Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/727f5fcf-eede-43ba-8c8d-c9fe87bf2802/3220d0a5-cdd5-3f87-b685-9a7a62711425.roa
File: 3220d0a5-cdd5-3f87-b685-9a7a62711425.roa (raw, json)
Hash identifier: iVLX2BGDSqMhaoOCn1YYXhQKjWZVhVA7JgrYQY2JPmw=
Subject key identifier: FA:FF:21:72:A1:C7:F5:C1:F6:67:08:F5:0C:09:02:EA:17:DC:94:71
Certificate issuer: /CN=727f5fcf-eede-43ba-8c8d-c9fe87bf2802
Certificate serial: 010D0C9F43285848345581C30834C3AE25609900
Authority key identifier: 1F:56:7E:60:8B:2E:9E:66:63:58:E6:0E:CA:F8:23:A7:C2:7D:82:57
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/727f5fcf-eede-43ba-8c8d-c9fe87bf2802.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/727f5fcf-eede-43ba-8c8d-c9fe87bf2802/3220d0a5-cdd5-3f87-b685-9a7a62711425.roa
Signing time: Sat 14 Dec 2024 14:00:52 +0000
ROA not before: Sat 14 Dec 2024 14:00:52 +0000
ROA not after: Fri 14 Mar 2025 13:00:52 +0000
asID: 400302
IP address blocks: 170.205.60.0/22 maxlen: 22
170.205.60.0/23 maxlen: 23
170.205.60.0/24 maxlen: 24
170.205.61.0/24 maxlen: 24
170.205.62.0/23 maxlen: 23
170.205.62.0/24 maxlen: 24
170.205.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:34:55:81:c3:08:34:c3:ae:25:60:99:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=727f5fcf-eede-43ba-8c8d-c9fe87bf2802
Validity
Not Before: Dec 14 14:00:52 2024 GMT
Not After : Mar 14 13:00:52 2025 GMT
Subject: CN=be4fdad6-3f55-4173-a53d-a742c97df632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8a:fa:c1:e0:63:24:10:ed:54:5d:68:28:3f:
3a:33:65:72:5c:7e:f2:8c:b2:e5:ce:0f:bd:14:ac:
87:ee:e2:0a:38:d0:1d:92:b1:61:1d:ac:f8:cd:24:
94:43:1f:11:5d:26:34:fe:db:2f:55:9d:1f:9f:83:
6f:28:61:5e:64:72:7a:e6:ac:27:71:eb:20:2c:67:
ee:f9:c9:7e:e0:f4:9c:a0:b6:98:1b:d0:2c:33:3e:
3a:d0:88:7f:26:cc:f4:c4:45:e2:35:66:48:16:bb:
2d:6b:7c:f2:0a:a8:ce:73:a6:cd:a9:8a:bb:8c:aa:
4f:05:24:fd:a4:ac:e4:88:88:c7:23:70:b3:c5:59:
20:f6:94:04:ee:8c:90:c8:f0:ae:4f:d4:4e:71:2b:
62:99:ac:ff:1e:92:f5:fa:dc:de:9e:9d:be:fd:be:
77:07:df:05:d0:ef:fd:77:03:de:9e:5f:12:e8:96:
3d:d8:3d:fd:90:59:08:58:a3:6e:ba:0c:80:25:06:
82:97:02:82:e5:9d:e5:e1:80:19:c3:39:d9:d5:37:
9c:b2:53:4b:d8:95:46:ea:e9:c6:79:16:fe:9b:9c:
8d:8f:cd:bc:2c:6d:bb:ed:47:d7:1b:ac:7b:f3:11:
62:49:86:59:19:6b:4a:8a:a8:79:21:32:55:67:ef:
64:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:FF:21:72:A1:C7:F5:C1:F6:67:08:F5:0C:09:02:EA:17:DC:94:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/727f5fcf-eede-43ba-8c8d-c9fe87bf2802/3220d0a5-cdd5-3f87-b685-9a7a62711425.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/727f5fcf-eede-43ba-8c8d-c9fe87bf2802/727f5fcf-eede-43ba-8c8d-c9fe87bf2802.crl
X509v3 Authority Key Identifier:
keyid:1F:56:7E:60:8B:2E:9E:66:63:58:E6:0E:CA:F8:23:A7:C2:7D:82:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/727f5fcf-eede-43ba-8c8d-c9fe87bf2802.cer
sbgp-ipAddrBlock: critical
IPv4:
170.205.60.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:11:1e:8f:66:b9:fd:3d:e3:b0:3e:cb:01:5c:2a:82:a6:3a:
ae:58:15:6e:28:dd:13:99:65:b5:47:f7:57:aa:5e:b7:8e:27:
3d:ac:53:c7:40:f9:74:42:c5:46:04:26:bd:c7:e7:be:37:5d:
e6:0b:2b:f3:4e:d6:34:39:1a:b5:3f:ff:07:1e:85:a4:36:32:
46:be:0b:e4:2f:05:dd:4a:ab:2c:13:c0:85:2f:2c:85:ab:c7:
f4:76:25:13:09:7f:ba:b4:e9:d9:29:16:cf:9f:8b:d1:ad:ae:
9e:04:a0:9c:85:01:26:7e:40:18:6e:bd:c9:7a:2e:77:73:50:
a6:88:4d:88:a9:06:54:cf:d7:74:ab:7e:24:1f:fc:3c:ee:0e:
f5:97:f0:2b:a0:17:5c:f6:ff:98:70:ba:b6:e9:8b:83:b4:7b:
a1:88:20:be:2d:a0:8d:9a:d3:a7:0a:b0:0e:32:7a:5d:8d:f9:
60:f7:87:24:bd:d5:f2:77:50:37:39:db:76:86:e1:d8:0f:5a:
55:c9:35:30:e7:ab:8e:de:b7:61:a6:e8:d5:ec:1b:3b:9f:38:
8c:be:15:7c:18:ab:fa:b0:ab:4a:61:b3:d7:51:34:e2:5f:37:
84:b4:e2:9e:8e:39:dc:16:4c:e9:69:30:bc:5b:5a:19:ce:5d:
eb:6f:90:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 14:10:43 2025 by rpki-client