Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/970fb05c-2346-393b-a7b7-10ed7f9bd285.roa
File: 970fb05c-2346-393b-a7b7-10ed7f9bd285.roa (raw, json)
Hash identifier: DKsJS778bSBQEmeTAN2DoSlTAlXrYeaz+jHgLqNHRpk=
Subject key identifier: 76:AF:BF:56:81:51:D7:11:BB:7B:CA:2D:E0:3B:62:C7:74:4E:AA:46
Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial: 010D0C9F43285847F584F69333B8509290EE7100
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/970fb05c-2346-393b-a7b7-10ed7f9bd285.roa
Signing time: Fri 22 Nov 2024 02:00:40 +0000
ROA not before: Fri 22 Nov 2024 02:00:40 +0000
ROA not after: Thu 20 Feb 2025 02:00:40 +0000
asID: 16509
IP address blocks: 170.85.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f5:84:f6:93:33:b8:50:92:90:ee:71:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Validity
Not Before: Nov 22 02:00:40 2024 GMT
Not After : Feb 20 02:00:40 2025 GMT
Subject: CN=7e4411f6-05bb-4eba-8705-75e4ca755e47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2e:d9:e9:f3:cc:04:7b:40:8d:88:5a:6a:48:
d2:f7:6d:a2:a2:f2:46:3e:69:7d:6c:49:d0:b8:b8:
00:71:84:8a:dd:83:30:24:42:e2:c5:a5:a9:ec:91:
01:37:e4:83:d5:da:b4:f9:82:54:cb:20:e6:3d:b7:
a1:9e:cd:36:8c:fe:9d:74:df:07:64:17:15:8a:e0:
be:2b:ba:44:00:8a:69:b7:24:84:e6:04:d5:6a:74:
1a:4d:0b:ff:85:4d:18:a4:f0:54:bb:05:1a:b4:64:
3b:ae:3d:a0:0f:27:1a:27:1c:5a:d0:5e:c9:06:e9:
aa:d8:e8:db:13:db:87:e1:b6:41:a5:c8:53:a6:63:
b0:f1:97:f1:8e:9d:70:4c:c7:7a:76:59:fc:be:65:
1a:42:17:08:3b:c7:50:fa:04:4a:29:d7:e6:a5:3e:
d2:86:39:3c:51:24:32:37:4b:d4:49:fb:6f:a5:cc:
4a:bf:d5:0a:57:d8:97:03:53:34:00:15:fa:a2:7e:
07:38:de:d9:01:99:bd:f9:54:34:cb:99:84:20:76:
7c:62:05:3a:42:bf:48:7c:15:83:25:ea:3d:3b:e2:
d2:47:c4:e7:8d:99:af:dd:f2:3f:b3:47:03:1e:fe:
48:ab:45:5f:0b:4f:1d:85:b0:f0:67:e2:4e:da:2e:
3c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:AF:BF:56:81:51:D7:11:BB:7B:CA:2D:E0:3B:62:C7:74:4E:AA:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/970fb05c-2346-393b-a7b7-10ed7f9bd285.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
X509v3 Authority Key Identifier:
keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
sbgp-ipAddrBlock: critical
IPv4:
170.85.120.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:25:09:e5:3f:fb:02:1f:12:32:00:9a:d4:70:d6:b0:23:d0:
67:75:9b:d6:e9:a9:dd:b6:f5:cd:e1:65:57:cc:1c:15:36:82:
55:17:89:f2:d2:76:a6:27:9f:79:7f:28:84:ba:70:57:fe:61:
80:cc:e3:47:ea:8c:ba:cc:a3:a4:4d:05:31:7b:00:de:be:82:
00:ca:2b:fa:f2:23:25:eb:ce:e4:79:64:7c:51:37:75:95:42:
5f:17:38:e1:ed:75:35:ee:be:94:fc:90:91:97:cb:05:d7:f6:
34:f0:d0:c2:c9:fe:8c:55:95:93:67:81:4c:34:05:64:36:b8:
aa:a6:af:83:97:1c:a2:15:c4:8b:58:b8:94:11:cf:fb:70:53:
99:29:bc:53:9d:45:89:54:a4:b2:83:35:26:c8:e2:41:cd:29:
ac:e5:9c:62:b6:1f:99:b9:c6:55:a8:cd:e9:e9:5b:7f:c8:84:
2c:9f:13:23:5c:b8:11:09:33:a4:84:71:25:da:61:f0:0e:58:
25:8a:1b:fa:96:23:37:8c:56:ef:cc:d1:60:43:f3:85:9d:50:
b7:04:ee:d8:f3:3c:df:f1:21:4c:08:51:4e:89:d1:12:4a:9f:
fc:3a:5c:24:09:20:9e:e9:eb:ec:ee:35:3b:13:09:ec:a1:fc:
e5:24:48:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:39:12 2025 by rpki-client