Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/628f1b90-aa4f-4bf4-9b08-6c2ba4a51659/efac39e6-7c8c-3202-8590-cf9dcc302c63.roa
File: efac39e6-7c8c-3202-8590-cf9dcc302c63.roa (raw, json)
Hash identifier: daiORwc8cGUP1n0YM48nyLqsfHqkwFYm1g26oBDqjzs=
Subject key identifier: 3E:2C:8B:4B:E0:09:76:36:97:2B:8C:8D:80:08:0E:F9:D7:EA:5E:04
Certificate issuer: /CN=628f1b90-aa4f-4bf4-9b08-6c2ba4a51659
Certificate serial: 010D0C9F4328584975445777FAE48AA64C217780
Authority key identifier: 82:8D:F8:35:71:30:E9:BC:84:5B:0B:50:59:E3:B8:25:D7:CA:0F:6A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/628f1b90-aa4f-4bf4-9b08-6c2ba4a51659.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/628f1b90-aa4f-4bf4-9b08-6c2ba4a51659/efac39e6-7c8c-3202-8590-cf9dcc302c63.roa
Signing time: Tue 08 Apr 2025 13:00:59 +0000
ROA not before: Tue 08 Apr 2025 13:00:59 +0000
ROA not after: Mon 07 Jul 2025 13:00:59 +0000
asID: 63023
IP address blocks: 23.157.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:75:44:57:77:fa:e4:8a:a6:4c:21:77:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=628f1b90-aa4f-4bf4-9b08-6c2ba4a51659
Validity
Not Before: Apr 8 13:00:59 2025 GMT
Not After : Jul 7 13:00:59 2025 GMT
Subject: CN=8bc62c7f-a694-46a3-b7a1-425cad46276f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ea:b8:a3:46:d0:e4:23:ff:27:33:36:31:32:
13:0c:e2:63:73:2a:0b:69:48:6b:4a:57:b7:a0:96:
ce:f7:53:81:f1:b1:ea:2a:b9:1e:00:e5:7a:97:02:
81:a1:54:07:64:4a:73:d3:be:b0:9e:26:90:69:f9:
bc:9b:6b:62:46:a1:cd:29:0c:64:c5:00:cf:08:fe:
c9:b0:8f:71:fb:84:bb:68:48:e5:5f:33:1e:85:01:
0a:c0:4f:92:62:3c:5d:59:1d:08:cd:21:6a:6d:d5:
f8:bb:76:3e:5c:11:49:ba:c0:5f:e2:07:5e:2e:21:
de:f4:bc:e5:5d:1c:cf:74:26:3c:29:a5:b0:02:67:
dd:3b:40:d0:58:24:94:f8:95:30:9a:7f:53:06:73:
93:40:8c:07:c1:46:7c:97:ad:67:4c:40:25:2a:33:
2e:1f:72:b7:6b:36:62:60:8e:3d:82:f3:1e:22:cc:
d5:64:c1:c2:c8:4f:68:b6:a2:81:12:ad:a5:49:1c:
b1:aa:a3:2d:1c:01:db:71:26:49:53:39:cb:20:38:
10:4c:2a:8e:2f:54:ed:00:f6:04:e9:92:04:53:5b:
fb:34:24:a0:97:ce:6a:40:3d:e1:9e:27:d3:09:a0:
0d:2e:64:a4:19:27:bf:69:6b:3e:bd:e0:46:e8:58:
87:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:2C:8B:4B:E0:09:76:36:97:2B:8C:8D:80:08:0E:F9:D7:EA:5E:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/628f1b90-aa4f-4bf4-9b08-6c2ba4a51659/efac39e6-7c8c-3202-8590-cf9dcc302c63.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/628f1b90-aa4f-4bf4-9b08-6c2ba4a51659/628f1b90-aa4f-4bf4-9b08-6c2ba4a51659.crl
X509v3 Authority Key Identifier:
keyid:82:8D:F8:35:71:30:E9:BC:84:5B:0B:50:59:E3:B8:25:D7:CA:0F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/628f1b90-aa4f-4bf4-9b08-6c2ba4a51659.cer
sbgp-ipAddrBlock: critical
IPv4:
23.157.88.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:d7:ab:65:a1:e2:ad:5b:2f:b2:82:d6:7f:2b:ac:85:f9:e7:
4c:de:e3:f0:76:b5:26:b0:28:1a:9d:cf:1f:0b:46:fd:5f:5f:
51:da:36:52:00:14:9e:18:01:5f:b3:d6:a9:9a:c5:7d:7f:65:
9c:ed:d2:43:fa:48:0e:78:4e:7e:1d:34:af:fe:37:60:d5:c2:
d9:e1:1e:de:bd:20:cd:87:b8:70:9c:b5:56:43:09:b0:55:7d:
be:60:93:dc:d7:47:f5:0c:b3:1c:ee:f4:68:4f:9b:d3:94:47:
84:6d:c3:c0:c5:2b:e0:75:0e:46:dc:a5:ed:7b:37:a0:d8:c5:
f6:d8:f4:7d:cf:04:8a:e5:fe:30:ad:b5:83:6e:70:09:5e:08:
f4:69:66:f0:8d:36:ad:43:8c:db:c4:f8:3e:96:a3:1d:66:27:
96:47:a9:91:37:e2:4c:79:fd:72:c1:a7:21:d6:22:47:5f:eb:
38:60:68:94:c8:0d:71:75:04:0a:fa:b5:0b:ed:82:71:a3:20:
d9:97:d4:a4:c3:c1:11:d9:51:53:96:58:20:26:e7:3a:b1:55:
1a:2b:94:80:38:76:4a:9e:bc:9d:1a:a7:0c:3f:9f:0f:b9:52:
df:bc:d3:22:32:2a:ef:d1:3e:5c:e1:28:1e:64:0f:11:0e:6c:
19:74:66:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:50 2025 by rpki-client on console.sobornost.net