Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/40452641-7ffb-33fc-9039-cf8af04c5a33.roa
File: 40452641-7ffb-33fc-9039-cf8af04c5a33.roa (raw, json)
Hash identifier: d60MBecsDG8vNVQ4NWT+7cZaRe+lsn+oc5T8z7N6A40=
Subject key identifier: 5B:4D:3D:3F:9A:5F:C5:18:91:E4:A9:E2:3B:45:6D:0F:82:9E:20:68
Certificate issuer: /CN=f7798abb-711d-4f10-bc46-bceed055e1fa
Certificate serial: 010D0C9F4328584851A57CF94A1B0734F6721920
Authority key identifier: CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/40452641-7ffb-33fc-9039-cf8af04c5a33.roa
Signing time: Wed 25 Dec 2024 02:00:38 +0000
ROA not before: Wed 25 Dec 2024 02:00:38 +0000
ROA not after: Tue 25 Mar 2025 01:00:38 +0000
asID: 206216
IP address blocks: 170.205.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:51:a5:7c:f9:4a:1b:07:34:f6:72:19:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7798abb-711d-4f10-bc46-bceed055e1fa
Validity
Not Before: Dec 25 02:00:38 2024 GMT
Not After : Mar 25 01:00:38 2025 GMT
Subject: CN=43fe5164-87e7-49f8-a8fb-792cc9ddda2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:76:4a:81:63:8e:c2:a4:9c:d3:ee:14:51:c9:
6b:75:87:a3:0f:cd:fa:39:55:73:c7:36:09:b8:df:
b1:fa:ea:8a:8f:d4:fc:08:66:ed:81:7a:e1:de:b7:
01:43:62:c3:aa:14:41:31:45:4b:bb:9c:92:71:2d:
ff:22:ac:09:b1:28:33:b3:7e:f5:37:a2:74:d3:7e:
cd:80:4d:38:28:30:a5:1a:90:2f:83:a5:27:08:04:
57:84:6d:24:fe:c8:a9:60:13:38:1b:f6:f3:99:14:
69:be:a9:49:ce:b6:8d:d4:a2:84:cc:65:87:88:f5:
63:86:ce:03:f5:83:05:3c:63:fa:59:59:40:5a:a0:
0d:bf:fd:5c:1a:6f:a2:7d:33:7a:73:5a:39:9c:e6:
f4:00:26:d2:67:02:be:e6:b6:eb:09:91:49:5f:a9:
b5:05:ed:21:82:d9:9a:4a:a1:3c:f7:2f:4a:63:7b:
1b:fc:6e:c7:23:ab:56:e2:ed:58:59:bc:08:bc:d2:
25:52:2d:bb:45:64:7a:4d:82:ee:15:59:9e:8f:6c:
8a:5a:98:e7:59:52:d5:a7:b1:1a:4f:3f:07:e2:32:
dc:c3:ef:eb:32:fd:f5:11:41:a3:95:d9:6e:86:8e:
61:15:7c:cc:5d:af:a6:bb:6c:0d:79:9e:c0:80:f8:
59:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:4D:3D:3F:9A:5F:C5:18:91:E4:A9:E2:3B:45:6D:0F:82:9E:20:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/40452641-7ffb-33fc-9039-cf8af04c5a33.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.crl
X509v3 Authority Key Identifier:
keyid:CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
sbgp-ipAddrBlock: critical
IPv4:
170.205.29.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
cc:6d:0a:bd:30:43:7a:97:04:45:51:ae:cc:6a:c6:21:7a:c8:
ea:44:34:ac:2f:e3:fe:fc:eb:e5:bb:01:5a:fe:01:c7:5a:4b:
3d:d7:19:9e:cf:56:f9:d2:eb:f4:cc:1c:ec:0a:d0:70:5a:74:
ce:85:b4:b7:19:f4:4f:41:86:b5:5c:8f:eb:55:c8:9f:aa:5a:
af:b7:9e:d9:ad:3d:65:02:2a:5b:f3:c6:f6:76:ce:94:cc:75:
c6:8f:12:ee:8d:de:3b:37:63:94:57:5d:10:c4:79:8c:da:99:
e2:86:ff:2f:f8:0b:32:a8:2b:f6:4d:1b:99:f7:c2:f4:a8:b5:
b2:13:9d:f2:02:32:09:8a:49:32:eb:12:a6:57:79:ec:98:63:
d4:d7:75:1d:b4:e4:f3:da:e6:5b:a7:38:24:5b:a5:48:54:ac:
3f:82:b2:cf:6a:5a:72:a1:49:6d:a2:6e:42:37:95:9f:5a:26:
e8:93:38:f6:36:0e:37:85:6e:7f:e5:a2:cb:0f:ce:4f:65:63:
94:0f:41:c0:32:b4:8b:66:9a:29:06:00:b9:63:e5:92:1f:11:
c8:7a:fd:ad:26:fe:14:a6:3c:a3:fc:27:05:4e:e0:1d:eb:e9:
b8:e1:9f:cf:f6:57:f2:17:0a:45:f4:ce:51:19:24:64:85:48:
d6:c6:9d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:40:05 2025 by rpki-client