Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/68f97bfc-bd88-3cb6-bfdf-a37eb17bcd59.roa
File: 68f97bfc-bd88-3cb6-bfdf-a37eb17bcd59.roa (raw, json)
Hash identifier: 7l2iPsfYPocuIh1WYP7s5hOJfc5JCXSascsAKsJisq0=
Subject key identifier: B2:5A:79:55:80:95:8C:E3:48:C9:BE:D4:35:EE:01:1D:A0:49:B7:48
Certificate issuer: /CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
Certificate serial: 010D0C9F432858488C45CCF69CA2A567EB027800
Authority key identifier: 06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/68f97bfc-bd88-3cb6-bfdf-a37eb17bcd59.roa
Signing time: Wed 15 Jan 2025 02:00:39 +0000
ROA not before: Wed 15 Jan 2025 02:00:39 +0000
ROA not after: Tue 15 Apr 2025 01:00:39 +0000
asID: 22142
IP address blocks: 170.186.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8c:45:cc:f6:9c:a2:a5:67:eb:02:78:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
Validity
Not Before: Jan 15 02:00:39 2025 GMT
Not After : Apr 15 01:00:39 2025 GMT
Subject: CN=4a96a27e-6748-4551-91c2-c6a467df5128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:25:d1:43:fd:2e:a8:c4:4c:5f:c9:7c:16:b1:
b3:4c:41:bb:34:d4:ab:6d:23:a5:4c:2d:e1:82:2f:
13:4f:f7:fc:bc:c1:2b:c9:e9:26:6f:02:0b:0f:eb:
9c:41:04:ad:45:54:8a:4a:f5:1c:ee:56:fe:ae:3d:
4f:03:c7:cf:8b:f6:ca:1f:bb:6a:68:cb:75:84:06:
d6:66:ff:48:2a:66:ee:8f:6c:ad:be:21:39:83:bd:
66:1f:e9:ed:76:82:64:2b:2a:45:1c:9b:02:17:19:
c2:82:6b:94:fe:d9:0e:5c:6d:ef:70:47:b0:5d:fa:
62:fd:5c:85:52:4d:68:f7:05:63:d7:9c:16:92:0d:
d4:5b:f8:ef:28:11:ac:1e:c5:84:97:81:63:b6:f5:
0a:0d:56:5e:74:bd:cd:58:8b:a3:8f:9f:e1:46:60:
bb:d3:ff:c1:21:de:c7:e3:01:a0:d3:8b:00:7f:9d:
c0:ed:78:7e:97:c9:68:33:de:1c:a9:21:82:38:d7:
ad:a8:e5:f8:fa:2e:af:d9:8c:d9:21:7e:de:3a:8a:
12:9e:4e:75:0f:3e:45:1e:c8:5c:48:b0:91:c9:e4:
2b:4d:1a:7d:c1:18:4a:2c:8d:74:80:e1:82:ee:1e:
77:aa:c1:9c:6e:8f:dc:ea:8b:a4:c5:b0:d4:be:fd:
9f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:5A:79:55:80:95:8C:E3:48:C9:BE:D4:35:EE:01:1D:A0:49:B7:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/68f97bfc-bd88-3cb6-bfdf-a37eb17bcd59.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl
X509v3 Authority Key Identifier:
keyid:06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
sbgp-ipAddrBlock: critical
IPv4:
170.186.154.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:90:99:83:4b:69:70:0d:8a:e0:49:3d:ba:25:9b:c3:a1:97:
97:42:49:1f:9c:52:24:c5:9e:9f:85:5e:1a:bd:2f:c9:c4:f0:
41:17:ec:f5:9c:4a:77:ea:eb:c2:e6:4b:40:92:f5:33:6e:49:
1b:30:fa:33:de:6f:b7:a0:7e:f0:3b:25:94:80:a9:e7:26:7d:
29:81:48:a1:1b:f0:bd:d3:f4:91:b4:c0:e8:1a:fb:23:44:98:
07:0a:77:7a:25:6d:be:eb:61:04:e8:07:32:1d:61:8a:ef:ef:
25:af:73:a9:8b:fe:2e:49:71:57:9a:e0:7a:4a:d6:bc:b0:5c:
a0:30:b1:8c:67:28:5d:ac:e5:06:01:84:da:44:6c:8e:83:8f:
a8:72:9d:15:e8:7b:bf:2b:66:e9:78:4b:58:09:f8:68:54:6b:
a4:22:5a:67:c0:aa:cd:69:ef:8c:74:9f:13:7e:40:6c:f5:3f:
e7:af:f3:17:b7:9a:d2:e1:96:fd:e2:49:94:1b:92:cf:a4:c3:
cf:1f:ee:53:91:e2:2d:be:84:3a:42:5c:b0:81:21:61:de:b5:
a0:a6:0f:3d:90:0f:bf:f2:ab:e6:64:39:3d:0e:c1:31:53:02:
cf:61:83:6a:ec:b6:93:ca:72:0c:18:8b:1a:6d:56:d1:0a:32:
8b:24:16:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:59:59 2025 by rpki-client