Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/1d07058c-91e1-3e8c-b855-66b4e81e6476.roa
File: 1d07058c-91e1-3e8c-b855-66b4e81e6476.roa (raw, json)
Hash identifier: s4DVD5PuQM2EIJIvfIeS9RqbzUSX888kLRI35XL8pdk=
Subject key identifier: 72:84:13:E8:EA:0F:D1:C2:04:1F:E0:4F:31:9D:50:D9:B2:7C:F6:18
Certificate issuer: /CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279
Certificate serial: 010D0C9F43285848748B1E692040F693E71AB900
Authority key identifier: E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/1d07058c-91e1-3e8c-b855-66b4e81e6476.roa
Signing time: Mon 06 Jan 2025 14:00:52 +0000
ROA not before: Mon 06 Jan 2025 14:00:52 +0000
ROA not after: Sun 06 Apr 2025 13:00:52 +0000
asID: 14618
IP address blocks: 170.225.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:74:8b:1e:69:20:40:f6:93:e7:1a:b9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279
Validity
Not Before: Jan 6 14:00:52 2025 GMT
Not After : Apr 6 13:00:52 2025 GMT
Subject: CN=0af48fdb-f78e-4ac9-b17f-c4c902d5019c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ec:60:b2:be:38:d4:e6:45:eb:8d:5d:90:c3:
14:64:a5:73:66:60:77:2f:2d:63:bf:62:14:f3:0b:
7f:68:06:57:04:79:7f:72:92:c5:c7:f9:b4:a9:84:
e7:c0:c4:1c:32:a1:7a:7c:e2:9a:9d:d7:58:bd:c4:
ab:76:d9:51:11:c5:1a:49:52:6e:f2:7c:26:5f:ae:
cb:85:d4:48:83:e0:1d:ab:00:d7:13:1a:67:f3:8f:
10:39:00:9d:f2:2e:9b:2d:38:f6:ab:80:ec:00:f0:
c9:45:f4:25:6b:da:09:95:fc:d6:ec:0f:ca:32:c5:
bf:c7:7b:68:fb:8d:26:73:ce:73:e9:d0:d6:eb:73:
42:07:28:fa:5f:89:d9:d3:9f:0a:89:31:39:80:06:
2c:d8:a4:84:59:da:13:e5:92:08:ef:bd:a0:e6:ff:
2c:c4:6a:70:75:1c:23:0b:11:d0:a7:f0:a8:90:78:
a6:89:17:02:54:ba:43:e6:63:8a:ff:7f:27:82:b5:
67:cf:fd:e8:fc:e6:05:b8:bf:1e:27:b7:c0:3b:62:
04:61:45:42:93:e0:35:38:46:cd:54:7c:3c:ad:0f:
f8:65:b6:27:62:da:d3:3e:54:a9:43:53:4a:67:08:
71:65:32:5e:7a:1f:40:ff:c1:21:c9:a0:44:49:2c:
0f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:84:13:E8:EA:0F:D1:C2:04:1F:E0:4F:31:9D:50:D9:B2:7C:F6:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/1d07058c-91e1-3e8c-b855-66b4e81e6476.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl
X509v3 Authority Key Identifier:
keyid:E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer
sbgp-ipAddrBlock: critical
IPv4:
170.225.217.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:18:0d:9a:a2:ce:dd:93:52:55:a6:4f:5d:23:27:33:4c:ac:
bc:fa:f9:80:3f:ac:70:2a:02:e1:eb:c2:25:c0:22:eb:d2:90:
c2:9f:92:d4:4e:25:e7:ae:ca:8c:2a:8f:85:18:87:dc:ff:23:
8e:76:16:da:dc:b3:c7:36:6f:d6:96:d9:8d:5c:72:cd:4e:53:
f7:a3:73:3a:90:4c:81:b5:c8:9a:21:f0:ad:f8:38:cd:00:47:
87:b8:5c:63:49:e2:8c:32:39:dc:f4:04:3b:b8:d0:f6:7e:fd:
26:02:d0:5a:c6:40:13:cc:46:cc:4e:7c:09:ca:25:7d:f0:e1:
40:3c:52:5f:55:eb:d5:ff:73:b1:91:5e:93:20:32:4e:91:77:
f0:56:0a:1a:40:61:4a:72:38:c9:c3:05:8c:43:ec:e9:96:9d:
3e:ba:30:11:42:cd:01:64:b9:2e:30:c7:6d:ae:40:68:d8:f0:
4b:c2:4e:43:71:43:f7:05:90:fc:72:8b:06:92:f4:c9:60:31:
22:8e:ec:60:82:b7:f3:1d:e7:ac:e9:0c:d7:21:e1:e7:c9:48:
73:53:45:75:07:3d:05:90:45:bc:4f:e3:51:9c:6a:fd:85:e7:
f1:0c:9a:33:86:da:e9:70:53:e1:6f:4d:f4:cf:46:29:a3:a3:
28:fc:16:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:40:02 2025 by rpki-client