Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/adcbd638-51eb-3ab6-b57d-871ba10f6d1b.roa
File: adcbd638-51eb-3ab6-b57d-871ba10f6d1b.roa (raw, json)
Hash identifier: u7J6mXIJBkKxiV6xRt2jcan5kBRXQY/8ifGr+qbLmyg=
Subject key identifier: 95:C0:B4:4D:B1:02:BA:C7:47:56:4F:E6:ED:31:46:72:ED:87:E7:07
Certificate issuer: /CN=d3237408-0888-4b1f-bed5-a45886656401
Certificate serial: 010D0C9F43285848090FA42E4E45E1A77F9E6600
Authority key identifier: E8:D7:55:D9:7A:18:FA:F9:D3:AE:04:B7:D4:31:2E:BC:45:FD:24:45
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/adcbd638-51eb-3ab6-b57d-871ba10f6d1b.roa
Signing time: Fri 29 Nov 2024 02:00:39 +0000
ROA not before: Fri 29 Nov 2024 02:00:39 +0000
ROA not after: Thu 27 Feb 2025 02:00:39 +0000
asID: 33458
IP address blocks: 170.39.172.0/24 maxlen: 24
170.39.173.0/24 maxlen: 24
170.39.174.0/24 maxlen: 24
170.39.175.0/24 maxlen: 24
208.65.84.0/24 maxlen: 24
208.65.85.0/24 maxlen: 24
208.65.86.0/24 maxlen: 24
208.65.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:09:0f:a4:2e:4e:45:e1:a7:7f:9e:66:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3237408-0888-4b1f-bed5-a45886656401
Validity
Not Before: Nov 29 02:00:39 2024 GMT
Not After : Feb 27 02:00:39 2025 GMT
Subject: CN=8382e8cf-3283-4583-b181-a0fd2f647d23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:7b:85:84:91:d3:d1:f5:66:b8:18:ad:6d:51:
7d:18:b4:18:52:77:e2:81:28:1b:af:be:3f:f8:b1:
23:e9:94:c0:3a:c4:00:0a:51:bf:fa:3f:6b:f2:37:
1b:1b:57:cd:22:c1:f1:a1:d3:7c:61:a1:08:c4:38:
5a:24:43:55:94:0f:9c:e9:b8:c2:25:05:94:82:4e:
56:7c:1b:5f:37:03:e0:ca:f3:f3:ba:a0:73:6e:0b:
1a:b5:82:5f:29:ab:af:13:f4:8e:5d:df:4a:6b:bf:
66:8d:f5:4f:c1:e6:9f:97:33:a1:94:06:80:0f:90:
55:b7:25:16:5d:74:d5:b0:cb:4f:64:f1:2f:13:fb:
42:b9:5a:4a:cb:59:99:79:25:dc:09:b4:46:89:3d:
fc:e9:d5:5b:fb:b2:7d:c9:cf:ec:2e:21:83:26:ed:
c6:e1:51:b8:69:80:00:23:5d:e8:76:94:95:b3:a7:
8c:e7:3c:bc:f9:5e:e8:7a:be:8e:7a:48:eb:a1:04:
c1:9b:39:f7:47:f9:bf:c7:41:70:5f:60:c8:3e:5d:
9e:49:d4:a4:12:b1:19:1a:65:e2:4f:75:05:fa:4a:
24:e2:8c:bc:ca:c1:10:d5:84:34:27:2b:fb:d9:38:
01:69:fa:9d:71:00:88:76:43:9f:41:ce:1d:23:10:
f4:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:C0:B4:4D:B1:02:BA:C7:47:56:4F:E6:ED:31:46:72:ED:87:E7:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/adcbd638-51eb-3ab6-b57d-871ba10f6d1b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/d3237408-0888-4b1f-bed5-a45886656401.crl
X509v3 Authority Key Identifier:
keyid:E8:D7:55:D9:7A:18:FA:F9:D3:AE:04:B7:D4:31:2E:BC:45:FD:24:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401.cer
sbgp-ipAddrBlock: critical
IPv4:
170.39.172.0/22
208.65.84.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:ef:6b:73:a4:bc:a9:dc:7f:fe:f3:95:4b:cf:41:2d:36:5e:
c9:be:5f:38:b9:a3:4e:08:96:9a:46:4f:bc:94:3d:38:a3:fa:
ec:29:b8:32:1c:04:34:f4:1e:a6:18:2a:b3:64:6f:8d:68:b3:
19:bc:bd:7a:f4:24:64:99:6b:9a:ee:9f:9c:a0:41:2d:d3:f2:
96:ab:44:cf:8f:39:c5:f7:9d:bb:78:bd:74:00:f1:5f:13:ca:
e5:5e:fc:b7:d6:76:5a:37:e4:23:1a:de:ee:6c:67:74:83:fc:
d4:36:eb:3d:72:fc:43:94:90:10:eb:3c:d5:24:2a:8f:23:b7:
d8:7b:47:78:a7:7f:e4:96:ae:4d:4c:36:22:03:4a:41:c3:16:
6d:3c:8c:f7:90:77:eb:4f:6d:46:3c:ae:2d:08:a4:f4:a3:db:
9a:fa:15:59:35:ac:58:13:bd:df:c8:71:ec:9b:05:1e:af:b2:
ff:da:28:13:b1:4b:e2:5f:a0:76:86:e5:d8:1e:39:35:25:4b:
eb:a3:c2:ac:11:bf:08:8f:ea:af:44:15:df:9b:b1:ed:7c:1c:
19:cd:40:98:ba:ae:21:f5:5f:2f:07:22:61:b0:66:f7:20:11:
82:b7:26:14:5f:01:db:4c:84:db:a1:8c:9e:7f:80:67:fd:d0:
21:16:7e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:56:51 2025 by rpki-client