Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/1cc67015-7a49-308f-b9cb-a49114ced13b.roa
File: 1cc67015-7a49-308f-b9cb-a49114ced13b.roa (raw, json)
Hash identifier: eE2tSX9RbNrOTBczu9ZTTwMPRFRlvo1RgbVEy+VRelg=
Subject key identifier: 38:B3:CD:86:97:DE:A2:97:37:48:06:CA:30:1B:BA:BE:27:2C:3C:10
Certificate issuer: /CN=21adcbb8-b500-460f-90cb-bca0525aabcb
Certificate serial: 010D0C9F432858488AE08D41E4EF4592A9900A00
Authority key identifier: 62:2B:0A:1E:7B:53:D2:E2:2B:6B:5A:FF:1D:C1:AA:ED:0A:06:69:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/1cc67015-7a49-308f-b9cb-a49114ced13b.roa
Signing time: Tue 14 Jan 2025 14:00:51 +0000
ROA not before: Tue 14 Jan 2025 14:00:51 +0000
ROA not after: Mon 14 Apr 2025 13:00:51 +0000
asID: 16509
IP address blocks: 170.176.218.0/24 maxlen: 24
170.176.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8a:e0:8d:41:e4:ef:45:92:a9:90:0a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21adcbb8-b500-460f-90cb-bca0525aabcb
Validity
Not Before: Jan 14 14:00:51 2025 GMT
Not After : Apr 14 13:00:51 2025 GMT
Subject: CN=86d79677-30c9-40f1-b7cc-0cc65c0a6aff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:22:4a:0e:49:40:bd:e1:9e:44:9b:0a:80:b9:
80:73:49:68:86:3a:3b:23:df:1f:14:6c:38:f6:73:
e5:33:73:c9:24:d4:aa:d9:d7:c9:3b:76:d2:c1:0b:
5d:d7:9f:03:b1:08:13:ad:38:6b:20:da:81:55:96:
a2:cc:30:bc:5a:96:49:0a:64:01:4a:6a:e6:33:b4:
26:56:ff:81:3f:db:93:9d:b4:d8:14:4f:8d:5a:99:
ab:84:cd:90:7d:6f:dd:be:5d:06:70:b3:a5:36:46:
01:ac:90:82:1c:77:30:e5:f4:96:ec:7d:39:d0:5b:
88:0f:7b:73:5a:b4:2c:3e:b1:93:76:e9:0c:fb:db:
ee:e1:b6:4e:3a:44:82:35:66:67:82:c3:85:56:1d:
b8:da:e8:5c:11:8f:f0:51:98:83:f7:2a:f4:0a:5a:
bd:a7:60:5c:8c:c7:fb:19:a3:a5:ef:2f:4d:18:6d:
e1:cb:ec:95:60:d0:9d:20:b9:fb:4c:09:50:d9:12:
5a:b1:73:fe:66:c9:a7:fd:2d:d3:f6:a6:e1:61:16:
27:60:78:b9:6f:ad:ad:5c:42:e8:1d:51:2f:4f:0b:
7f:47:44:99:a6:d5:c1:52:5f:56:df:ab:9b:cf:ad:
7d:ff:ed:d0:95:57:d1:3a:8b:80:ad:69:4f:d9:5e:
84:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:B3:CD:86:97:DE:A2:97:37:48:06:CA:30:1B:BA:BE:27:2C:3C:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/1cc67015-7a49-308f-b9cb-a49114ced13b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/21adcbb8-b500-460f-90cb-bca0525aabcb.crl
X509v3 Authority Key Identifier:
keyid:62:2B:0A:1E:7B:53:D2:E2:2B:6B:5A:FF:1D:C1:AA:ED:0A:06:69:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb.cer
sbgp-ipAddrBlock: critical
IPv4:
170.176.218.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:08:e2:e4:0c:9e:5b:c4:dd:ef:e4:39:db:07:1a:7e:74:f7:
67:b4:fb:b1:a8:63:63:cb:e9:a5:c9:bd:f0:46:88:80:fe:4b:
28:c0:06:aa:bd:73:8d:52:f5:e0:28:8b:34:57:f7:c6:a0:7c:
09:8d:6b:29:77:dc:4a:21:58:f4:c7:70:08:5d:5a:85:63:0f:
10:d7:2a:77:bd:bb:c1:c5:20:8f:74:04:5c:c3:57:f7:e3:85:
de:04:69:91:10:ae:1d:ef:a0:4a:b1:88:33:34:b5:ca:39:f8:
cf:9e:12:51:7c:bc:46:b3:b0:02:76:1f:8a:80:31:ba:f2:8f:
5b:f9:83:73:9e:4e:d2:ac:de:b5:0a:a0:87:20:d1:95:bd:4b:
7b:fe:8b:fa:85:85:16:11:e9:af:69:a5:94:cd:c7:72:e7:f0:
ae:14:83:65:1b:bb:3a:bd:b3:48:2a:c5:dc:ea:9e:53:0c:89:
6a:30:6d:b0:bc:9c:fa:2e:06:ad:b6:b2:3a:1d:72:e2:ac:44:
4e:83:de:ac:54:46:63:5b:fc:cb:28:d1:7e:43:51:46:fc:07:
c7:31:0f:f4:7c:2c:7c:b1:7d:fb:d6:63:5c:59:f5:5a:d9:36:
03:57:23:08:0f:c3:09:df:26:20:af:9d:7f:13:9d:3b:b4:6b:
c1:a7:c3:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:25:31 2025 by rpki-client