Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/e1e69ec7-1c9b-33cf-8623-0cf33c6cf293.roa
File: e1e69ec7-1c9b-33cf-8623-0cf33c6cf293.roa (raw, json)
Hash identifier: Kppb+eVWx84yOlDgQZeO7gR8pIIZfUmoQ/FbjEQax0U=
Subject key identifier: 81:71:05:35:F6:63:EC:81:CC:2B:03:07:07:91:C1:39:35:2A:04:DC
Certificate issuer: /CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279
Certificate serial: 010D0C9F432858486C2B19490ED42D6E7C0EB5C0
Authority key identifier: E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/e1e69ec7-1c9b-33cf-8623-0cf33c6cf293.roa
Signing time: Fri 03 Jan 2025 14:00:51 +0000
ROA not before: Fri 03 Jan 2025 14:00:51 +0000
ROA not after: Thu 03 Apr 2025 13:00:51 +0000
asID: 14618
IP address blocks: 170.225.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6c:2b:19:49:0e:d4:2d:6e:7c:0e:b5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279
Validity
Not Before: Jan 3 14:00:51 2025 GMT
Not After : Apr 3 13:00:51 2025 GMT
Subject: CN=8599e82f-065b-45c7-ac14-677ca7e91473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:63:af:fd:c4:8d:f6:59:6e:41:8e:1c:ee:29:
3f:a1:18:b5:f8:df:80:80:d3:93:36:51:e5:f8:76:
50:89:cf:34:84:7b:59:65:a0:1c:c9:eb:32:07:1f:
eb:bd:be:6b:56:c0:01:3a:c8:bf:0d:69:f6:1b:f2:
fc:72:d1:ff:59:4d:ba:71:a5:01:3b:bb:f3:31:16:
5b:6d:06:4c:11:fe:e9:1d:c0:16:c6:6b:de:31:e8:
4f:08:db:9f:7e:fa:35:e8:ed:1e:43:ab:3b:b4:71:
69:07:13:fa:3c:c3:57:bd:f5:f8:da:3d:29:e3:96:
4b:2d:ff:c3:97:0d:51:ad:c4:5e:f8:5a:59:af:18:
8c:25:b3:66:1f:35:be:55:8a:f5:30:7f:9f:11:5f:
27:9e:4c:94:b1:67:d2:d1:17:9b:af:d0:21:37:79:
63:20:57:8c:45:20:64:81:96:8c:9a:db:18:a0:8e:
33:a1:64:38:ca:12:42:88:0c:56:49:cb:f7:66:1a:
09:44:f8:3e:67:ad:4c:c4:90:5a:29:61:61:25:f0:
99:18:f1:55:c4:29:13:e1:93:98:f4:a7:7f:b8:b9:
1c:03:89:f3:57:0f:0d:34:47:55:fc:db:a1:52:71:
77:ae:1c:74:08:aa:04:e2:b3:de:4d:4a:db:46:2c:
5d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:71:05:35:F6:63:EC:81:CC:2B:03:07:07:91:C1:39:35:2A:04:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/e1e69ec7-1c9b-33cf-8623-0cf33c6cf293.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl
X509v3 Authority Key Identifier:
keyid:E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer
sbgp-ipAddrBlock: critical
IPv4:
170.225.215.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:e1:21:eb:f0:6d:ae:d6:6a:ab:0a:b7:6a:ca:02:6d:ee:6f:
38:36:8d:38:d8:a0:6f:a0:7e:45:b0:84:04:44:ca:1c:66:ee:
ba:b6:eb:a0:26:8c:26:2b:d9:f6:26:44:82:d7:42:9a:2b:a6:
2d:d3:00:d2:a3:23:50:9c:57:04:76:6e:f7:81:82:ba:39:f6:
4d:48:ab:04:7c:99:dd:d4:c6:7c:d5:15:1e:86:5e:48:35:ce:
fc:13:54:b9:35:be:29:03:78:3e:8d:25:2f:a7:a6:48:d8:2b:
29:a0:93:08:87:22:62:1a:00:b8:63:50:c4:c4:cf:01:0d:5a:
d6:3a:62:f0:6f:16:5c:c4:3c:e0:a3:13:8e:40:fd:fc:32:df:
a9:63:b6:93:c8:fd:68:a6:ae:74:d6:64:4c:e7:87:10:c4:64:
7b:fe:91:d6:32:bd:86:2c:68:a9:29:91:f8:32:ff:b3:3a:73:
88:bc:39:58:49:0f:db:75:34:91:2b:b6:7b:1d:1c:82:08:1b:
c6:e7:71:66:04:4d:41:13:b4:28:c2:55:aa:b6:f8:aa:63:33:
ab:3e:9a:74:ae:35:38:4e:a7:71:0a:f5:c8:c8:7a:c0:9a:1b:
3e:1b:13:f9:62:ce:4f:16:00:e4:7b:8a:b3:aa:fc:47:15:a2:
5c:25:62:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:30:34 2025 by rpki-client