Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/33371c79-8727-3add-b158-459a2b069489.roa
File: 33371c79-8727-3add-b158-459a2b069489.roa (raw, json)
Hash identifier: vvVUtmXKheJLqO2lB8sjEoxrn0BdTfUhbCExC4KuECk=
Subject key identifier: CB:81:87:3B:89:DA:06:78:9C:E6:68:6D:1E:73:D1:3F:0C:E8:BF:E2
Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial: 010D0C9F4328584858A054C0A2ACB8B0DF48FC60
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/33371c79-8727-3add-b158-459a2b069489.roa
Signing time: Fri 27 Dec 2024 14:00:52 +0000
ROA not before: Fri 27 Dec 2024 14:00:52 +0000
ROA not after: Thu 27 Mar 2025 13:00:52 +0000
asID: 16509
IP address blocks: 170.114.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:58:a0:54:c0:a2:ac:b8:b0:df:48:fc:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
Validity
Not Before: Dec 27 14:00:52 2024 GMT
Not After : Mar 27 13:00:52 2025 GMT
Subject: CN=4e869154-70e4-4b34-afdb-d93c6bd38cb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:37:09:5b:cf:66:88:f6:dd:83:8e:51:fd:fd:
32:86:56:54:2a:20:18:b5:3e:b0:96:cb:ee:e4:2f:
71:33:60:3f:44:d8:7d:50:34:55:c6:10:9a:3c:8b:
23:3c:c9:5c:2d:4b:4a:53:d3:e2:6e:da:9a:a2:f3:
66:2f:bb:3e:18:98:76:01:7f:17:63:17:9c:eb:b0:
4b:d7:62:af:73:a7:10:a7:c9:5a:cb:53:18:37:94:
87:cc:8a:7c:c3:67:35:4c:26:a6:6d:8a:bb:cc:bf:
0e:df:33:75:ea:d4:2a:ef:21:f2:26:65:0d:4a:11:
2b:c4:33:a8:4d:72:c7:38:21:b1:10:30:25:f4:fa:
ee:d1:c5:df:3e:20:d7:3d:71:0d:5c:e9:d1:ed:e5:
60:80:ca:c8:c6:b7:17:84:fe:0a:ae:19:a8:d2:38:
fb:ff:50:02:3c:aa:36:3e:a7:59:f4:60:ad:df:9b:
b5:25:5a:28:45:97:21:22:e5:63:0a:b3:63:36:34:
fc:ab:db:e0:5f:aa:47:f5:b8:ed:36:04:18:db:4e:
eb:c5:e5:ee:37:f5:07:88:cc:47:0d:eb:1b:5f:1b:
86:d4:fe:ee:a7:c5:9e:17:a9:63:c9:09:d6:36:94:
a6:f5:22:fa:38:0b:df:e0:4f:24:49:12:99:37:88:
77:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:81:87:3B:89:DA:06:78:9C:E6:68:6D:1E:73:D1:3F:0C:E8:BF:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/33371c79-8727-3add-b158-459a2b069489.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
X509v3 Authority Key Identifier:
keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
sbgp-ipAddrBlock: critical
IPv4:
170.114.40.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:4f:d4:cf:38:a8:a2:4e:c5:40:40:f8:44:dc:8b:59:c0:0f:
4b:67:19:0a:d5:04:90:0c:d3:61:3b:c4:90:6c:fa:1b:a0:94:
fb:83:3a:3a:54:a9:7b:f3:4d:ad:54:8a:81:f7:ac:9e:96:5e:
76:15:d0:f1:e5:fb:ee:50:a9:ff:cb:88:78:0a:d7:4d:83:d2:
80:21:32:10:7d:35:7d:33:66:27:85:80:97:36:4d:5a:91:ab:
fc:51:4c:db:d9:da:89:ea:b2:a8:7d:44:2b:e1:87:40:27:e9:
cd:b4:3b:9c:e8:7a:10:d7:03:88:2a:79:42:55:94:db:4b:ac:
12:50:37:89:00:f5:ce:09:4d:dc:af:f4:02:1a:a9:4b:4b:63:
67:8b:7e:0b:b1:4e:4b:8f:21:b8:7b:ce:b7:7c:79:6b:85:39:
57:6d:86:3e:74:12:9f:15:99:fc:8f:b1:f1:bd:11:67:27:c3:
85:df:3d:1d:82:0d:27:72:99:80:fb:db:57:e7:34:19:41:2c:
49:6e:71:4c:38:5b:36:cd:22:ab:af:3c:3b:27:4b:7e:2f:8e:
0b:05:72:65:6a:b7:4b:2c:65:84:00:6e:75:4e:70:6d:07:10:
e3:5d:de:dc:29:0c:bd:17:1c:71:9e:c6:7d:74:43:06:d7:0a:
55:1d:c5:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:45:12 2025 by rpki-client