Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/020f1c05-ca1f-3b28-87d3-9401bf58c0b2.roa
File: 020f1c05-ca1f-3b28-87d3-9401bf58c0b2.roa (raw, json)
Hash identifier: LB2CaQQyP8R0XExg38xyrV3lZGtGLm2k5k1rvi8TU9U=
Subject key identifier: B1:A8:5C:3E:98:86:D8:C5:54:FA:27:3C:38:E6:3F:AC:0E:A1:7B:5E
Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial: 010D0C9F4328584832F035B20DB07096C60CD480
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/020f1c05-ca1f-3b28-87d3-9401bf58c0b2.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 16509
IP address blocks: 170.114.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:35:b2:0d:b0:70:96:c6:0c:d4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=cd426c77-33d7-4c8c-a1ac-ea350cc7275d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5b:0b:c7:f3:9a:d9:f8:0c:f0:05:b8:f2:c7:
25:ca:b5:21:96:8a:15:ff:a4:e4:ce:01:cd:c0:04:
81:6b:db:54:92:03:3f:dc:04:a6:7f:e7:a6:fe:a2:
09:2d:25:93:b8:be:2d:12:6e:a2:ed:6f:cc:bc:86:
db:b1:5b:b1:7c:90:c7:05:09:1d:86:f4:9f:0e:ea:
80:92:00:93:03:0d:f6:3b:83:d5:14:b3:c4:73:fc:
d3:5b:d6:b9:c5:5d:73:a3:81:c7:f9:50:ae:79:40:
32:18:e0:b3:84:d0:4d:fa:e8:fc:19:cb:ef:09:ca:
5d:70:a7:b8:6f:8a:2d:68:ba:ca:bb:b7:8b:07:a0:
f3:fd:e1:24:50:ee:1b:c7:8f:04:83:63:68:95:fa:
87:d0:09:01:7d:b9:ff:8d:dc:6c:02:7d:d8:31:4c:
72:6d:05:df:19:69:12:d9:f6:f7:e3:a1:5b:af:ab:
b5:ee:83:ab:77:ce:61:b4:38:8b:76:70:29:08:48:
f1:70:d2:07:1e:63:a2:7f:2e:b0:10:ac:07:ef:8d:
62:ce:cb:ee:63:fe:12:c7:62:33:e9:0a:7b:cb:9d:
30:26:02:a4:79:9d:84:e6:b4:a2:37:c2:e9:8a:9f:
84:ac:ea:33:b1:02:8d:ad:05:0f:10:47:48:bc:d4:
63:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:A8:5C:3E:98:86:D8:C5:54:FA:27:3C:38:E6:3F:AC:0E:A1:7B:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/020f1c05-ca1f-3b28-87d3-9401bf58c0b2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
X509v3 Authority Key Identifier:
keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
sbgp-ipAddrBlock: critical
IPv4:
170.114.83.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:66:fd:4c:4d:ff:fe:7b:26:dd:87:b9:ac:ff:fd:21:19:9e:
4e:bc:c3:29:dc:ed:3f:6f:de:4e:fb:1e:5c:f4:a4:09:53:3d:
e0:4f:eb:c3:b9:0a:6d:fb:67:0c:6e:3f:20:07:59:97:84:85:
22:7f:37:6b:2e:36:53:b3:6a:23:29:e5:00:4a:21:ab:4e:22:
91:f7:63:ea:f3:c5:97:7f:4e:eb:97:7a:03:1e:35:ce:ce:bf:
15:f7:66:d3:69:ba:9e:33:07:02:ea:10:a3:20:6a:b2:e5:73:
4d:be:70:ec:cf:73:cf:68:32:38:39:03:0a:ba:00:5e:30:f8:
06:c5:03:7b:f4:7a:77:46:ad:3b:de:9f:99:94:8b:2a:53:9d:
90:22:13:a3:09:62:95:36:60:dc:3a:b2:bb:18:5a:cb:9a:11:
6e:c1:c5:76:3a:70:22:fe:df:59:bf:14:fa:5d:c6:68:5c:6c:
6a:93:ef:3a:57:18:e3:e6:81:36:fe:44:77:71:b0:c9:f9:69:
ee:0e:91:20:1a:6a:d6:83:ac:10:98:5e:a5:d3:51:80:0b:9b:
a8:35:29:ae:7d:63:92:21:66:d6:e5:66:63:de:28:ac:df:62:
a4:42:b5:6d:00:bc:b7:b8:33:6a:f3:58:2b:9a:a4:ad:9c:7a:
e0:c5:47:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 18:10:44 2025 by rpki-client