Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/462faa57-d8e1-3e7a-bf9f-72fd79685087.roa
File: 462faa57-d8e1-3e7a-bf9f-72fd79685087.roa (raw, json)
Hash identifier: dk3HSPTI60iN4AAMo6L6vFMMtPbivQ/wUG8RlDoaad0=
Subject key identifier: EC:4C:C7:52:2D:EF:2C:4B:C0:1C:5E:F9:FB:22:24:2A:97:6B:FA:7B
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F43285847E094E487A1CEAA511DBC9700
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/462faa57-d8e1-3e7a-bf9f-72fd79685087.roa
Signing time: Thu 14 Nov 2024 14:00:40 +0000
ROA not before: Thu 14 Nov 2024 14:00:40 +0000
ROA not after: Wed 12 Feb 2025 14:00:40 +0000
asID: 54113
IP address blocks: 157.5.90.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e0:94:e4:87:a1:ce:aa:51:1d:bc:97:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Nov 14 14:00:40 2024 GMT
Not After : Feb 12 14:00:40 2025 GMT
Subject: CN=876883a2-bcda-4202-bb09-5a4ba1e9cbaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:1c:ac:41:89:48:cb:06:14:85:3a:52:cd:03:
56:aa:1a:13:04:d9:c8:7e:47:37:9d:f7:21:1c:72:
68:a1:56:63:a4:46:13:1f:e7:50:4c:81:cf:92:d8:
41:1e:f1:d2:b1:3f:06:f3:08:e3:20:d6:93:d4:23:
c9:bc:a0:6c:94:ec:f4:49:23:ad:48:f7:6c:5c:2d:
f8:fd:19:25:26:91:ed:a7:24:91:62:4a:00:41:ef:
9b:8b:8c:18:0a:79:c5:45:1d:d9:d8:f1:6c:9d:62:
91:e3:2c:0c:f0:f9:bb:8e:1d:53:fd:1e:3c:ef:13:
aa:a7:ba:db:ff:60:d0:8d:04:c5:57:ec:af:67:2e:
08:3f:35:25:df:f6:71:18:36:28:f8:e7:ec:1f:8b:
f0:5b:fe:fd:9b:a5:b6:19:d3:4b:55:d1:43:06:14:
2e:2a:bc:d6:e2:4c:99:69:8d:64:c5:d2:4a:4c:08:
cc:90:df:19:54:c7:29:62:ca:9a:21:86:28:f7:49:
c8:d1:19:fc:5b:53:d4:5a:2b:f4:cf:b2:3d:1a:e0:
f2:32:96:24:55:7d:22:e9:54:e6:9e:34:00:b4:14:
91:2a:f9:9b:71:06:a2:3d:0d:f2:8a:23:c1:58:c4:
fa:f8:f1:eb:a8:90:37:2a:16:3c:1a:8c:e0:c3:82:
b4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:4C:C7:52:2D:EF:2C:4B:C0:1C:5E:F9:FB:22:24:2A:97:6B:FA:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/462faa57-d8e1-3e7a-bf9f-72fd79685087.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv4:
157.5.90.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:42:1e:6a:41:f0:8e:e8:af:79:bc:29:53:c9:e5:fe:13:d4:
7c:41:e3:1d:66:2f:0a:0d:38:45:64:76:88:b3:87:76:1a:90:
cc:61:1b:54:96:01:f0:28:6a:c8:37:cb:c2:15:58:f1:f8:29:
e3:c4:3a:9e:5f:d8:27:7f:5c:33:3e:a5:80:5e:6b:ae:4e:41:
d3:fc:c7:d9:a6:31:f7:95:f7:5c:ba:53:78:b0:32:9d:50:87:
f0:45:65:79:28:17:bc:fc:23:24:85:31:10:0e:85:92:f2:2e:
7b:72:a9:46:bd:77:fe:17:7f:4b:c5:24:8b:fa:95:36:0f:8a:
bc:f9:55:82:df:20:b6:d7:e1:8a:93:0a:4a:d0:06:f9:f6:9a:
92:b0:1a:17:d0:b1:f6:3e:03:d5:f2:4f:d4:cf:fc:48:45:6c:
1a:0d:b2:0f:ef:fb:09:f8:8f:96:f2:f4:9e:fa:18:a6:a2:73:
41:fb:d1:17:44:ae:ea:33:10:a6:bb:c6:33:71:92:4f:63:4d:
c8:03:cb:4c:12:1a:17:ef:ea:a4:d0:5a:7c:3a:b9:f6:32:33:
9c:1c:60:12:e8:58:69:77:34:9e:44:ea:0c:55:c6:2a:b7:28:
de:d2:ea:5c:4e:b7:c9:c4:b5:bf:6a:3f:bf:92:04:b1:06:76:
90:05:54:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 11:02:18 2025 by rpki-client