Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/31663e0d-961a-43ac-8a01-d43efc01bea0/60b0efca-2ff2-35d3-bccd-0cd0eb1fa0b0.roa
File: 60b0efca-2ff2-35d3-bccd-0cd0eb1fa0b0.roa (raw, json)
Hash identifier: xYg/+1JBTFhQnRQfqmr/IEvwcxGNrzBQcgKq8CYiZrI=
Subject key identifier: 7E:54:81:5D:69:EF:37:A8:98:F4:A5:B7:B3:97:1F:99:94:7F:06:2F
Certificate issuer: /CN=31663e0d-961a-43ac-8a01-d43efc01bea0
Certificate serial: 010D0C9F432858483E1AB6042CF89833003E6940
Authority key identifier: 7B:F3:59:98:1D:7C:59:F4:71:50:EF:F2:7C:BA:A7:98:14:DA:40:80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/31663e0d-961a-43ac-8a01-d43efc01bea0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/31663e0d-961a-43ac-8a01-d43efc01bea0/60b0efca-2ff2-35d3-bccd-0cd0eb1fa0b0.roa
Signing time: Wed 18 Dec 2024 02:00:39 +0000
ROA not before: Wed 18 Dec 2024 02:00:39 +0000
ROA not after: Tue 18 Mar 2025 01:00:39 +0000
asID: 395555
IP address blocks: 170.10.64.0/22 maxlen: 24
170.10.72.0/24 maxlen: 24
170.10.84.0/22 maxlen: 24
209.206.64.0/19 maxlen: 24
2604:4c40::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3e:1a:b6:04:2c:f8:98:33:00:3e:69:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31663e0d-961a-43ac-8a01-d43efc01bea0
Validity
Not Before: Dec 18 02:00:39 2024 GMT
Not After : Mar 18 01:00:39 2025 GMT
Subject: CN=e8c79ab8-8157-48d4-8b06-fed988e6a70c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f8:67:6e:a1:50:c6:b5:68:00:29:7b:00:04:
44:fe:4d:95:98:e9:0e:ed:e3:dd:8a:71:3d:98:75:
9b:c1:47:2a:fb:98:d5:ad:6c:4a:12:e5:6d:f3:36:
5b:ac:21:99:c8:1a:a0:61:c9:f6:5d:16:4f:b7:40:
46:ec:75:77:c6:4c:95:d1:64:33:4b:cd:00:ef:fc:
46:9f:1d:a4:96:b4:ff:d9:98:f7:10:c0:58:a3:04:
6a:7a:26:8f:b0:6d:30:79:6e:0d:d9:80:8f:83:15:
3a:15:8c:0e:49:36:75:44:77:56:3b:5c:0a:4b:fd:
4f:39:21:62:3c:5e:6d:ba:66:fc:8e:97:60:db:8d:
91:eb:ae:85:43:6b:78:3b:fe:e8:2d:87:90:c7:9d:
ff:f6:61:e1:c7:fa:a2:7a:14:77:0d:ed:11:67:f1:
4f:44:87:91:ed:ce:b6:f3:c5:aa:21:6b:40:97:bc:
43:6f:b1:89:0d:cc:a4:6e:d1:1e:7f:ad:0c:39:25:
cd:9a:ce:c0:7f:16:68:1d:2c:61:68:62:5b:62:22:
c2:ea:b4:17:6b:0b:4e:f1:c4:5c:2f:33:db:f5:4a:
96:82:65:e5:f8:0a:d5:68:fd:b2:0a:b1:02:0f:a6:
c7:d2:cf:7a:62:28:06:ba:3b:e8:94:d4:42:40:eb:
5c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:54:81:5D:69:EF:37:A8:98:F4:A5:B7:B3:97:1F:99:94:7F:06:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/31663e0d-961a-43ac-8a01-d43efc01bea0/60b0efca-2ff2-35d3-bccd-0cd0eb1fa0b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/31663e0d-961a-43ac-8a01-d43efc01bea0/31663e0d-961a-43ac-8a01-d43efc01bea0.crl
X509v3 Authority Key Identifier:
keyid:7B:F3:59:98:1D:7C:59:F4:71:50:EF:F2:7C:BA:A7:98:14:DA:40:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/31663e0d-961a-43ac-8a01-d43efc01bea0.cer
sbgp-ipAddrBlock: critical
IPv4:
170.10.64.0/22
170.10.72.0/24
170.10.84.0/22
209.206.64.0/19
IPv6:
2604:4c40::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:ff:a7:2f:f6:6a:b2:be:d0:e1:f2:f1:91:c2:96:4c:dd:e0:
96:9a:e9:d2:92:b7:da:e8:6d:ad:82:3b:27:44:af:e3:41:da:
7c:d2:b4:a6:9c:23:cd:ae:0b:71:9b:03:0e:3c:3d:82:72:aa:
69:de:28:d1:af:3b:1e:36:3f:5c:13:ad:5e:ab:43:d7:41:a3:
41:cb:d5:17:12:05:39:f4:8a:7b:4c:d7:cd:19:07:cd:ac:40:
63:bd:bd:76:79:65:4e:72:f7:9b:ec:7d:50:9a:3b:4d:8f:ba:
08:df:08:0d:9a:df:77:c8:0e:58:7a:ac:ed:5c:88:c6:84:56:
7a:b3:04:3e:6d:22:20:12:8f:72:f1:c9:00:b2:50:39:d0:5b:
30:6d:3a:83:47:97:fd:9c:bf:04:33:e6:4a:05:76:24:1d:51:
cf:9f:25:c9:e7:82:7d:d8:23:c3:fb:7e:ae:fc:e2:4f:d8:22:
e2:b3:2f:10:30:e8:c2:fe:7b:a5:85:4e:76:e6:e9:64:47:44:
a4:24:2d:f8:58:6c:7a:18:ad:5f:22:87:2c:5e:f8:5f:65:94:
86:1a:90:91:e0:e8:64:88:56:bf:b0:d0:41:73:ea:d0:21:70:
3a:a5:d1:07:a0:7e:33:06:bf:c7:c4:d2:bc:d7:e7:0c:fb:3d:
6c:db:91:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:31:11 2025 by rpki-client