Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/8ef495be-c2fb-341a-95ef-f915cb6d4d40.roa
File: 8ef495be-c2fb-341a-95ef-f915cb6d4d40.roa (raw, json)
Hash identifier: ZjQV7siy7tJaZBwSbcP8yZQQUIO2TQjDEytpeUiaoJY=
Subject key identifier: 43:97:B8:A3:56:AC:D3:38:F4:34:79:C9:C8:5C:F3:53:85:BA:B7:39
Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial: 010D0C9F43285848D0ABC3795CA89B0C612A2D80
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/8ef495be-c2fb-341a-95ef-f915cb6d4d40.roa
Signing time: Sat 08 Feb 2025 14:00:52 +0000
ROA not before: Sat 08 Feb 2025 14:00:52 +0000
ROA not after: Fri 09 May 2025 13:00:52 +0000
asID: 54113
IP address blocks: 157.52.89.224/28 maxlen: 28
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d0:ab:c3:79:5c:a8:9b:0c:61:2a:2d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
Validity
Not Before: Feb 8 14:00:52 2025 GMT
Not After : May 9 13:00:52 2025 GMT
Subject: CN=088037e6-9b63-4244-a65a-5216599d320c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:14:6d:f5:b8:33:bd:99:0d:48:13:62:06:4e:
8c:d4:23:04:1b:7d:ba:1f:b7:a8:c5:8b:58:c2:d7:
00:e4:c9:b7:6d:dc:0b:d8:ff:a0:86:66:05:26:c4:
d3:57:97:dd:c3:97:68:d3:51:c9:79:2c:65:b9:2f:
f8:7c:27:15:23:20:03:54:c1:14:f1:6f:bb:08:f0:
be:46:69:90:9a:d0:83:ba:c8:34:2d:d9:6d:6d:f8:
23:2e:ad:37:a5:8b:76:93:f8:78:37:69:6b:8f:dd:
d6:d3:94:08:f4:91:fa:ee:6e:04:3b:de:48:9e:34:
c4:e7:9a:da:58:c1:08:57:a7:ea:86:3b:46:2e:e3:
96:84:ce:a4:6d:b2:ec:5c:40:db:a1:63:8d:46:5a:
0a:b6:3d:e5:8b:ad:cc:08:4b:20:a3:61:fa:97:0d:
fb:7c:d5:b0:8f:3b:31:5d:cc:50:2c:5a:4e:5d:8f:
57:82:e3:76:04:7d:e2:f7:fe:eb:a6:bd:60:3c:a0:
5b:dd:8d:5f:9f:3e:12:2d:4e:06:57:4a:f6:79:ce:
5f:a9:f4:93:5e:0f:0f:0b:e5:63:9c:d1:85:2d:fc:
20:50:da:38:f1:73:12:d3:d6:10:c9:99:b6:c6:83:
15:45:21:af:cb:9d:e0:74:65:61:01:67:5e:a4:d4:
35:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:97:B8:A3:56:AC:D3:38:F4:34:79:C9:C8:5C:F3:53:85:BA:B7:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/8ef495be-c2fb-341a-95ef-f915cb6d4d40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
X509v3 Authority Key Identifier:
keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
sbgp-ipAddrBlock: critical
IPv4:
157.52.89.224/28
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:df:39:0b:42:47:f1:63:d9:09:2a:43:d3:18:fa:e0:03:bd:
cb:7f:7a:05:d8:2c:e2:63:5e:27:28:1b:54:3c:f7:d8:94:8f:
73:ae:7b:52:15:bb:44:4f:74:8d:71:42:e9:83:7b:11:90:a5:
d8:13:8a:81:1e:4c:6c:20:ac:ef:61:1b:68:a8:7a:a5:21:ae:
18:db:59:45:e9:1f:5f:5e:44:6c:1b:8d:71:00:42:0a:a9:9e:
c9:55:24:78:0e:f7:58:53:4d:04:89:68:59:b6:2a:4f:cf:d4:
a4:60:59:fd:0d:cf:d3:25:34:d8:2b:83:60:6c:7f:25:11:cc:
bb:26:7d:e7:02:43:b6:19:67:ee:9c:60:31:9d:5e:cc:07:8d:
cc:ee:d1:82:c1:cb:c2:82:56:d0:7c:35:ab:7b:df:0b:2e:08:
48:f8:a5:ae:11:b5:76:3f:96:af:b0:de:f0:95:6b:60:65:a1:
33:2e:92:28:6b:65:ed:2a:d3:f8:02:6f:6f:d5:f8:fd:14:d2:
86:ea:b9:16:f1:1f:d8:cb:c1:45:87:ca:9a:53:70:dd:1a:4c:
8c:a8:d2:c2:4e:ad:8d:52:d6:72:ed:23:f5:34:67:55:cc:c3:
b9:fd:7b:89:60:be:0f:06:67:29:ad:e2:92:c8:83:5b:17:54:
bd:eb:6b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 02:52:02 2025 by rpki-client