Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/7d4aafc0-f450-3f8a-b6ea-e8ce2dc38232.roa
File: 7d4aafc0-f450-3f8a-b6ea-e8ce2dc38232.roa (raw, json)
Hash identifier: Usav9wTWogLWMF3NNo1NF78xXdG3jffOFHbbydcJ39s=
Subject key identifier: A0:86:4A:60:23:9E:F0:26:7B:B2:E1:BC:4F:14:6D:47:95:30:92:87
Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial: 010D0C9F4328584877E45461402F7706F902F580
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/7d4aafc0-f450-3f8a-b6ea-e8ce2dc38232.roa
Signing time: Tue 07 Jan 2025 18:48:08 +0000
ROA not before: Tue 07 Jan 2025 18:48:08 +0000
ROA not after: Mon 07 Apr 2025 17:48:08 +0000
asID: 16509
IP address blocks: 170.114.92.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:77:e4:54:61:40:2f:77:06:f9:02:f5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
Validity
Not Before: Jan 7 18:48:08 2025 GMT
Not After : Apr 7 17:48:08 2025 GMT
Subject: CN=347cae9b-53f1-4d33-a044-bec54923fe16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:62:dd:68:4b:82:01:63:47:68:0c:4b:4c:e4:
13:1f:63:14:d7:48:bd:f0:ae:92:60:b8:06:e4:d5:
a3:21:0d:39:32:35:45:a8:8d:a9:15:5d:89:20:19:
8f:ed:be:5e:15:45:cf:37:29:2c:7e:b4:47:73:e0:
a9:ce:ef:e8:93:25:72:b8:80:94:e0:b3:71:1a:ea:
f9:a1:f3:8e:d5:ed:c8:13:99:ab:b0:a0:42:c7:97:
1d:46:27:2e:3e:65:22:ba:7a:54:ec:85:d7:09:93:
67:28:62:b6:00:61:51:d2:14:b9:e8:3e:ac:b1:ea:
8f:d4:39:3e:88:cb:fa:a5:ff:04:3b:f0:fc:e1:d9:
e8:2d:ed:1b:fe:33:f8:49:02:33:e4:05:dd:50:dc:
c4:e7:a2:fa:5d:e9:d5:f2:4d:42:6d:4a:0c:a6:9d:
88:40:4b:29:07:ca:02:b5:cd:95:c6:7e:93:62:1f:
1c:33:d8:60:d4:7c:f8:bb:9a:92:06:42:50:0e:a6:
7e:6e:aa:79:29:d4:47:d3:63:c5:3e:db:2d:ed:2b:
b6:7e:cc:97:63:94:7b:13:90:ec:e3:5d:fa:7c:da:
ba:6a:8a:f2:a6:3e:5e:ec:3c:d0:2a:20:16:78:03:
94:36:b9:ca:17:6a:33:c2:dd:af:21:11:1d:47:f7:
81:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:86:4A:60:23:9E:F0:26:7B:B2:E1:BC:4F:14:6D:47:95:30:92:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/7d4aafc0-f450-3f8a-b6ea-e8ce2dc38232.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
X509v3 Authority Key Identifier:
keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
sbgp-ipAddrBlock: critical
IPv4:
170.114.92.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:10:a8:b2:dc:00:00:fe:3c:ea:79:aa:72:0b:85:27:b4:f7:
d1:ef:f1:8c:3c:a4:16:a8:e1:1e:8b:78:bf:3f:ac:a7:c3:df:
21:43:5c:ae:93:d2:c0:e1:7c:d8:c0:3f:5e:0b:31:37:85:48:
1e:15:2c:62:ab:f1:9e:86:4e:88:83:fb:53:42:a0:a2:04:2e:
3b:14:56:6d:4d:28:f6:ce:f0:5a:b9:38:a8:21:5a:6a:d9:ec:
89:30:38:b8:8d:61:15:9d:e5:f4:f0:b4:4b:04:e8:49:37:e5:
4a:5a:3b:16:e5:0b:83:cf:36:26:17:51:be:f5:b2:0a:40:ff:
3e:84:ae:9e:eb:c7:99:6e:a5:a3:0a:43:13:5c:2c:ef:68:86:
ba:89:2a:de:f6:3d:f0:21:d3:28:1f:df:2a:9d:83:12:9c:0e:
92:c1:5f:3a:02:aa:f6:89:b0:6f:0e:07:ba:db:eb:e4:c4:5a:
b0:d4:1b:94:d8:78:65:35:a0:f6:9b:05:73:1d:0d:8c:27:0a:
c8:f5:7e:1a:55:08:8c:47:a3:e9:2d:ec:f4:87:05:b8:4e:40:
49:1d:12:a1:72:7a:29:15:89:0a:80:41:ad:1f:66:f6:2a:3c:
85:d9:e4:ff:92:8f:aa:da:61:30:ee:2b:dc:1e:7d:55:92:d9:
c7:4e:57:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:27:32 2025 by rpki-client