Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc/beb65aaa-554e-3dad-9bca-51bf7fc1ee35.roa
File: beb65aaa-554e-3dad-9bca-51bf7fc1ee35.roa (raw, json)
Hash identifier: jjnhMw4MWCMlKbfwsxV+F4Ivm0B5c4bd6weRnQJhM6Y=
Subject key identifier: FD:DA:C8:83:E5:44:A4:A7:05:D2:16:44:EF:36:E1:DB:90:DD:FC:D4
Certificate issuer: /CN=1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc
Certificate serial: 010D0C9F432858487325B29BB750EAAD3D653180
Authority key identifier: EA:EB:95:40:D0:14:0A:23:A5:10:18:0E:E2:48:98:83:75:CD:BC:48
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc/beb65aaa-554e-3dad-9bca-51bf7fc1ee35.roa
Signing time: Mon 06 Jan 2025 02:00:40 +0000
ROA not before: Mon 06 Jan 2025 02:00:40 +0000
ROA not after: Sun 06 Apr 2025 01:00:40 +0000
asID: 174
IP address blocks: 170.75.160.0/20 maxlen: 20
172.81.176.0/21 maxlen: 21
2602:ffb6::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:73:25:b2:9b:b7:50:ea:ad:3d:65:31:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc
Validity
Not Before: Jan 6 02:00:40 2025 GMT
Not After : Apr 6 01:00:40 2025 GMT
Subject: CN=4449b838-ebe8-4b72-b1f8-25833cfda523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:dc:7c:f1:be:87:e2:3c:37:18:05:2e:85:d2:
08:2a:ec:dd:cf:8a:0b:e1:6f:67:2f:ab:65:28:4d:
86:aa:fd:19:18:85:cb:50:7f:2f:db:6f:39:f0:da:
06:c5:e5:df:7f:8f:9b:d4:fc:33:d1:f1:18:f9:24:
19:87:ca:90:4b:da:7a:ef:eb:6c:b3:d6:0f:82:b4:
f7:da:44:8f:9d:e2:25:c4:07:a1:57:f8:f1:2d:2c:
13:28:7a:98:29:af:d6:19:c8:35:c5:9c:d4:e6:cc:
72:3d:57:46:08:3c:23:6a:0b:de:2c:27:c3:14:0a:
2d:39:6d:48:ef:bf:78:69:45:bd:ae:95:7a:18:a6:
93:56:ee:4d:65:e4:70:df:be:4c:6a:52:94:d9:fd:
5a:36:c9:d0:aa:99:0f:47:bf:55:cf:91:92:b1:62:
f3:a3:ce:68:16:4d:5c:2b:4d:e5:5c:ef:fd:ab:fa:
4b:bf:d2:e0:a9:de:a2:c9:7d:87:6c:e2:f3:8a:56:
7d:ab:eb:2d:be:a2:61:48:11:6b:a5:f6:b0:ff:81:
e9:15:30:1c:93:b9:b3:40:30:00:09:cb:b4:a6:f4:
d6:19:ba:fd:77:98:75:00:03:01:26:01:83:78:de:
de:dd:7c:03:d9:7c:5b:f7:b6:40:df:44:58:85:96:
af:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:DA:C8:83:E5:44:A4:A7:05:D2:16:44:EF:36:E1:DB:90:DD:FC:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc/beb65aaa-554e-3dad-9bca-51bf7fc1ee35.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc.crl
X509v3 Authority Key Identifier:
keyid:EA:EB:95:40:D0:14:0A:23:A5:10:18:0E:E2:48:98:83:75:CD:BC:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc.cer
sbgp-ipAddrBlock: critical
IPv4:
170.75.160.0/20
172.81.176.0/21
IPv6:
2602:ffb6::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:5a:b0:44:f2:ad:e3:a4:e5:76:5d:04:fc:d1:f2:7e:8b:72:
f3:f5:06:8b:42:0d:de:3d:9c:22:dc:3d:5e:5e:41:ff:d9:54:
10:2a:7d:fe:53:f5:15:51:49:35:83:e9:89:9a:99:1b:3f:21:
67:ff:c5:e4:77:75:15:98:96:fb:f5:28:cb:48:dc:ce:67:c1:
8d:0f:30:fc:67:7c:52:f9:48:2b:53:6b:fb:18:42:77:93:ef:
2c:b0:20:97:71:24:0a:70:ce:44:4a:cf:73:ea:d2:28:a5:21:
00:e7:07:15:8d:a0:24:05:92:60:71:10:5c:4a:e5:1c:17:50:
ba:b7:e1:84:e8:bc:2f:f0:08:81:63:05:1e:c7:2f:2d:06:34:
39:9d:47:9f:86:eb:a3:f5:7f:db:ad:ca:40:9b:0c:3d:e0:17:
85:c8:61:6a:6e:92:22:0d:bb:ab:94:d7:7a:53:76:6e:9d:9b:
c2:4e:ea:18:c8:e6:37:07:73:6d:2f:20:6b:4b:27:a2:0f:a8:
a2:07:f8:e2:7a:44:dd:95:cc:9b:26:0b:8a:80:b8:66:92:90:
7e:19:df:81:af:9c:21:38:55:cf:cc:ad:cc:70:2f:db:5a:d4:
2a:b3:60:fa:54:a4:bf:6d:47:f0:c7:fd:6d:a5:56:45:d1:1a:
63:94:6a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:38:29 2025 by rpki-client