Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/f55c43bd-0625-3da5-9763-c49f70e415ea.roa
File: f55c43bd-0625-3da5-9763-c49f70e415ea.roa (raw, json)
Hash identifier: hSyJe0Re5jWkRgJgIgMXvRd+218+CR9CZy4GthRvEAg=
Subject key identifier: 83:E5:26:53:69:62:4A:4E:04:8F:51:23:17:CB:63:A7:31:4D:70:CC
Certificate issuer: /CN=d170fca2-5f74-4408-8dc9-597ba031cfe2
Certificate serial: 010D0C9F43285848854B50D810F28E2599953200
Authority key identifier: FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/f55c43bd-0625-3da5-9763-c49f70e415ea.roa
Signing time: Sun 12 Jan 2025 14:00:53 +0000
ROA not before: Sun 12 Jan 2025 14:00:53 +0000
ROA not after: Sat 12 Apr 2025 13:00:53 +0000
asID: 198949
IP address blocks: 66.178.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:85:4b:50:d8:10:f2:8e:25:99:95:32:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d170fca2-5f74-4408-8dc9-597ba031cfe2
Validity
Not Before: Jan 12 14:00:53 2025 GMT
Not After : Apr 12 13:00:53 2025 GMT
Subject: CN=1db121b9-1cda-4e31-ac83-17617e0a7e3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:63:b3:5c:de:ea:6a:0b:c5:cc:15:9c:63:28:
f0:79:d6:9d:9b:9a:3e:9f:cd:36:df:33:2d:58:f0:
aa:f9:79:5d:5b:e0:f8:c0:9f:95:82:31:01:6d:c4:
2b:22:69:bf:ae:17:69:20:4a:83:8d:c6:84:3e:08:
54:ff:64:51:92:53:4a:ab:99:44:02:fa:ca:4c:df:
df:88:01:fc:6e:1b:ee:a5:53:c1:bd:ab:43:39:6a:
f8:81:8e:1b:ac:cc:3b:dd:e2:2d:dc:9e:47:42:37:
3d:0e:3a:d1:1c:4b:95:a0:ff:86:e1:78:ac:5d:fe:
1e:26:f3:e3:01:8a:43:30:f3:39:7d:cc:9d:b0:30:
59:bd:6f:91:9b:a5:54:92:1e:c7:60:68:05:bf:be:
a6:46:11:b5:90:78:3e:99:41:0b:c9:57:32:d4:55:
ae:54:bd:79:8d:3f:90:6b:56:5f:e8:06:ad:df:41:
6d:3b:4e:9a:28:71:5e:36:31:91:37:9f:2c:27:4b:
04:cc:75:a5:e8:b4:03:3a:06:5d:3f:b7:60:76:6e:
a8:3c:6a:fb:56:d3:c3:b3:38:0a:ef:1c:32:1b:80:
78:7f:d0:7c:34:9f:dd:17:ce:17:4e:0f:c2:6f:25:
73:7d:7b:86:4f:55:a0:8f:84:44:11:3b:03:0d:ff:
59:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:E5:26:53:69:62:4A:4E:04:8F:51:23:17:CB:63:A7:31:4D:70:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/f55c43bd-0625-3da5-9763-c49f70e415ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl
X509v3 Authority Key Identifier:
keyid:FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer
sbgp-ipAddrBlock: critical
IPv4:
66.178.159.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:4f:68:d8:46:d1:ee:f4:a0:31:f8:b4:3d:60:45:1a:54:07:
85:f0:4d:49:75:50:ae:be:6a:02:2e:7a:28:37:d9:6f:f7:49:
0b:e2:7d:12:7c:e0:34:66:a3:ae:26:f4:9a:f4:58:bb:1b:0c:
68:9a:30:43:94:96:f6:19:b8:1e:32:27:31:55:af:7b:a4:a8:
58:2d:25:8e:3f:00:c1:51:67:45:42:c1:91:1a:10:b3:5f:43:
f2:7f:7a:df:f5:8d:9c:cf:e1:f2:a7:2b:79:83:56:41:d1:47:
e3:3e:ac:fb:2d:6d:5b:b6:b4:9a:4d:f2:d7:d8:08:d9:16:2d:
3a:b0:e9:51:46:7d:90:d9:f6:56:a0:fa:95:05:a9:95:e7:07:
a1:92:81:a9:8f:19:31:8d:83:f7:7d:34:dc:e5:54:ba:d6:fb:
db:97:e6:67:d1:5c:b8:a1:a2:e4:79:ba:0b:97:28:d6:a6:32:
e8:80:01:7d:cb:89:3b:8e:ad:25:b1:47:47:e3:01:af:84:45:
10:20:b3:11:b1:f5:67:6d:73:a7:10:5f:3c:6d:f2:a7:28:55:
1a:3f:42:bd:4f:df:34:bc:90:6d:b1:e2:25:49:0a:ec:f4:d8:
fb:9b:ba:9b:05:5a:be:89:fb:a1:88:84:1a:21:73:c3:54:1d:
bf:1e:40:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:32:02 2025 by rpki-client