Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/4aa8c3d2-cbf2-3179-9e53-9ad0af4b7194.roa
File: 4aa8c3d2-cbf2-3179-9e53-9ad0af4b7194.roa (raw, json)
Hash identifier: c+jbOfUmgprGWEJnkrSJBe6vqcV6x1iV4pM56fllkPo=
Subject key identifier: AE:06:30:4C:9B:E6:45:C1:DA:B4:89:81:66:8D:4C:C5:88:13:DF:70
Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
Certificate serial: 010D0C9F4328584875F056854AEFD0296FE0CD00
Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/4aa8c3d2-cbf2-3179-9e53-9ad0af4b7194.roa
Signing time: Tue 07 Jan 2025 02:00:39 +0000
ROA not before: Tue 07 Jan 2025 02:00:39 +0000
ROA not after: Mon 07 Apr 2025 01:00:39 +0000
asID: 4540
IP address blocks: 170.89.232.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:75:f0:56:85:4a:ef:d0:29:6f:e0:cd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
Validity
Not Before: Jan 7 02:00:39 2025 GMT
Not After : Apr 7 01:00:39 2025 GMT
Subject: CN=1cfdcc6e-db45-46d3-8ef1-6a374ef67663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fc:bd:9c:03:4f:39:f1:cb:9b:74:c2:82:26:
52:5e:e4:32:6f:ca:cb:ad:9c:1a:3a:fe:65:d2:7f:
bf:23:7b:24:dc:89:1e:16:00:88:d8:46:94:c1:4e:
21:5c:ff:1d:4a:57:3c:ce:f3:d6:cf:02:f9:9b:80:
88:e8:c6:0a:92:6b:85:22:21:3b:b9:c6:7d:d1:4b:
21:bc:28:31:45:40:30:0a:8e:de:31:f2:7a:4b:93:
f3:6f:4a:64:9d:37:ef:3e:f6:8a:51:99:f7:c3:14:
61:9b:f5:dd:85:0c:24:5b:e4:84:48:0d:6b:ec:b6:
5e:13:c1:a9:6c:59:30:7f:31:0c:00:15:67:82:85:
0f:07:47:ce:8f:0f:d7:0a:25:a7:93:4b:71:df:06:
f0:50:71:9a:b1:a2:ec:d7:d8:17:83:6c:e5:f8:95:
cd:a1:22:87:0f:8a:0e:57:cc:e0:58:09:de:3f:80:
53:10:c4:d7:c4:7e:fe:86:8c:a7:b1:e3:94:95:92:
88:5d:62:b2:8f:d7:76:b7:7c:d1:2d:49:e2:1b:a9:
57:43:b1:13:41:f0:fb:fb:60:7b:d1:df:e1:f9:99:
85:d7:f0:76:31:97:c2:19:53:26:70:bf:4e:29:38:
82:4b:4a:b8:cb:5e:27:3f:0f:e9:ce:1c:6e:47:ae:
0f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:06:30:4C:9B:E6:45:C1:DA:B4:89:81:66:8D:4C:C5:88:13:DF:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/4aa8c3d2-cbf2-3179-9e53-9ad0af4b7194.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl
X509v3 Authority Key Identifier:
keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
sbgp-ipAddrBlock: critical
IPv4:
170.89.232.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:e0:8c:dd:6f:8f:06:87:4c:5e:2f:c4:55:60:17:f4:c0:f0:
4a:ec:a7:cb:ef:ed:8d:44:8d:16:9e:cb:53:48:f0:35:42:0f:
f7:68:ad:18:a2:29:91:14:da:03:d1:cc:b9:40:a6:50:55:40:
7b:43:81:1c:8e:3e:40:4f:57:7f:b9:61:24:69:45:c6:64:25:
0b:b9:5c:f7:c6:21:61:55:34:84:06:a6:6e:4f:d3:82:b2:c7:
6d:e1:75:d9:77:eb:90:22:f0:a5:1c:81:33:90:df:49:d0:f6:
ad:43:eb:74:e9:a9:8a:de:a2:37:61:0e:9d:fa:97:4e:59:64:
40:b3:eb:8d:fa:b5:b1:18:91:f8:db:ef:97:aa:6d:e8:b9:35:
cb:59:de:b5:a3:4c:b4:1b:38:78:1f:e2:3f:87:d2:c5:18:0c:
1b:c6:50:af:2c:69:4c:ee:e0:f0:18:05:e8:50:14:ae:a1:bc:
16:68:f3:12:3f:9b:8d:10:51:c9:58:2a:fc:59:3a:14:41:63:
0b:60:a8:e5:33:4c:b3:c8:41:fc:2c:dc:23:01:e3:77:cd:20:
92:7d:19:d7:33:e8:65:f9:15:3d:b3:f9:59:78:5b:f5:a2:37:
03:c1:f0:0f:76:13:9f:7a:20:3c:68:db:f5:9e:b1:90:6a:80:
87:ed:57:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:50:25 2025 by rpki-client