Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/ed6e47d8-81bc-3bf3-9729-0c390af61b2f.roa
File: ed6e47d8-81bc-3bf3-9729-0c390af61b2f.roa (raw, json)
Hash identifier: m8O8wAE/IzDkuhHODUAqaYW3mAuzidkjZlapxx58Ra4=
Subject key identifier: 6C:CF:9D:10:05:8E:D5:5A:25:74:AD:E1:ED:D4:94:F6:31:24:EC:EA
Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
Certificate serial: 010D0C9F4328584875F056A064F02CB60FBE7A80
Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/ed6e47d8-81bc-3bf3-9729-0c390af61b2f.roa
Signing time: Tue 07 Jan 2025 02:00:39 +0000
ROA not before: Tue 07 Jan 2025 02:00:39 +0000
ROA not after: Mon 07 Apr 2025 01:00:39 +0000
asID: 4540
IP address blocks: 170.89.240.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:75:f0:56:a0:64:f0:2c:b6:0f:be:7a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
Validity
Not Before: Jan 7 02:00:39 2025 GMT
Not After : Apr 7 01:00:39 2025 GMT
Subject: CN=db115522-9699-4bd4-9618-4af026ca655f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:99:2d:19:5f:02:16:03:fa:8d:36:c8:7e:3c:
7f:5f:a4:d0:a8:3d:93:98:61:07:66:d4:11:f9:2a:
6a:84:16:12:f3:25:66:55:15:2a:33:ab:3d:d1:f1:
c5:e0:0a:36:0f:1c:f0:1a:1f:ed:3f:a6:ab:62:07:
5c:93:f0:08:6d:f4:cb:ab:31:5c:9f:a5:8f:7f:a6:
70:50:3c:29:3a:39:f4:25:60:18:70:66:0e:71:91:
ff:51:2d:5e:66:50:df:c1:a6:46:80:18:ea:cf:aa:
57:d1:e6:82:78:e2:c8:a7:fe:9c:6b:6e:6b:f8:0c:
5a:a2:57:ef:8e:44:e6:e5:65:cc:c4:db:55:4b:18:
a4:85:15:25:ea:e6:96:24:90:80:6b:34:22:fe:34:
4e:cb:57:46:42:cb:cb:71:ad:fc:45:6b:31:6a:69:
59:ca:d7:fa:58:7d:d4:11:22:49:b2:3d:21:74:f4:
86:87:d1:79:63:a7:b6:91:17:a5:8e:75:2a:32:3e:
b6:6e:97:95:18:80:e3:3e:90:51:d3:c1:b6:4c:c4:
5c:ff:b7:36:ab:96:29:92:24:1b:9b:e3:30:6e:9b:
c0:6d:c7:0c:f6:33:91:66:56:6e:93:48:89:3c:ac:
d6:9e:8a:4d:96:f8:12:ac:10:2d:d6:e2:e0:0c:a1:
30:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:CF:9D:10:05:8E:D5:5A:25:74:AD:E1:ED:D4:94:F6:31:24:EC:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/ed6e47d8-81bc-3bf3-9729-0c390af61b2f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl
X509v3 Authority Key Identifier:
keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
sbgp-ipAddrBlock: critical
IPv4:
170.89.240.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:54:59:5d:0f:55:42:dd:38:7f:6f:9f:6f:9f:36:ed:e6:e5:
87:c6:8e:70:e8:0f:19:3b:00:09:04:57:20:62:83:07:8d:df:
36:62:41:f1:f9:87:34:6e:7e:6c:77:3b:5d:40:e5:d3:c0:1c:
c8:ec:dc:4e:9e:1d:2b:d3:2c:98:06:d4:9b:f4:1e:cf:3e:22:
7a:a3:dc:3e:ca:33:af:94:67:f9:dd:17:d9:7d:29:40:d9:d2:
ab:94:20:f0:bf:15:84:97:76:be:ca:44:68:ed:26:fa:80:c6:
51:af:72:b3:fd:74:00:9b:9b:5f:20:19:94:58:44:47:a3:cb:
27:2e:63:cf:29:34:0e:d6:e7:1c:55:61:a0:fb:98:94:ff:a8:
84:70:91:53:98:b7:f1:90:fa:89:2a:12:57:9e:1e:c4:f5:cf:
57:27:4a:a6:ab:ff:5a:52:90:43:3c:24:3b:fd:ba:64:d4:9c:
6d:d7:5b:bf:ba:36:3b:c2:9d:44:16:80:30:c0:b1:eb:14:bf:
2e:d7:16:fd:e8:13:2e:30:a1:15:86:43:94:ff:7b:20:9d:c3:
c1:55:52:87:93:91:e6:6b:fb:4e:e4:81:71:af:fc:37:cb:2c:
48:73:d5:1e:58:df:dd:b9:96:62:30:ba:3c:58:bd:ec:fc:22:
a8:82:59:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:50:08 2025 by rpki-client