Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc/60c05e3f-1816-3cff-8958-8504b17b798d.roa
File: 60c05e3f-1816-3cff-8958-8504b17b798d.roa (raw, json)
Hash identifier: 5nEH2dm6UQp2pI6qmeRpUxs19zFzN/9ml9MtDtav1xk=
Subject key identifier: 9E:0C:DF:8E:70:19:99:DF:8F:D3:3C:B6:6D:56:1D:1F:CF:B4:89:36
Certificate issuer: /CN=1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc
Certificate serial: 010D0C9F432858487325B2B1605FFC1835AF6840
Authority key identifier: EA:EB:95:40:D0:14:0A:23:A5:10:18:0E:E2:48:98:83:75:CD:BC:48
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc/60c05e3f-1816-3cff-8958-8504b17b798d.roa
Signing time: Mon 06 Jan 2025 02:00:40 +0000
ROA not before: Mon 06 Jan 2025 02:00:40 +0000
ROA not after: Sun 06 Apr 2025 01:00:40 +0000
asID: 394745
IP address blocks: 170.75.160.0/20 maxlen: 20
172.81.176.0/21 maxlen: 21
2602:ffb6::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:73:25:b2:b1:60:5f:fc:18:35:af:68:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc
Validity
Not Before: Jan 6 02:00:40 2025 GMT
Not After : Apr 6 01:00:40 2025 GMT
Subject: CN=8c22a65d-85b0-4ed8-943b-91a349ab7a4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:3c:b5:3e:8a:2b:01:07:65:43:82:90:28:bf:
82:a2:5d:e0:93:63:a7:74:9c:e4:d1:76:45:15:db:
69:96:ef:28:9c:b3:e3:49:3c:32:cc:06:90:8d:67:
66:2b:e1:38:d8:bf:5c:58:0f:9e:63:d0:99:0d:17:
d2:db:e9:3d:25:99:d1:bd:c4:38:21:ca:01:83:d3:
cb:df:8c:31:ca:4e:3e:2b:8e:25:cb:2e:1c:e1:cf:
10:3c:16:49:db:0d:d4:ba:20:ef:0b:55:4f:47:77:
41:ca:01:c4:d4:d8:5e:f3:1a:b8:a3:e1:f4:cf:75:
75:31:3d:3f:3e:66:c3:20:13:83:10:be:0a:df:d4:
ae:7d:1c:76:fb:28:0c:d8:36:24:bb:49:6d:bb:eb:
95:66:37:a2:8c:9b:20:8d:2d:72:37:78:4c:2d:80:
fd:fa:7b:4b:df:d2:ba:48:79:c0:b5:75:3a:8a:5e:
0b:b5:c0:0d:56:a0:3f:c2:2c:d4:2a:a8:a2:3a:17:
0e:57:4c:5b:15:12:f5:8a:66:90:bc:db:86:ff:99:
e0:7f:4f:cb:fd:18:3c:f8:c3:ff:72:dc:1a:f8:e4:
26:d2:d8:70:ce:1d:3e:af:41:38:f5:38:b1:7e:18:
5f:bf:26:6a:e5:73:f1:c0:bc:b1:bb:a1:ac:cb:d2:
49:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:0C:DF:8E:70:19:99:DF:8F:D3:3C:B6:6D:56:1D:1F:CF:B4:89:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc/60c05e3f-1816-3cff-8958-8504b17b798d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc.crl
X509v3 Authority Key Identifier:
keyid:EA:EB:95:40:D0:14:0A:23:A5:10:18:0E:E2:48:98:83:75:CD:BC:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc.cer
sbgp-ipAddrBlock: critical
IPv4:
170.75.160.0/20
172.81.176.0/21
IPv6:
2602:ffb6::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:a5:b9:11:e9:f6:a2:9a:ae:ce:31:6e:19:83:53:69:fd:ad:
65:5b:5d:fd:f3:22:17:c4:e1:ef:a6:ad:dc:ee:48:b8:61:69:
3f:e7:f1:00:2a:e6:da:51:af:5a:74:f1:c1:ce:bb:c7:cb:fd:
f1:91:7f:f5:fb:d3:be:28:40:df:03:68:1a:24:ef:4b:3f:1f:
65:1c:e2:92:9b:03:6e:3d:8f:48:05:ff:19:e1:8d:81:7a:a1:
8e:3c:13:7a:f1:12:55:26:32:70:61:2b:df:9f:f2:4e:77:66:
01:6a:24:bf:22:cd:2d:b5:c3:61:4b:a6:6e:64:9b:4b:31:03:
ad:40:75:d3:96:02:56:5a:78:dc:9b:c7:84:9b:e3:41:52:c8:
30:1d:23:35:1d:1d:46:a1:37:1c:cb:61:b7:c1:b8:ec:01:7b:
e3:32:82:f3:16:62:a9:85:cd:82:39:84:11:36:c6:48:37:a0:
67:f4:14:ba:d5:9d:2d:ee:e6:7d:83:26:cf:c8:c1:c4:cb:7c:
2c:cb:57:de:35:05:81:af:ec:6f:5c:28:ac:63:ad:96:0b:d6:
a5:f7:6c:03:45:af:eb:66:cd:69:89:33:13:ed:b4:7b:b4:3c:
0a:dd:d8:c3:07:b4:69:5b:b8:1a:1e:57:80:c1:92:b6:53:64:
23:d6:e0:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:03:11 2025 by rpki-client