Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/a00b67ff-c2e0-358d-b25e-0f150c687e8e.roa
File: a00b67ff-c2e0-358d-b25e-0f150c687e8e.roa (raw, json)
Hash identifier: ve4mQu6CymcngLdD1XbzvfDrP+JErZZVeXYcbEkSOcU=
Subject key identifier: 35:E5:71:3D:60:38:82:B8:FB:BF:A3:BC:DE:8D:ED:D5:13:BD:18:7B
Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
Certificate serial: 010D0C9F4328584875F0563961EF003D497608C0
Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/a00b67ff-c2e0-358d-b25e-0f150c687e8e.roa
Signing time: Tue 07 Jan 2025 02:00:39 +0000
ROA not before: Tue 07 Jan 2025 02:00:39 +0000
ROA not after: Mon 07 Apr 2025 01:00:39 +0000
asID: 4540
IP address blocks: 170.89.200.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:75:f0:56:39:61:ef:00:3d:49:76:08:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
Validity
Not Before: Jan 7 02:00:39 2025 GMT
Not After : Apr 7 01:00:39 2025 GMT
Subject: CN=88758555-442c-4c10-a4dd-3daf0623f765
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:04:8c:83:87:ea:a3:e8:47:ea:d9:8d:b8:49:
cf:54:b8:e5:6d:df:55:b1:a9:de:1d:83:a7:ef:fb:
f1:65:80:6b:db:e1:59:ad:dd:e0:9e:f9:9f:01:40:
47:e0:fa:0b:0e:44:d0:1f:b9:e6:d0:99:fb:9e:e2:
82:d1:65:c5:ab:5e:07:d0:52:8b:5b:bf:d8:72:83:
e1:79:59:1c:4b:45:ca:c1:f3:62:f5:a9:6b:53:25:
04:ce:25:c2:3b:5b:39:b5:cd:12:aa:e4:1e:2c:e5:
fb:ec:23:23:34:61:13:8d:2a:5f:52:d6:dd:0d:ec:
74:c5:0d:42:be:ca:6f:d7:99:8b:fb:b4:5b:08:73:
61:ca:e9:ca:ce:da:e8:a8:68:14:2a:48:0b:4b:a3:
08:32:99:4c:d3:1c:53:ef:e0:48:fd:3f:be:ac:26:
e5:7b:6e:b0:2e:76:72:86:92:93:ea:f9:48:42:b0:
c4:72:27:94:1a:0c:b9:e7:a8:c1:78:dd:68:51:0d:
04:1f:f4:b2:96:14:00:e6:6b:33:76:af:80:4f:49:
df:07:0d:8c:fe:6a:6d:e0:35:f7:88:a3:91:1e:7d:
b8:94:f7:bd:a2:90:81:cf:56:4d:e9:22:e8:2c:6a:
37:5a:cb:58:f7:95:a1:72:97:35:a0:9e:9d:f6:42:
44:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:E5:71:3D:60:38:82:B8:FB:BF:A3:BC:DE:8D:ED:D5:13:BD:18:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/a00b67ff-c2e0-358d-b25e-0f150c687e8e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl
X509v3 Authority Key Identifier:
keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
sbgp-ipAddrBlock: critical
IPv4:
170.89.200.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:81:60:71:b3:9a:55:b5:9f:61:8c:f6:37:19:3e:e6:aa:ff:
61:74:f2:6f:ca:e6:5d:82:44:50:ad:bc:81:8c:26:52:f9:1a:
75:c8:22:27:2c:9a:18:c9:c2:61:6b:3e:b4:62:b6:56:c8:8b:
7a:b7:f1:1d:da:f7:75:76:7d:91:22:fd:0a:de:d3:e6:86:8e:
16:24:a9:1d:13:33:c9:de:30:5e:d9:e2:36:26:18:71:00:49:
b4:6d:58:b3:9a:64:60:ef:b1:f4:7f:b2:5f:34:eb:ed:2e:18:
09:16:c6:4d:02:81:29:b0:94:f9:8c:ac:db:08:96:31:4e:f3:
2b:11:ee:ab:80:25:b6:9a:83:3a:4d:ec:86:f2:a0:cc:85:a4:
20:de:99:00:87:6d:cc:4c:db:35:d3:2a:dd:29:f9:67:6e:b2:
1f:d8:a3:bb:ab:49:40:87:61:d6:bb:e9:01:dc:7f:56:6d:87:
df:98:1e:5c:e2:27:b0:36:0e:10:7f:17:d3:a3:d4:28:47:a0:
be:23:40:c5:23:cd:0b:2c:75:78:34:fa:a6:26:17:ce:54:d0:
d6:97:38:e2:ec:e5:3a:5a:93:2c:7f:95:0d:68:3e:7b:ba:36:
d7:36:d9:b5:5d:96:9c:5c:fd:dc:06:0f:8e:ef:75:fe:9a:a0:
54:b3:7c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:47:49 2025 by rpki-client