Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/b57d231d-f688-30ee-aaa5-c8cba497e3f5.roa
File: b57d231d-f688-30ee-aaa5-c8cba497e3f5.roa (raw, json)
Hash identifier: IyeCQnCQtMhXV4MxpB8oq/lBTEX/VKRr34MQo8VTrQo=
Subject key identifier: E3:F2:6E:C1:A3:C0:97:95:92:D7:10:B8:B2:2D:A6:63:E5:18:18:23
Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Certificate serial: 010D0C9F4328584869606B6B9D33843D0231F900
Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/b57d231d-f688-30ee-aaa5-c8cba497e3f5.roa
Signing time: Thu 02 Jan 2025 14:00:52 +0000
ROA not before: Thu 02 Jan 2025 14:00:52 +0000
ROA not after: Wed 02 Apr 2025 13:00:52 +0000
asID: 21859
IP address blocks: 157.185.184.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:69:60:6b:6b:9d:33:84:3d:02:31:f9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Validity
Not Before: Jan 2 14:00:52 2025 GMT
Not After : Apr 2 13:00:52 2025 GMT
Subject: CN=c9742ded-8108-435c-8944-f6dfdce575b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f4:a6:03:9f:4a:39:66:4f:3d:0f:2c:1a:3a:
3c:57:ad:e1:e7:44:df:10:02:7c:0d:32:de:3b:e6:
a2:e2:21:4a:49:7b:db:38:e3:f1:50:96:51:0c:b8:
7c:c3:98:c5:f2:d4:67:ed:41:19:f3:9d:53:39:95:
eb:ca:ac:8e:e7:9c:63:a6:af:a3:41:32:b3:69:9c:
14:0a:a9:6d:19:76:3e:5b:1a:ed:fd:e9:61:f8:ba:
9e:0d:d9:eb:bf:71:83:e2:26:c2:0d:53:46:58:6d:
7f:0b:96:2b:65:87:0f:da:ab:09:44:d5:a8:7c:9a:
6f:61:d6:0f:ce:de:93:28:d4:7d:8e:aa:8a:c2:c0:
1a:a1:03:80:0a:d0:46:ec:f6:57:97:20:2f:c0:32:
27:90:44:a6:9d:42:c6:8e:bf:0a:7c:3e:06:98:a2:
11:be:a1:ac:40:c3:d8:00:0c:91:17:7d:be:87:4b:
ad:ca:ac:f5:e6:ef:bf:eb:2a:f8:76:07:23:c3:d1:
f1:cf:98:a9:f7:6e:9b:d9:12:22:9e:6d:77:df:30:
a9:32:57:d3:86:c6:43:38:bc:3b:9e:f4:71:99:02:
4c:c4:c3:f5:7c:3f:2b:6b:b5:81:c5:87:15:53:01:
6e:56:76:0f:b9:1a:c0:06:f3:54:0e:ba:c7:85:e6:
96:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:F2:6E:C1:A3:C0:97:95:92:D7:10:B8:B2:2D:A6:63:E5:18:18:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/b57d231d-f688-30ee-aaa5-c8cba497e3f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl
X509v3 Authority Key Identifier:
keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
sbgp-ipAddrBlock: critical
IPv4:
157.185.184.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:12:1c:91:2f:7f:7b:fe:1d:28:e7:55:10:2f:cc:a1:c4:d5:
d9:e8:b2:7f:4c:67:72:d0:a9:7f:e7:2a:c9:b3:b0:08:f1:3e:
a6:b4:d6:c3:73:83:af:13:df:e3:ae:4c:d6:00:f1:b5:20:d7:
42:51:2a:64:2f:36:83:94:39:65:ec:83:ef:bc:4c:5f:93:fa:
56:f3:b9:d1:b8:ea:5f:a2:52:d2:04:9f:5c:30:20:30:7f:d0:
05:08:61:27:92:0f:bd:75:78:44:73:89:fd:52:c0:c1:33:40:
8a:bc:73:3b:4f:e9:ea:ef:88:ff:8c:83:24:3b:e5:f7:16:dd:
9c:54:88:ca:cf:de:c2:ec:ec:2d:7f:f9:f7:19:a8:fa:2e:81:
a0:62:bc:49:83:ca:bc:4e:22:8a:ff:30:4a:48:1f:56:34:21:
a9:5f:dd:c2:8c:8c:e1:21:8d:9b:c9:1a:e8:31:b0:f1:9a:fe:
92:02:db:a2:39:9b:42:b7:1a:58:eb:f5:05:37:e2:5a:48:1f:
88:d9:1b:84:af:15:e9:a2:2d:f4:d0:b9:81:c7:94:e1:97:34:
7c:c7:ca:17:9b:71:d8:c5:d6:7b:78:b8:67:b1:ba:4d:95:97:
94:06:e4:06:ba:0f:0e:aa:46:62:32:50:9b:36:9e:c8:71:fa:
ab:52:ad:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:42:40 2025 by rpki-client