c:2f:c5:7e:b8:2d:d8:
78:7d:11:8a:d5:88:73:a0:b2:85:35:5a:35:1e:16:
29:b7:8c:86:d6:94:55:09:22:58:f9:46:c0:41:55:
5c:0e:bb:82:f4:de:15:51:00:ae:4a:a2:f0:52:0e:
41:49:26:88:06:88:d9:6d:54:9d:95:16:d1:ca:d3:
fb:d6:05:90:b1:6a:2d:e3:1b:a8:fe:b6:2b:0f:72:
b9:5a:d0:81:9d:7c:ca:24:71:88:85:b8:a8:a9:46:
f1:fd:1b:de:55:0b:08:7f:9f:01:36:38:8c:13:11:
bd:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:BF:3D:81:41:91:A8:02:57:E5:31:86:36:FA:B9:D8:41:B0:EC:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b4af9c38-642f-3034-a2cc-d6c945b1e743.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv4:
157.5.92.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:a5:76:da:ce:d1:04:c9:c9:cd:43:0d:7b:ef:5a:66:5f:00:
79:cc:3a:89:73:02:9a:66:96:e7:f1:6c:e7:f2:83:14:14:23:
41:c1:88:eb:aa:6d:44:a8:f0:c4:56:68:fb:21:7a:37:3b:27:
ca:23:6f:ef:db:76:c8:44:1b:5f:68:65:49:5c:ab:ef:00:2d:
b1:7c:87:6b:f5:2b:f9:bd:20:35:d4:f0:27:7d:7d:7a:6c:af:
4c:56:ed:e8:59:99:bd:27:b6:98:e1:b1:47:ce:b3:b9:87:60:
da:67:57:29:43:c2:65:b5:8a:f2:b6:a6:75:9b:c8:27:ce:f6:
20:af:45:e8:4c:28:9e:7c:dc:90:44:f5:d3:77:25:78:f4:00:
68:f5:6a:59:f1:b1:0c:61:4a:c9:4d:a9:79:5d:a2:c1:35:fa:
01:ee:20:72:ca:29:d2:0b:38:63:df:97:55:30:57:3b:e5:6c:
7a:cb:01:df:65:99:ad:da:f0:02:91:84:30:10:08:25:0a:08:
9d:c7:fc:6b:29:b4:98:4e:31:83:b6:78:59:a7:e2:05:bc:99:
07:9a:45:40:f2:96:64:74:a1:82:e0:4f:86:eb:41:4c:d4:72:
68:1e:b9:c7:15:15:b0:5d:81:66:69:50:f8:1e:54:0a:4b:23:
90:a8:3c:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 02:39:24 2025 by rpki-client