Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/628f1b90-aa4f-4bf4-9b08-6c2ba4a51659/efac39e6-7c8c-3202-8590-cf9dcc302c63.roa
File: efac39e6-7c8c-3202-8590-cf9dcc302c63.roa (raw, json)
Hash identifier: VL3u1F5ZfiXEm0Gv00fIg++vkKN1/lFQamxGDynPGW8=
Subject key identifier: 25:32:48:31:02:2B:35:6E:C8:FB:4E:B0:84:6F:DE:D9:15:B7:5B:9E
Certificate issuer: /CN=628f1b90-aa4f-4bf4-9b08-6c2ba4a51659
Certificate serial: 010D0C9F43285848960B570FFE72FBB6B188DC40
Authority key identifier: 82:8D:F8:35:71:30:E9:BC:84:5B:0B:50:59:E3:B8:25:D7:CA:0F:6A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/628f1b90-aa4f-4bf4-9b08-6c2ba4a51659.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/628f1b90-aa4f-4bf4-9b08-6c2ba4a51659/efac39e6-7c8c-3202-8590-cf9dcc302c63.roa
Signing time: Sat 18 Jan 2025 14:00:52 +0000
ROA not before: Sat 18 Jan 2025 14:00:52 +0000
ROA not after: Fri 18 Apr 2025 13:00:52 +0000
asID: 63023
IP address blocks: 23.157.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:96:0b:57:0f:fe:72:fb:b6:b1:88:dc:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=628f1b90-aa4f-4bf4-9b08-6c2ba4a51659
Validity
Not Before: Jan 18 14:00:52 2025 GMT
Not After : Apr 18 13:00:52 2025 GMT
Subject: CN=165577f8-fd2f-4602-9cf3-4ec91ae90e66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:7a:c2:2b:f1:4f:eb:8d:5e:f3:40:20:f4:85:
7d:9a:77:db:ce:a4:ff:a7:8d:e8:1e:89:cd:00:ac:
80:e5:86:f1:74:12:7d:c8:cf:a8:26:9d:61:70:fe:
b4:cd:6e:a0:10:0d:c0:ea:67:bc:6c:a2:42:c5:7e:
2d:8f:19:d8:c8:d8:62:28:a2:25:53:4b:b5:f1:6a:
7f:9a:a3:c0:1a:8d:6e:98:90:71:72:d5:47:ed:1a:
e7:d2:44:fd:d9:97:c7:4e:14:69:60:9d:f1:e7:23:
19:33:0f:94:59:a2:89:5b:c7:9a:c2:f7:a2:cb:77:
a5:43:de:89:8d:c1:9e:35:4b:cf:1e:a5:3d:1b:98:
2d:ad:b0:e8:a4:be:41:51:f9:f8:fa:e3:08:f5:c4:
e4:f6:3d:56:b1:a5:91:73:46:a0:75:3f:9e:1b:41:
21:44:d5:d9:6d:04:06:38:a4:81:c8:80:20:3b:ce:
14:06:12:3c:b5:f1:e8:18:4c:cb:0c:86:0e:69:17:
79:c7:0c:24:e1:6f:c3:00:1a:b5:fc:60:25:de:a7:
7b:2c:c0:d4:38:f3:e1:74:16:f3:51:c2:99:14:37:
9d:3d:e1:09:1d:c0:d5:ca:6e:c4:8a:e2:36:62:63:
cb:86:cc:4e:41:d9:62:99:c3:68:39:75:54:d2:c6:
ee:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:32:48:31:02:2B:35:6E:C8:FB:4E:B0:84:6F:DE:D9:15:B7:5B:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/628f1b90-aa4f-4bf4-9b08-6c2ba4a51659/efac39e6-7c8c-3202-8590-cf9dcc302c63.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/628f1b90-aa4f-4bf4-9b08-6c2ba4a51659/628f1b90-aa4f-4bf4-9b08-6c2ba4a51659.crl
X509v3 Authority Key Identifier:
keyid:82:8D:F8:35:71:30:E9:BC:84:5B:0B:50:59:E3:B8:25:D7:CA:0F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/628f1b90-aa4f-4bf4-9b08-6c2ba4a51659.cer
sbgp-ipAddrBlock: critical
IPv4:
23.157.88.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:91:55:a8:a5:ea:80:21:1e:41:01:7c:46:1e:a9:e9:b5:c4:
8e:33:d7:4d:c6:80:10:5e:20:37:17:56:e5:6a:f8:12:1b:5d:
da:11:80:01:0e:95:e0:3d:b8:97:59:9c:97:2c:2e:04:cf:a8:
74:60:42:1a:03:3e:58:1d:1c:e5:a2:fb:97:92:c2:2b:8a:f4:
a4:bf:1b:39:42:80:1a:e2:9e:c8:4f:8c:3d:04:9e:8a:31:dd:
14:98:90:d3:63:ad:c3:a7:45:70:69:b1:85:59:3e:34:85:2c:
80:40:91:68:8a:f3:4c:49:6c:51:a0:1c:57:59:71:f5:b5:37:
4d:a3:8c:72:bf:52:64:93:f6:d5:97:de:29:c5:ef:8a:1a:ab:
43:d7:11:53:7f:32:e3:f1:95:e1:00:e0:1b:e8:ed:99:bb:c5:
db:18:73:89:7a:a8:2a:ab:70:46:8b:63:22:fa:2c:0f:85:98:
b1:7e:97:13:85:c9:13:ce:53:75:bd:34:ec:55:0d:ca:3d:50:
f2:7c:e7:5e:15:62:b6:5e:c3:a4:57:81:9e:fc:26:cb:5a:20:
5f:73:cd:a8:ab:8b:8d:8b:31:1b:61:30:ce:b3:a5:5f:05:6b:
a1:99:08:d4:20:55:b1:7e:e1:a4:04:7a:38:d3:6f:42:7e:da:
b0:45:49:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:58:24 2025 by rpki-client