Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/80e96d3f-650e-3ca7-b9f9-15492a817e57.roa
File: 80e96d3f-650e-3ca7-b9f9-15492a817e57.roa (raw, json)
Hash identifier: JHhvp1n5ej1D6znQ0ZiAFRlp6Skl3CmpG941ZLk70mg=
Subject key identifier: B2:9C:0E:5F:2E:64:D2:06:F9:1F:65:AC:C1:BD:66:3E:EF:3D:94:41
Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
Certificate serial: 010D0C9F4328584875F05670B2603B770D090D00
Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/80e96d3f-650e-3ca7-b9f9-15492a817e57.roa
Signing time: Tue 07 Jan 2025 02:00:39 +0000
ROA not before: Tue 07 Jan 2025 02:00:39 +0000
ROA not after: Mon 07 Apr 2025 01:00:39 +0000
asID: 4540
IP address blocks: 170.89.224.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:75:f0:56:70:b2:60:3b:77:0d:09:0d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
Validity
Not Before: Jan 7 02:00:39 2025 GMT
Not After : Apr 7 01:00:39 2025 GMT
Subject: CN=501d931e-c50d-4a99-bff4-831cddb6d4af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e9:a7:ce:24:58:f2:79:88:83:70:c9:e5:23:
37:8c:e1:67:77:e6:fc:5f:14:16:e6:dd:66:f5:23:
00:e3:3f:78:b4:d7:98:a2:c0:19:4c:69:d3:a7:88:
00:96:21:b8:ad:eb:89:b6:20:b2:a9:f4:2a:fd:91:
15:df:d9:89:2c:40:c0:e3:b9:2c:93:f1:d2:ba:b2:
a6:1b:8b:d5:9e:d6:9d:66:9c:13:62:00:81:13:de:
83:15:e9:3c:d7:54:8a:71:bd:39:1e:b7:70:56:e6:
e3:85:1e:c3:27:1e:7e:70:ab:88:d3:9c:57:e4:3e:
29:0d:38:77:7b:74:ae:80:29:d7:54:85:04:95:b8:
fa:50:6a:bf:36:23:5f:b3:5b:72:b9:ab:ec:fe:df:
6c:22:5d:e5:2e:0a:bf:27:40:7c:3b:66:6a:82:ef:
bd:cd:95:17:7d:7c:05:22:e7:f7:a2:dc:e4:1d:76:
52:55:40:69:70:c5:34:c2:01:68:31:71:67:01:a9:
4a:2c:2f:97:35:c0:8e:b2:a0:ff:ff:3e:be:be:c1:
5f:76:5a:d0:8e:67:1a:2e:2d:a3:1e:6a:50:30:2a:
42:76:34:1f:a3:08:61:bc:cc:7b:cb:3a:3c:13:4f:
1e:bb:f8:9a:99:90:aa:ed:8a:d6:69:db:a1:b2:6c:
5e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:9C:0E:5F:2E:64:D2:06:F9:1F:65:AC:C1:BD:66:3E:EF:3D:94:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/80e96d3f-650e-3ca7-b9f9-15492a817e57.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl
X509v3 Authority Key Identifier:
keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
sbgp-ipAddrBlock: critical
IPv4:
170.89.224.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:dc:66:e0:c8:2a:e3:6d:bf:4b:20:78:4e:0f:b5:c2:4f:90:
5a:c1:b6:3a:f3:56:b4:2d:37:d6:8e:39:79:dd:a9:bf:1f:ac:
98:2f:11:18:aa:e1:47:5e:3b:dd:28:6f:14:69:ba:1e:22:5c:
2b:72:91:b2:a1:1c:fb:07:93:2a:37:3f:1a:42:d6:54:2f:88:
08:f8:b9:b5:4e:ea:08:66:35:1a:0b:dd:12:2a:f3:a6:5e:9f:
e6:58:28:38:78:38:b7:e2:20:f6:a4:61:9e:8c:3f:65:f5:d3:
5f:4f:e3:6c:70:13:e2:6e:5b:75:81:a1:43:aa:86:b7:50:da:
56:80:63:ba:9e:ee:7a:1d:0d:b9:32:78:79:a8:4b:00:8f:d1:
40:67:d8:ac:7a:69:8d:fb:66:08:13:d8:72:4e:61:27:cc:14:
f4:a7:8f:c6:00:32:17:04:cb:f5:f8:7d:cc:b9:5c:27:f5:c8:
70:5c:e9:09:cd:2b:15:0e:91:8b:43:45:bc:ea:b0:22:4a:95:
29:6e:04:3a:02:15:bc:f5:2b:ee:a9:60:fb:9d:c0:70:66:43:
76:27:1f:2e:ab:7b:cf:12:20:b4:0e:93:15:02:87:50:9d:18:
9a:b4:dc:2a:b6:f2:4e:5e:76:b9:5d:72:f8:f1:e6:ae:a4:9d:
e3:04:8c:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:53:48 2025 by rpki-client