Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/6b8167ae-4d0e-365f-8b41-54201852e793.roa
File: 6b8167ae-4d0e-365f-8b41-54201852e793.roa (raw, json)
Hash identifier: CgdHdpWoH7ygsMVMG8XC/VqkxiLcBKK8z2uKJT0X29Q=
Subject key identifier: 72:92:F0:37:68:FD:70:43:15:70:40:A8:81:4B:35:3A:D1:F0:98:3F
Certificate issuer: /CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279
Certificate serial: 010D0C9F4328584817F943DE7EE77A67981E72E0
Authority key identifier: E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/6b8167ae-4d0e-365f-8b41-54201852e793.roa
Signing time: Wed 04 Dec 2024 10:12:43 +0000
ROA not before: Wed 04 Dec 2024 10:12:43 +0000
ROA not after: Tue 04 Mar 2025 10:12:43 +0000
asID: 16509
IP address blocks: 170.225.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:17:f9:43:de:7e:e7:7a:67:98:1e:72:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279
Validity
Not Before: Dec 4 10:12:43 2024 GMT
Not After : Mar 4 10:12:43 2025 GMT
Subject: CN=9a22dba8-f264-4235-9acf-81f3e9025aec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6e:38:43:41:29:52:22:ee:65:04:66:f4:f8:
c7:f7:94:e2:06:97:01:41:81:f4:7d:f5:11:61:d6:
2b:50:15:f3:12:12:76:cf:38:d8:07:6f:ab:60:b3:
17:a8:97:df:f9:d4:41:9f:23:58:80:5a:ad:df:b9:
33:13:cb:8c:01:c8:f6:44:7b:fc:d1:e2:1c:fc:e1:
57:ef:e8:96:52:e8:b7:a8:bb:00:1f:ce:fd:c2:dd:
e1:6f:9a:9b:16:30:98:e0:27:a0:07:84:86:f3:e9:
00:59:1a:b4:03:41:f3:f1:98:a5:27:5b:58:20:bf:
4f:90:ff:ce:d5:e2:1b:a9:a7:08:6a:2e:1e:85:4f:
ad:88:dd:a6:f0:81:3c:5b:a8:0b:ee:19:9a:40:b2:
27:12:6c:1c:59:8f:fc:62:0b:00:88:4a:d8:b4:35:
b6:1a:e5:1c:67:04:a9:62:c4:7e:77:7c:b7:e3:50:
9e:fd:16:f9:15:00:ca:d9:48:12:1f:95:9b:24:c0:
77:8b:7d:87:39:43:fa:ca:c1:92:7e:dd:d7:4c:eb:
d6:92:14:94:8d:3e:1c:3d:f4:88:0b:9c:ad:af:8d:
5f:32:e9:2e:99:6e:6b:d3:a4:ad:d5:40:0d:25:e6:
da:37:ac:4c:8d:cc:c8:88:f7:43:9f:62:9f:2c:e9:
c2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:92:F0:37:68:FD:70:43:15:70:40:A8:81:4B:35:3A:D1:F0:98:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/6b8167ae-4d0e-365f-8b41-54201852e793.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl
X509v3 Authority Key Identifier:
keyid:E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer
sbgp-ipAddrBlock: critical
IPv4:
170.225.115.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:b3:67:23:4a:e9:06:54:74:ec:79:6f:4c:fb:36:10:a9:87:
9a:ef:f4:9a:76:43:39:1b:71:b3:8a:54:37:0c:ab:5b:76:f5:
7f:eb:56:25:cb:13:ce:45:99:48:2e:7b:e5:ad:b1:74:27:2d:
95:b0:cc:65:c2:17:37:3e:36:09:c5:2e:45:0e:23:a0:b1:59:
93:82:97:80:bc:15:ef:ed:6b:e2:80:3b:1c:77:f5:8c:4c:96:
62:fd:9d:03:d4:6c:0c:0d:11:24:e7:24:2a:4b:58:e9:2a:5e:
a8:b5:8f:81:2e:2f:8c:a0:4f:50:17:9b:ca:04:08:a8:b5:e0:
14:ba:54:6c:c1:5d:ac:93:2f:6f:6c:3a:a9:73:45:b0:57:92:
5b:88:ab:6f:b9:8a:a3:f2:c3:04:fb:03:38:42:28:01:a7:ba:
c0:22:06:ed:71:37:48:7f:03:97:1a:09:d6:0d:c1:66:3f:d6:
59:d4:1a:79:5e:6d:2b:92:27:8c:30:7c:ea:fc:1e:8d:99:a1:
82:a3:4f:74:90:7c:ee:d1:02:2a:7a:b6:b9:32:a2:1b:ca:f8:
8f:75:a5:f0:0e:e5:4b:fd:c2:87:98:a9:b0:d2:2c:3a:3e:d9:
44:98:e0:df:72:29:90:9e:f6:c6:1b:b7:b1:b3:61:56:3b:ad:
5d:ec:c9:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:06:04 2025 by rpki-client