Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/30f8881a-7d17-3ea7-a77f-2b0e42f8b0f5.roa
File: 30f8881a-7d17-3ea7-a77f-2b0e42f8b0f5.roa (raw, json)
Hash identifier: TUmgi95SZDqLZ7cDVP7wAyWos9xwE62ec1ApLNPHdqs=
Subject key identifier: 2D:3F:6C:2F:A0:8F:09:19:8E:31:18:09:2B:AF:E4:4B:A8:17:DF:CA
Certificate issuer: /CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4
Certificate serial: 010D0C9F432858483F80178F234EF096D2E89100
Authority key identifier: D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/30f8881a-7d17-3ea7-a77f-2b0e42f8b0f5.roa
Signing time: Wed 18 Dec 2024 14:00:52 +0000
ROA not before: Wed 18 Dec 2024 14:00:52 +0000
ROA not after: Tue 18 Mar 2025 13:00:52 +0000
asID: 16509
IP address blocks: 170.176.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3f:80:17:8f:23:4e:f0:96:d2:e8:91:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4
Validity
Not Before: Dec 18 14:00:52 2024 GMT
Not After : Mar 18 13:00:52 2025 GMT
Subject: CN=c04107ed-a40b-4793-9183-8bba6abbd9ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:8d:eb:49:9e:8c:fa:c2:10:7b:80:5e:2b:67:
87:1b:ec:9e:eb:04:ab:a2:fe:64:5d:bd:e1:fe:e4:
7f:e7:77:53:c2:ea:99:67:d2:97:6b:e2:f7:f7:fa:
50:8a:68:c3:95:b0:c4:46:76:3a:39:50:55:f8:93:
b9:41:16:ae:a3:af:43:b8:64:11:22:da:dd:0b:01:
9d:b4:63:31:53:2b:39:7c:62:ae:37:29:c2:60:9b:
3f:46:91:59:a4:74:16:70:df:38:c6:de:5a:12:de:
64:70:ff:06:4d:a8:9b:c1:48:90:9f:37:a6:c3:7d:
52:f5:5f:fe:60:bf:47:3e:fe:ae:7e:34:8e:8f:8b:
31:f5:03:d3:cb:52:d5:ea:b2:3f:da:4e:78:ba:cd:
33:5e:34:c6:b0:52:55:ce:bf:80:a0:fb:9e:fa:1b:
76:41:0e:e3:aa:f9:9c:d5:84:67:7a:97:d5:c2:36:
f9:21:14:60:03:d3:bd:d5:d6:4f:c9:8c:76:f9:63:
20:f1:5e:5b:7c:8b:38:b8:44:0b:27:d9:ad:69:5b:
99:88:d5:4f:4f:3d:5a:11:28:39:de:a8:51:04:70:
d7:57:aa:b9:f6:7e:f1:10:77:ba:11:9b:a9:6e:d2:
a6:00:e0:98:c2:3c:28:22:22:5d:86:fb:51:42:a1:
a4:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:3F:6C:2F:A0:8F:09:19:8E:31:18:09:2B:AF:E4:4B:A8:17:DF:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/30f8881a-7d17-3ea7-a77f-2b0e42f8b0f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl
X509v3 Authority Key Identifier:
keyid:D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer
sbgp-ipAddrBlock: critical
IPv4:
170.176.129.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:6b:fd:bd:1b:18:96:49:0a:50:71:ab:5c:dc:93:48:3f:1c:
9c:d5:00:cc:ae:5a:b6:47:de:db:dd:c6:e6:7a:c0:02:b1:e9:
75:2a:6b:7b:32:98:65:09:ed:97:65:1a:ee:f1:cf:e9:0b:ca:
cf:72:71:81:19:78:bb:e8:81:75:d9:d0:9e:64:80:76:6a:a9:
eb:be:e3:2f:fb:51:5e:a5:33:0c:05:2f:d0:b1:fd:b7:ed:68:
87:01:5b:ac:00:c5:70:79:92:8c:47:06:62:82:21:34:3f:73:
21:28:0d:44:9f:1c:07:ea:a2:fe:f1:82:9f:5c:16:d8:cd:ad:
ad:78:3f:0f:74:1b:ad:25:20:24:c9:22:bd:17:25:1f:78:2a:
60:23:7f:1f:ff:3b:c9:39:19:f0:63:9d:9e:64:79:77:d2:85:
50:67:91:0b:e8:9c:c3:b3:4b:4b:12:f9:b4:f2:48:09:89:0e:
0e:6d:4f:bd:aa:db:51:d0:1e:6b:dc:7d:b6:0f:ae:f1:f2:3f:
39:14:f8:6d:0a:07:aa:a4:6b:12:f7:f2:2d:3b:2f:d6:7b:1f:
c6:44:b0:f4:44:91:12:39:96:e0:d3:ab:23:b2:dc:ce:66:ec:
67:62:9f:0c:e4:0f:c9:87:80:63:e9:0f:6f:23:6e:a4:f6:0b:
57:6a:a3:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:39:28 2025 by rpki-client