Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/008ecab5-1d8d-3d77-88c0-4d4d9d70afe6.roa
File: 008ecab5-1d8d-3d77-88c0-4d4d9d70afe6.roa (raw, json)
Hash identifier: S9/HLSMkzXuBvRdlG5lKNo/Y1sD54K4T69/cosF9Rrg=
Subject key identifier: 91:22:7D:52:98:DA:AF:E7:B2:D2:3E:9C:88:D5:1F:17:D8:3A:A2:40
Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial: 010D0C9F432858482A8FD931D9BD3DF37D85EDE0
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/008ecab5-1d8d-3d77-88c0-4d4d9d70afe6.roa
Signing time: Wed 11 Dec 2024 02:00:38 +0000
ROA not before: Wed 11 Dec 2024 02:00:38 +0000
ROA not after: Tue 11 Mar 2025 01:00:38 +0000
asID: 16509
IP address blocks: 170.114.16.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2a:8f:d9:31:d9:bd:3d:f3:7d:85:ed:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
Validity
Not Before: Dec 11 02:00:38 2024 GMT
Not After : Mar 11 01:00:38 2025 GMT
Subject: CN=2c4c1a9f-5987-4482-b9b9-010fd99273cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:9d:7a:06:91:1e:4f:62:6f:69:d3:3f:33:28:
9e:61:85:da:46:a8:8f:67:4d:e6:36:37:06:c7:6f:
dc:22:81:d6:e6:63:5e:70:89:72:99:e7:03:78:0a:
77:02:ee:58:d7:8e:04:75:2d:e0:5b:ca:d3:45:d6:
69:52:a9:29:22:2c:cc:2e:ea:0f:fe:7c:01:e2:c3:
5d:1f:8f:e6:7f:f6:76:0c:c9:68:43:0e:ef:25:35:
45:c1:0b:22:b4:77:b1:26:a5:a7:ff:0a:c6:12:c6:
fc:13:3d:35:06:f6:36:ae:e7:5d:4e:35:a5:1b:56:
08:e4:68:f6:67:aa:6d:54:d4:4d:13:a3:52:66:79:
af:f6:f7:79:db:87:eb:03:62:6c:83:59:d3:14:f0:
b0:86:31:8f:64:ae:9d:58:c9:dd:cc:c0:e1:f2:6b:
d8:22:a1:47:76:8f:d5:8d:16:11:49:3c:e6:11:e4:
45:33:77:23:ec:76:3f:ea:6d:43:3b:ae:32:b2:d1:
0b:cd:92:25:ed:33:93:ed:aa:e4:13:b4:d7:95:43:
9f:c5:f1:fd:6d:cd:ab:0f:41:de:4f:49:63:f7:9b:
0b:08:91:f1:a9:da:a9:46:bd:63:c1:d9:48:87:97:
e0:0b:cc:be:47:84:c0:48:d5:53:72:e6:d8:d6:91:
e6:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:22:7D:52:98:DA:AF:E7:B2:D2:3E:9C:88:D5:1F:17:D8:3A:A2:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/008ecab5-1d8d-3d77-88c0-4d4d9d70afe6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
X509v3 Authority Key Identifier:
keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
sbgp-ipAddrBlock: critical
IPv4:
170.114.16.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:b4:4c:7a:45:e0:95:17:6b:be:2a:90:0e:6d:cd:c5:b1:ad:
ad:2f:87:09:12:8a:5c:55:03:19:5a:22:93:22:15:4a:c2:09:
a4:63:64:53:4a:92:ea:02:8b:d9:02:ac:33:6b:6a:8b:15:02:
cb:06:a8:ca:2e:4e:9b:a7:98:16:5b:f1:67:5b:50:45:d9:5f:
52:b7:a4:af:49:31:5e:5f:00:33:af:8e:d4:43:55:cb:ae:7a:
7d:0b:4f:56:e9:d2:a9:6d:43:88:3e:43:fe:f8:5e:5c:47:07:
6e:8d:47:85:4d:10:c0:0d:e9:f7:f7:62:6b:d2:35:80:14:2c:
cc:8e:c7:36:d0:0c:e7:84:61:2e:70:8a:93:70:79:35:4f:e2:
22:94:fb:09:93:d9:5d:4b:bd:c8:2b:90:4e:c6:ff:27:e4:ab:
d9:31:2a:dc:37:e3:7d:30:99:b7:bb:45:f0:12:69:51:ce:6c:
1f:8d:8f:1a:b5:14:27:1b:85:0b:cd:ea:b5:40:f7:5c:c9:d9:
2d:e5:5f:1e:5a:e8:ef:e9:1b:e4:18:aa:7f:b2:37:16:5e:bd:
fc:fe:49:49:7c:0e:6e:d7:8c:4a:bf:fb:c2:a6:3b:17:28:98:
16:a4:77:ea:f9:df:66:6d:cc:60:3c:fb:11:f5:17:9e:48:70:
3b:1e:41:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 22:19:47 2025 by rpki-client