Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee/e287f98a-b890-3428-ba99-f795e90bb559.roa
File: e287f98a-b890-3428-ba99-f795e90bb559.roa (raw, json)
Hash identifier: nR4XE9KIVy2drBh12JGk14WqOxxDxFbsoy9mnrq6idI=
Subject key identifier: 70:68:87:2D:2C:04:FA:51:9F:C6:D2:A5:B9:03:6A:07:3E:77:FF:20
Certificate issuer: /CN=cd00198f-a530-490c-8ef5-5c31ac9b88ee
Certificate serial: 010D0C9F432858489FD09A6943E6447F55D75200
Authority key identifier: EE:B2:E7:54:17:4E:31:C9:7A:0D:15:E5:72:45:5D:67:1D:F3:92:BF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee/e287f98a-b890-3428-ba99-f795e90bb559.roa
Signing time: Wed 22 Jan 2025 02:00:39 +0000
ROA not before: Wed 22 Jan 2025 02:00:39 +0000
ROA not after: Tue 22 Apr 2025 01:00:39 +0000
asID: 18540
IP address blocks: 170.62.84.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9f:d0:9a:69:43:e6:44:7f:55:d7:52:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd00198f-a530-490c-8ef5-5c31ac9b88ee
Validity
Not Before: Jan 22 02:00:39 2025 GMT
Not After : Apr 22 01:00:39 2025 GMT
Subject: CN=eb72bbe0-29d1-42c4-9ad4-73eb18a6929d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:32:7f:bf:30:f8:cf:42:aa:96:ce:4b:24:04:
85:c2:bd:e5:03:8e:17:30:d4:ae:9f:27:c7:ce:f7:
c7:67:36:55:22:42:d3:4c:c8:32:d3:19:de:c3:88:
b5:bf:1a:46:a0:6d:eb:63:25:32:c5:fb:ba:49:ac:
73:30:4d:56:3d:c4:c8:33:7d:da:43:d4:a5:cf:9d:
8c:cc:6a:49:bf:cd:30:95:dd:fc:bd:1d:62:b8:01:
2c:31:98:33:a1:f8:f3:a8:62:2e:a6:69:52:43:54:
3a:0d:a1:7a:23:42:c0:d0:ae:73:29:4e:28:cb:5f:
c5:c4:ba:56:34:cc:2a:31:41:47:7b:7f:50:1a:41:
a4:91:8d:68:14:40:0e:86:39:e7:84:1c:94:8b:3b:
c4:07:65:48:61:15:72:6a:77:ec:2f:6b:bb:fd:26:
20:5d:22:a3:3e:f7:8f:7d:f2:27:be:46:1f:43:8c:
8c:21:0b:bd:87:ac:74:74:ff:f1:00:8f:e6:dc:b4:
c0:72:39:5e:b1:2e:11:1f:bf:9e:3e:0d:99:2a:30:
b3:24:dd:87:98:da:5b:06:84:34:5a:22:f6:41:9a:
6c:45:71:86:93:f2:dd:b3:d8:92:7a:ef:1a:16:2e:
f5:b7:90:71:d8:e2:c1:76:ef:b0:7c:47:5b:7e:94:
9d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:68:87:2D:2C:04:FA:51:9F:C6:D2:A5:B9:03:6A:07:3E:77:FF:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee/e287f98a-b890-3428-ba99-f795e90bb559.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee/cd00198f-a530-490c-8ef5-5c31ac9b88ee.crl
X509v3 Authority Key Identifier:
keyid:EE:B2:E7:54:17:4E:31:C9:7A:0D:15:E5:72:45:5D:67:1D:F3:92:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee.cer
sbgp-ipAddrBlock: critical
IPv4:
170.62.84.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:87:44:6f:72:a2:f5:3c:7d:d4:dc:6c:0a:00:1a:0a:4f:c7:
00:df:b9:e2:ac:6c:21:e9:d5:87:10:c8:4e:0a:19:32:84:88:
19:e3:40:c5:39:e1:a0:ce:b5:d1:b2:97:7c:d3:12:49:6f:c2:
31:4a:bc:9b:2a:a2:eb:86:6c:95:3f:dd:96:80:f3:d3:b1:e7:
98:fc:64:a2:b6:1a:07:40:60:dd:00:eb:09:b8:29:cc:18:dd:
38:71:50:54:f3:f0:ec:88:e2:0c:37:09:5a:cb:d3:a4:4a:12:
59:45:01:da:c2:38:2e:22:25:40:d1:99:85:48:51:d4:12:fb:
30:4b:a2:e0:ba:82:6a:43:c2:2a:d6:82:6f:9b:7c:0a:c2:34:
06:0a:bd:0a:9c:bd:78:83:f3:2d:14:c6:b4:d6:cf:e7:22:4b:
c2:f4:75:47:e8:d8:ff:30:0d:c1:f6:2a:8e:35:0a:1b:f7:fe:
25:dc:ef:c9:6b:e1:73:4d:2b:e7:94:88:e5:c7:5e:fa:d2:ed:
dd:fa:ef:29:d1:5c:d9:c2:23:c0:16:96:ee:7b:d0:03:18:6c:
56:50:57:ad:a9:2a:6a:16:fc:51:ca:e8:ef:f8:d0:2b:5a:32:
ea:0e:f3:4c:30:88:02:e3:8c:96:99:c8:a4:e7:eb:87:0f:90:
0d:45:2a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:28:55 2025 by rpki-client