Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/59c564f1-4ba5-32b0-9f5c-0604725cdce8.roa
File: 59c564f1-4ba5-32b0-9f5c-0604725cdce8.roa (raw, json)
Hash identifier: mAmHa+lz1BxCvdjcRCKRtmHJc7CVGfiLym6ktnJs8gk=
Subject key identifier: CB:37:8A:B6:E9:A5:F4:6C:18:3D:C7:1E:50:A3:94:07:1B:07:63:65
Certificate issuer: /CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
Certificate serial: 010D0C9F432858488C45CD334CA1BD7E8CB87500
Authority key identifier: 06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/59c564f1-4ba5-32b0-9f5c-0604725cdce8.roa
Signing time: Wed 15 Jan 2025 02:00:39 +0000
ROA not before: Wed 15 Jan 2025 02:00:39 +0000
ROA not after: Tue 15 Apr 2025 01:00:39 +0000
asID: 22142
IP address blocks: 170.186.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8c:45:cd:33:4c:a1:bd:7e:8c:b8:75:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
Validity
Not Before: Jan 15 02:00:39 2025 GMT
Not After : Apr 15 01:00:39 2025 GMT
Subject: CN=5c045249-194b-41f6-b63d-3cd5a5e62595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:00:5a:fc:0c:4f:90:6b:bb:f7:0b:cc:cb:1d:
01:0b:b3:d8:4a:c6:26:f7:61:fc:e7:fa:85:2c:bf:
d5:a8:0e:2d:5b:76:60:31:47:15:04:03:46:3e:ce:
2b:91:d3:15:8f:05:98:3f:1e:35:da:70:40:a8:71:
28:dd:0b:36:5e:16:81:a9:62:51:08:29:d5:0c:7e:
82:1c:42:44:95:fa:57:7c:ab:03:a5:2c:0e:10:9c:
6e:53:aa:0b:a1:05:20:3f:2a:19:c8:52:fb:69:de:
46:96:82:3b:31:28:68:f5:33:09:65:d7:1a:e1:57:
b3:e4:b6:07:ab:91:1d:ad:f5:d7:a9:05:29:e3:27:
fe:0e:c7:af:44:0b:f1:83:d5:5e:28:70:ab:26:3d:
e4:bc:3c:e8:8b:d2:62:fa:09:42:22:77:17:20:3f:
33:d3:92:a8:23:e7:bf:14:34:91:22:85:56:9b:57:
eb:0d:d2:7f:25:ae:c2:c3:c4:aa:11:72:ca:7d:b6:
64:c8:7e:43:27:6e:f4:28:87:84:76:a5:35:53:05:
e0:4f:14:42:01:12:f7:45:06:76:22:ca:1e:8f:90:
04:68:6a:cd:9f:63:3e:1a:eb:1f:53:fb:dd:e3:d5:
3d:34:d1:11:06:0d:32:2d:32:37:5d:b7:c3:75:f2:
d1:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:37:8A:B6:E9:A5:F4:6C:18:3D:C7:1E:50:A3:94:07:1B:07:63:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/59c564f1-4ba5-32b0-9f5c-0604725cdce8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl
X509v3 Authority Key Identifier:
keyid:06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
sbgp-ipAddrBlock: critical
IPv4:
170.186.152.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a0:20:97:06:f8:34:c8:75:84:9d:b1:67:1a:e9:4d:73:8a:bf:
37:73:dd:83:a5:7e:e9:67:65:2a:39:01:c5:c9:04:25:6e:2e:
82:02:d2:e2:6f:f8:db:ce:d1:38:42:16:0d:59:a7:db:b5:cf:
8d:a2:06:0a:e6:b5:36:93:21:34:80:d7:d0:6b:f3:9f:8b:46:
96:83:d5:01:2e:a1:dd:d1:28:14:57:4f:08:5a:69:42:96:da:
14:59:19:ee:c3:8d:66:ae:25:54:8f:9a:55:39:09:52:71:03:
c8:e8:ac:a1:19:aa:62:d3:a4:27:24:42:89:4c:c4:87:04:a8:
49:e3:0b:26:05:8d:3a:21:cb:3b:3d:2a:d2:72:dc:b1:40:e3:
d8:24:95:a7:1f:1c:20:04:3d:1f:7b:55:bf:fb:bf:18:b1:74:
cf:c0:a7:91:54:38:d2:b6:45:73:f7:87:e2:e2:96:74:68:e1:
75:63:e1:39:61:27:d9:fc:ba:e3:0a:70:81:a0:f7:04:f1:c0:
a8:c7:c3:de:ec:da:f8:f7:81:1a:5c:d5:1a:20:0a:19:59:47:
0a:aa:4a:1f:7b:27:24:36:93:84:3e:53:c7:5a:60:0f:4a:d8:
61:b1:cc:26:5f:9f:33:0f:d7:3d:98:ed:35:99:ea:56:95:e4:
cf:2d:c5:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:59:24 2025 by rpki-client