Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7/a38aeab0-66f0-37a8-9814-f482b29972b2.roa
File: a38aeab0-66f0-37a8-9814-f482b29972b2.roa (raw, json)
Hash identifier: uNLWSOH8yn6oIda5fLZy9eVZ7bqJ+ei43ZIZrixee/0=
Subject key identifier: 72:3D:23:50:88:D0:E8:5F:F8:63:1C:0D:AD:73:23:B5:DD:E7:F0:1C
Certificate issuer: /CN=d301c790-c1f4-4fd7-a939-1a8d2669b5b7
Certificate serial: 010D0C9F4328584871C074C2FA5CA053EB1F2700
Authority key identifier: 36:15:5C:31:E0:37:DC:51:97:C8:D9:8A:A4:EE:58:5A:78:16:C9:2C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7/a38aeab0-66f0-37a8-9814-f482b29972b2.roa
Signing time: Sun 05 Jan 2025 14:00:52 +0000
ROA not before: Sun 05 Jan 2025 14:00:52 +0000
ROA not after: Sat 05 Apr 2025 13:00:52 +0000
asID: 7018
IP address blocks: 170.205.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:71:c0:74:c2:fa:5c:a0:53:eb:1f:27:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d301c790-c1f4-4fd7-a939-1a8d2669b5b7
Validity
Not Before: Jan 5 14:00:52 2025 GMT
Not After : Apr 5 13:00:52 2025 GMT
Subject: CN=2d87a8ae-af00-4f65-ab47-eece6ee231a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:2c:f7:3d:b8:7d:fe:13:53:21:5d:49:b5:a5:
44:ae:45:b0:48:07:5f:04:7a:af:20:eb:79:0e:19:
e9:56:af:fd:75:12:74:9b:b8:b6:a7:a2:1c:29:dd:
c6:00:64:90:2d:00:15:69:92:75:c1:6f:03:db:a6:
9b:6b:24:27:08:8c:bf:68:5c:36:f5:d1:52:e2:89:
e5:15:6c:e5:51:5e:c1:14:58:33:0b:5e:fb:4e:ec:
4b:8b:cb:3c:e1:27:17:4a:03:ae:49:94:38:35:00:
38:7a:5f:e9:41:41:55:ee:b2:3c:0a:1e:bb:8f:47:
05:a1:ee:5d:19:50:c5:4c:53:cb:cf:b5:d1:50:92:
c3:11:57:74:7b:e8:75:4e:20:1b:0c:ee:17:6f:9f:
7f:a0:d6:3c:b3:ca:a3:3a:e4:ca:8a:65:d3:7c:4b:
a3:27:2c:9f:15:54:a7:c7:eb:40:3b:78:c8:7d:5a:
2a:ba:21:15:08:8f:46:0a:51:05:1b:1c:3f:25:c9:
f2:e3:55:96:58:6a:70:96:21:5b:4b:d6:cc:57:c3:
3e:69:c2:86:5d:c5:77:e7:24:2f:26:a5:ed:df:e9:
27:bf:c3:f0:fc:e0:97:9f:98:d1:33:c0:e1:03:41:
25:1c:9e:d1:84:8b:83:28:fd:80:c0:b9:fd:b3:1b:
45:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:3D:23:50:88:D0:E8:5F:F8:63:1C:0D:AD:73:23:B5:DD:E7:F0:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7/a38aeab0-66f0-37a8-9814-f482b29972b2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7/d301c790-c1f4-4fd7-a939-1a8d2669b5b7.crl
X509v3 Authority Key Identifier:
keyid:36:15:5C:31:E0:37:DC:51:97:C8:D9:8A:A4:EE:58:5A:78:16:C9:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7.cer
sbgp-ipAddrBlock: critical
IPv4:
170.205.35.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:90:4a:2a:9d:70:79:0a:fb:11:2f:27:db:92:42:57:5a:c9:
44:54:39:cd:c3:79:f0:d6:98:be:db:ca:41:18:67:2e:e2:ba:
ef:08:ad:b2:db:b8:1e:04:e6:bd:92:1f:ac:95:e7:87:b4:fd:
82:c2:c0:b5:7d:da:76:09:a9:2a:1c:ea:00:98:0e:18:2c:b5:
b9:61:7c:cc:71:3b:16:32:99:57:40:41:3f:f7:4f:11:b0:bb:
65:1b:6a:b5:14:74:a3:19:f3:86:2e:2e:8b:31:2f:70:13:04:
ce:e4:b8:94:5b:17:48:f3:e2:de:72:92:9c:53:85:8d:13:0a:
2a:0d:24:a4:fe:26:4b:ff:61:c7:de:46:d8:64:22:f4:99:32:
57:de:54:85:eb:c3:77:4d:7c:e8:09:7a:fa:be:cb:8a:16:1e:
b0:56:85:66:c0:a1:b3:d0:d4:26:9c:72:58:f1:c2:d1:46:07:
f6:a4:c6:03:9a:a0:45:5b:77:36:0b:9f:92:26:a3:5b:bb:2c:
cc:85:fb:94:e2:55:2e:dd:fa:12:af:99:a7:6e:5e:1c:1b:8a:
5b:44:dd:98:b8:34:7c:77:e7:db:ae:84:06:25:65:2b:27:93:
d9:77:f0:30:3e:5f:6a:0b:28:d4:5e:25:fa:45:89:65:12:e8:
8e:67:2b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:55:00 2025 by rpki-client