Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/a3af340a-151f-3e65-b202-a86ab76e7ddc.roa
File: a3af340a-151f-3e65-b202-a86ab76e7ddc.roa (raw, json)
Hash identifier: 5GKp8e98dt8fwoBDpbvtukQqmSYjFbdqzPXtvDeZBWU=
Subject key identifier: 6A:F4:6C:18:78:EF:FB:9A:61:1D:15:C7:AE:A2:BD:77:35:2F:4D:53
Certificate issuer: /CN=2dbf604f-24b0-426e-809d-e65b08be5d50
Certificate serial: 010D0C9F43285847EBBF7A7F10B23431E67ECBC0
Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/a3af340a-151f-3e65-b202-a86ab76e7ddc.roa
Signing time: Mon 18 Nov 2024 14:00:40 +0000
ROA not before: Mon 18 Nov 2024 14:00:40 +0000
ROA not after: Sun 16 Feb 2025 14:00:40 +0000
asID: 16433
IP address blocks: 170.176.248.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:eb:bf:7a:7f:10:b2:34:31:e6:7e:cb:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50
Validity
Not Before: Nov 18 14:00:40 2024 GMT
Not After : Feb 16 14:00:40 2025 GMT
Subject: CN=c6adb97a-ed12-49d9-97f6-301abe9e006c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:22:7b:c9:90:fb:8e:db:be:44:d7:d8:6a:7b:
37:16:c3:5f:e3:67:98:77:a2:c2:bd:ca:0d:11:2b:
ef:96:e6:fe:5b:43:4d:e3:bd:36:56:d3:d6:80:a3:
49:42:84:e7:6e:62:ef:ed:fc:84:0c:7a:92:c3:02:
d5:15:16:ea:3c:a7:91:ac:99:6a:da:0e:d8:71:ed:
f2:0e:46:d6:11:f2:bc:2d:a0:9b:1c:5d:a6:9c:77:
67:15:93:77:80:90:4a:e9:da:bf:36:fc:f7:ff:5c:
70:94:f6:81:d4:79:02:01:46:55:24:a2:f3:8c:fc:
be:68:9c:65:fa:6a:43:a8:76:fd:97:d4:d5:0d:ab:
64:c1:65:4e:32:e2:50:30:37:45:15:32:34:fa:ad:
e2:1f:bd:49:37:3c:9d:2a:5b:cf:8b:fa:a6:de:60:
b1:5b:54:b7:ad:0f:7a:2a:f2:1e:0e:61:7a:7a:00:
a4:95:20:67:6a:87:30:76:c8:19:a6:7f:96:c2:f1:
4a:ce:b2:d4:fb:97:ab:e7:d0:5f:f9:27:a9:f0:92:
71:e4:cf:82:b4:eb:3b:18:59:56:6e:b1:c0:40:2c:
e1:97:db:51:8a:a9:ef:d0:3d:b7:7c:86:aa:66:8d:
fe:3d:7d:34:99:93:8b:3f:7b:92:f6:43:80:50:b8:
cb:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:F4:6C:18:78:EF:FB:9A:61:1D:15:C7:AE:A2:BD:77:35:2F:4D:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/a3af340a-151f-3e65-b202-a86ab76e7ddc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl
X509v3 Authority Key Identifier:
keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer
sbgp-ipAddrBlock: critical
IPv4:
170.176.248.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:2c:81:b4:1f:26:f1:f4:96:15:aa:7c:65:f3:7f:d7:43:b5:
05:d6:2f:f3:fb:04:1e:37:68:41:94:67:55:09:01:70:8b:21:
9d:a4:72:6a:4c:51:49:1c:95:77:fb:1d:a9:92:06:a3:37:07:
a8:e0:5b:99:a2:2d:a5:66:2c:c9:d0:7c:b5:57:48:c1:5c:bc:
fc:65:74:36:a8:61:7b:9f:19:28:53:00:e3:97:d5:4e:00:5b:
d6:ee:bb:9a:c7:da:67:a5:1c:0f:3d:b6:fd:ab:eb:ec:ca:80:
d5:78:46:29:88:d5:db:be:bd:05:4f:af:ed:e2:d5:43:8a:e2:
7f:be:60:68:d6:28:16:fa:e4:bf:39:10:3a:4d:a3:13:8b:3f:
f5:78:b3:cd:6d:be:9b:f0:b0:7e:63:a7:26:e2:cd:4a:5b:b0:
ce:9d:0f:a6:1e:59:68:02:f7:dd:f5:9b:58:78:a0:98:67:c8:
10:3f:90:8d:49:60:53:b6:78:eb:c3:9e:25:cb:f2:fb:13:c8:
05:51:87:4c:00:a6:f8:46:5b:9c:b1:98:c9:05:41:54:9e:46:
63:63:af:8b:68:1f:aa:a4:1b:30:ca:55:7a:0f:76:eb:47:e9:
7b:e8:1e:7f:44:18:d6:fa:99:11:12:90:e6:ed:6d:d2:ef:27:
cf:19:af:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:31:52 2025 by rpki-client