Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/dba8af52-288d-3489-a6c9-dbae1ec295df.roa
File: dba8af52-288d-3489-a6c9-dbae1ec295df.roa (raw, json)
Hash identifier: O1RIq8sKYdiOrEQCwlUlZThlWiJ9WsFhKxg5TZfoi0Q=
Subject key identifier: D1:91:4F:AB:B3:80:B2:70:A9:1F:63:95:5B:C9:D5:0A:E6:2D:27:93
Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial: 010D0C9F432858487325D0F0315D07CF6631BBC0
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/dba8af52-288d-3489-a6c9-dbae1ec295df.roa
Signing time: Mon 06 Jan 2025 02:00:40 +0000
ROA not before: Mon 06 Jan 2025 02:00:40 +0000
ROA not after: Sun 06 Apr 2025 01:00:40 +0000
asID: 54113
IP address blocks: 157.52.85.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:73:25:d0:f0:31:5d:07:cf:66:31:bb:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
Validity
Not Before: Jan 6 02:00:40 2025 GMT
Not After : Apr 6 01:00:40 2025 GMT
Subject: CN=0fd13a9f-5211-4625-a287-a5a56a54357f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:5d:ba:e7:e3:0e:9c:1c:f8:b7:9a:ae:d2:26:
04:12:15:22:5a:98:43:ca:ed:e9:a0:d9:81:b3:0e:
65:24:f8:aa:4b:ab:00:67:7b:1b:60:2f:28:77:3d:
96:2e:a5:bf:5c:3d:bf:18:17:58:45:17:8f:8a:6d:
a7:40:a6:d1:d7:2f:8e:29:71:3d:9a:b6:2a:50:86:
c9:c9:fb:57:98:0b:78:6e:d2:58:57:5f:3f:d3:03:
58:f5:4a:f1:86:a2:9d:3d:87:39:94:d7:98:73:db:
7b:0f:1a:c4:93:00:af:2d:cd:1e:e0:69:23:5d:6c:
d2:56:5e:61:3b:f0:f0:d4:96:48:5f:c1:0c:fb:dc:
7f:d5:d9:24:59:ca:8c:de:77:7d:cd:29:fe:6a:7e:
ae:89:63:51:4b:68:8a:22:73:ea:6a:27:74:d6:26:
61:e5:95:57:90:66:d1:64:2d:62:a9:74:48:aa:93:
64:19:26:2a:49:e9:a9:75:e8:fe:f5:4c:7e:53:e4:
22:43:5f:e0:19:48:88:d6:ac:48:bb:e0:24:fa:58:
b9:a4:5a:1e:f3:18:0b:d0:2e:32:e7:b2:3b:f6:53:
b6:06:db:a9:9f:c8:8f:e7:f1:d2:4b:38:b9:e0:34:
dd:ae:60:20:ff:ec:ed:ef:e5:b9:33:60:fe:0d:c7:
80:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:91:4F:AB:B3:80:B2:70:A9:1F:63:95:5B:C9:D5:0A:E6:2D:27:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/dba8af52-288d-3489-a6c9-dbae1ec295df.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
X509v3 Authority Key Identifier:
keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
sbgp-ipAddrBlock: critical
IPv4:
157.52.85.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:6e:f5:54:fc:8a:2a:44:28:d7:ef:a0:c7:c8:0f:75:01:9d:
c9:4a:0c:df:08:cf:a4:ef:e5:c4:10:b0:98:e0:2f:f0:ba:c6:
a0:e5:a3:77:5b:0b:ab:06:e0:f2:75:92:28:e8:9d:dc:99:c1:
36:40:84:37:4a:b4:04:33:d7:1e:92:79:2e:4f:1a:71:b5:fb:
b9:be:12:7b:99:a7:1e:ee:ec:10:17:e1:fb:f3:37:cf:a4:f5:
1e:45:ea:59:4c:39:e7:95:ab:5b:eb:5f:cb:97:80:45:81:3c:
3a:29:bb:66:a5:50:9f:2a:3d:45:cc:25:e7:7b:04:c8:6e:8d:
dc:61:51:43:4c:cc:1f:9f:04:95:20:b9:d5:18:da:09:2f:9f:
23:45:b2:09:56:4a:2a:c7:14:0a:31:aa:e3:73:5f:f3:c1:d5:
53:c0:4c:0f:47:95:3e:fa:af:f7:85:15:b8:b3:50:13:fc:2a:
46:ad:1b:45:fb:0d:05:60:93:32:65:92:af:01:e6:59:ac:34:
fd:eb:0b:20:e9:a5:e6:26:c6:31:74:be:75:4f:9d:1c:1a:d8:
93:e4:0c:24:43:2e:f9:0e:42:ff:27:5e:a3:1c:c4:b1:f6:e3:
2f:ca:f4:57:c6:70:55:a2:42:f2:77:19:ed:af:bc:16:c3:e3:
68:af:5b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:36:44 2025 by rpki-client