Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5599678a-c6a8-4921-aa0a-62a64b2f1631/0184950f-9c02-3248-a632-9f96a6f085f9.roa
File: 0184950f-9c02-3248-a632-9f96a6f085f9.roa (raw, json)
Hash identifier: 1M65eSw/TffBvxm4/ds32cciNfsswhDLMgMjzIpVP9c=
Subject key identifier: 0C:BB:A9:78:1A:53:F2:76:96:AC:3A:75:06:5E:12:AB:5A:08:E5:C2
Certificate issuer: /CN=5599678a-c6a8-4921-aa0a-62a64b2f1631
Certificate serial: 010D0C9F432858485470308CCFF409BB32475C00
Authority key identifier: A7:57:A4:B1:32:85:CF:43:2E:0E:54:6F:2F:1A:B3:97:5E:12:40:5C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5599678a-c6a8-4921-aa0a-62a64b2f1631.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5599678a-c6a8-4921-aa0a-62a64b2f1631/0184950f-9c02-3248-a632-9f96a6f085f9.roa
Signing time: Thu 26 Dec 2024 02:00:40 +0000
ROA not before: Thu 26 Dec 2024 02:00:40 +0000
ROA not after: Wed 26 Mar 2025 01:00:40 +0000
asID: 398437
IP address blocks: 170.39.36.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:54:70:30:8c:cf:f4:09:bb:32:47:5c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5599678a-c6a8-4921-aa0a-62a64b2f1631
Validity
Not Before: Dec 26 02:00:40 2024 GMT
Not After : Mar 26 01:00:40 2025 GMT
Subject: CN=e780db78-cc55-4d90-984e-26244816a2c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:45:97:60:12:6c:e1:a8:fd:d0:01:e0:c9:06:
9f:06:5e:de:d2:1c:02:5d:91:47:03:76:10:63:ca:
a3:48:5b:db:1f:5e:3c:00:38:7a:b5:83:f2:01:2d:
34:72:83:4e:00:63:bc:0a:79:74:81:e7:8b:e9:18:
83:6c:ce:c8:fd:71:aa:d2:93:35:23:b7:12:ec:f9:
f5:5b:89:88:2d:a5:ef:d5:36:ce:a0:78:13:30:7d:
31:33:b7:ac:ef:f0:77:7c:9a:10:35:e0:0f:2e:80:
8c:be:ea:fd:76:a4:d4:5c:0d:b5:49:7f:42:52:50:
e6:3a:4b:d4:2e:f0:8b:05:32:7a:8e:99:34:0a:ee:
35:ff:e2:1c:5c:11:8f:36:12:3d:4e:f2:94:4a:b6:
75:06:4f:18:57:51:20:2a:f0:be:3f:c3:0b:5a:c6:
91:32:d1:bb:97:75:99:42:12:19:9b:d3:15:f5:de:
ed:b1:02:f5:74:a2:f5:4e:c5:b7:4f:64:dc:2e:27:
00:76:a2:da:34:fd:de:13:b4:d0:0a:c2:c8:48:1b:
61:e2:91:d2:29:10:33:f3:5d:fb:79:51:b8:8d:b1:
e2:a6:e9:74:67:5b:c7:7c:2b:f4:ef:bd:88:8f:ec:
16:42:8f:2b:84:00:94:85:2b:47:3a:bd:2c:6b:80:
39:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:BB:A9:78:1A:53:F2:76:96:AC:3A:75:06:5E:12:AB:5A:08:E5:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5599678a-c6a8-4921-aa0a-62a64b2f1631/0184950f-9c02-3248-a632-9f96a6f085f9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5599678a-c6a8-4921-aa0a-62a64b2f1631/5599678a-c6a8-4921-aa0a-62a64b2f1631.crl
X509v3 Authority Key Identifier:
keyid:A7:57:A4:B1:32:85:CF:43:2E:0E:54:6F:2F:1A:B3:97:5E:12:40:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5599678a-c6a8-4921-aa0a-62a64b2f1631.cer
sbgp-ipAddrBlock: critical
IPv4:
170.39.36.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:aa:e7:e8:ad:88:19:17:1e:30:1b:f4:a7:f3:e7:88:1c:5f:
47:b6:23:f6:2a:a1:25:a6:ee:a8:29:d0:56:b2:43:17:13:c4:
ea:16:1c:e5:42:da:f3:3e:a4:39:eb:a2:0d:66:cf:60:d9:ff:
d2:2f:cb:bb:54:93:ce:8c:32:ac:e3:8b:f1:f1:f4:a6:ca:ae:
91:73:41:61:cf:3e:d6:f5:d1:f2:ff:72:45:93:a1:8d:af:7a:
64:e5:cc:f3:78:4a:c2:fa:9b:63:08:8f:6a:c5:2f:08:d2:84:
67:98:ce:c8:d9:32:18:c0:5e:2c:47:31:46:45:e0:e7:b8:00:
75:f6:0e:d5:dd:3e:d0:29:25:7a:ee:65:cb:36:b2:6c:e8:2c:
e6:df:07:62:75:62:89:94:73:89:50:03:6f:ed:55:68:4c:b6:
7c:6e:77:d1:52:45:b9:5f:f4:a3:83:1f:f2:e6:1a:fe:da:f8:
26:2a:a3:2a:72:39:aa:83:3b:29:58:45:0e:8b:e9:e6:16:c7:
7b:73:bc:21:90:28:5a:71:b5:f7:f2:6d:0b:e3:21:50:c9:1a:
04:d9:c2:68:b6:77:f9:40:c9:f8:2d:f5:de:b1:ef:61:6d:93:
56:d3:29:84:6d:fd:d9:83:e9:68:8f:bb:10:fd:4f:b9:27:25:
81:a5:99:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:39:07 2025 by rpki-client