Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/a25775e3-512e-3d4f-a8d0-3335f43e990e.roa
File: a25775e3-512e-3d4f-a8d0-3335f43e990e.roa (raw, json)
Hash identifier: aEBfRMtGjGV8DUr+4EXfHQOMlEEsbPRuEkW19NuP0AY=
Subject key identifier: 5E:F7:DE:52:48:61:9B:1D:16:24:98:F9:76:01:B5:EB:90:BB:23:2A
Certificate issuer: /CN=7daa4589-66d8-4675-8538-e075ba80ecd3
Certificate serial: 010D0C9F43285847F7B3BA051CEE9C0F3A13BEE0
Authority key identifier: BF:D4:FE:F7:0A:A9:40:EC:B8:54:09:F4:36:9B:34:3F:86:5A:0A:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/a25775e3-512e-3d4f-a8d0-3335f43e990e.roa
Signing time: Fri 22 Nov 2024 20:46:44 +0000
ROA not before: Fri 22 Nov 2024 20:46:44 +0000
ROA not after: Thu 20 Feb 2025 20:46:44 +0000
asID: 7029
IP address blocks: 170.39.164.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f7:b3:ba:05:1c:ee:9c:0f:3a:13:be:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7daa4589-66d8-4675-8538-e075ba80ecd3
Validity
Not Before: Nov 22 20:46:44 2024 GMT
Not After : Feb 20 20:46:44 2025 GMT
Subject: CN=ced859f4-965b-4bc8-a70f-32893eb65691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:86:ff:0c:70:c8:92:b8:31:fc:2f:27:de:dd:
9e:8c:66:cd:e8:63:cd:e2:ce:25:98:b4:91:8d:47:
b4:fa:13:a1:76:aa:f0:52:cb:a5:18:1d:e1:10:f2:
51:b5:73:6e:41:33:62:bb:42:8e:ec:f7:33:92:bb:
92:91:05:d0:c0:6e:dc:50:85:31:95:a9:4c:91:17:
01:2a:5a:ae:31:c3:00:ba:f1:67:80:7f:e6:4e:78:
82:73:10:c7:20:af:14:51:f0:ab:fa:fa:0b:89:df:
1b:06:a4:69:22:2a:53:d4:7c:88:0d:56:2f:88:1a:
04:11:2c:66:f5:9c:5b:13:d9:ed:20:56:f7:5c:d2:
d8:91:aa:1a:7c:6f:75:f7:5d:62:26:c9:04:80:de:
af:69:4d:da:0f:29:8a:e6:2a:3e:b3:07:0b:f6:db:
1e:ca:24:46:7b:71:e4:9b:21:19:ee:ce:a3:5d:a9:
e0:cc:12:b4:a8:23:ec:c9:03:45:3b:42:1b:39:38:
53:49:3a:f1:30:3b:16:3b:3d:cc:fd:c1:23:48:7a:
a4:99:ae:e7:fc:da:5e:aa:77:f1:12:73:50:fa:e1:
fc:77:71:3d:44:1c:2e:19:3c:ea:f8:51:92:ec:fc:
43:5a:a4:ac:b6:5c:6d:84:4d:ad:23:bd:51:19:03:
6d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:F7:DE:52:48:61:9B:1D:16:24:98:F9:76:01:B5:EB:90:BB:23:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/a25775e3-512e-3d4f-a8d0-3335f43e990e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/7daa4589-66d8-4675-8538-e075ba80ecd3.crl
X509v3 Authority Key Identifier:
keyid:BF:D4:FE:F7:0A:A9:40:EC:B8:54:09:F4:36:9B:34:3F:86:5A:0A:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3.cer
sbgp-ipAddrBlock: critical
IPv4:
170.39.164.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:0f:da:db:02:47:37:85:4a:60:55:b7:d4:b5:b3:5b:b4:2d:
45:14:95:29:87:00:7c:b6:c8:bf:c4:5f:7a:14:94:78:e8:d8:
50:36:9a:25:bf:5f:89:1e:50:52:7f:f2:78:31:7a:f7:e4:bf:
ee:b8:56:2a:c5:1e:ad:e7:59:ed:bd:ca:d6:17:49:b9:a3:34:
34:c7:2a:5e:a8:62:53:03:88:40:8c:2a:77:f3:b8:f3:ed:cf:
37:17:e8:71:02:98:2e:bb:36:8c:32:ed:6d:f3:6f:c7:05:74:
02:a2:d8:90:c9:d7:c8:0f:08:3c:7f:9c:18:20:d7:5a:ae:c9:
7e:4d:aa:fc:5d:e1:3a:8f:ef:7e:f9:96:74:a1:f2:57:05:bd:
60:56:7a:18:a0:48:79:a3:83:1f:c5:da:a3:5b:83:32:9c:0f:
da:86:6e:45:be:6d:af:57:db:0e:df:20:ea:84:38:0c:c9:c0:
c7:3d:3b:45:e8:a2:40:c1:1e:96:04:cf:6b:b6:86:59:0f:15:
20:c0:ae:8d:fd:0b:89:cf:ca:e9:e8:23:97:cc:a8:f8:1f:2a:
fc:46:00:e9:53:6e:11:64:59:8d:43:bb:43:a3:5b:11:dc:28:
2d:05:a6:39:13:ee:c4:68:ff:a1:d4:bf:69:6f:5f:db:2b:8a:
36:7e:b4:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:24:23 2025 by rpki-client