Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/867ba8c6-b8e0-3c0d-b890-3ac9aa19524a.roa
File: 867ba8c6-b8e0-3c0d-b890-3ac9aa19524a.roa (raw, json)
Hash identifier: xpC/JhFfoZN3NHyNg7pBxG//ODUv9wtTHuTVc0d00og=
Subject key identifier: FA:B3:F7:A2:87:02:E3:39:50:A5:70:B6:7B:7F:0F:E0:94:E6:58:2C
Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial: 010D0C9F43285847E78F61CD92C9B85E2C4CFF80
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/867ba8c6-b8e0-3c0d-b890-3ac9aa19524a.roa
Signing time: Sun 17 Nov 2024 02:00:28 +0000
ROA not before: Sun 17 Nov 2024 02:00:28 +0000
ROA not after: Sat 15 Feb 2025 02:00:28 +0000
asID: 14618
IP address blocks: 170.114.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e7:8f:61:cd:92:c9:b8:5e:2c:4c:ff:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
Validity
Not Before: Nov 17 02:00:28 2024 GMT
Not After : Feb 15 02:00:28 2025 GMT
Subject: CN=8d6ba9b2-f44f-43d4-abd2-37d49f393dcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5d:58:79:19:3b:b1:2b:dc:e0:37:d4:89:6c:
b3:da:8c:23:88:b5:ca:28:cd:33:72:9e:6d:01:54:
03:c4:0b:7b:77:01:62:84:ac:8b:04:b0:c1:73:ea:
29:65:bd:80:59:89:89:49:2b:a7:30:38:73:8c:e9:
64:72:d5:e9:27:08:3f:c3:69:dc:68:9d:00:20:46:
c4:03:00:2a:0b:70:3b:c2:8a:d2:88:e0:1a:f4:29:
2a:1e:a5:02:26:8e:18:d9:f8:41:31:7a:ac:05:86:
82:ee:3e:65:45:2e:35:4f:93:56:2c:10:c2:fc:91:
65:ca:7d:28:a0:a3:ed:6e:eb:be:23:e1:74:f3:86:
34:4b:46:99:c7:a9:1a:be:b7:b5:e4:de:cf:29:d9:
02:0e:e8:e0:66:5f:dd:a3:63:63:c1:26:b5:4d:ba:
92:c9:29:f6:28:53:ca:b5:59:54:d5:79:15:ca:8e:
fa:8f:ec:d2:c0:18:a5:a6:af:22:41:ef:da:5e:3e:
b1:4d:e6:6e:c2:25:ec:03:c4:bd:c0:3e:9a:1c:2d:
a0:a8:52:61:fa:0b:72:a3:c8:0a:41:db:5e:6d:f2:
7b:bf:3f:19:7d:cc:19:86:40:ff:21:5c:19:30:8e:
22:71:e0:4d:48:3b:c8:12:09:25:d6:0e:ac:99:00:
8a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B3:F7:A2:87:02:E3:39:50:A5:70:B6:7B:7F:0F:E0:94:E6:58:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/867ba8c6-b8e0-3c0d-b890-3ac9aa19524a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
X509v3 Authority Key Identifier:
keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
sbgp-ipAddrBlock: critical
IPv4:
170.114.61.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:de:1e:be:cb:a8:33:e0:ae:92:35:07:4e:59:49:b1:ee:e0:
d2:27:9c:3c:2b:ea:8f:a8:54:fe:31:92:28:cb:48:59:2b:9e:
93:d4:53:c4:22:a9:7f:1d:23:4f:97:a4:d3:82:e5:97:68:a5:
53:61:7d:9c:53:cc:0b:83:da:df:93:cc:f8:ca:d6:16:81:4b:
b8:2e:b9:ba:b6:0a:0e:1a:a9:55:b3:f2:1f:9e:71:78:91:8c:
17:4c:be:de:92:01:24:93:b4:e9:5b:26:d0:fd:44:81:09:02:
1e:b4:1a:09:7a:89:93:86:73:48:44:e6:91:7f:af:69:f5:c7:
1e:02:51:91:19:8d:d9:1f:e5:63:33:de:76:94:dd:89:1e:a9:
94:dc:e0:64:e4:ad:41:2f:0d:f2:8b:9e:0c:94:a2:32:a1:7a:
c4:fd:f3:08:10:04:86:a5:1b:20:cb:a0:cf:77:96:a0:7c:ae:
03:9b:06:b1:5b:dc:f0:90:1b:79:35:e3:bb:ce:cf:ea:aa:0d:
76:e3:8a:bd:7b:f9:13:a8:14:3c:3b:0a:38:3e:53:fe:92:90:
0a:e1:fc:96:27:0a:2f:70:40:94:d3:c9:9e:42:f3:db:82:72:
a0:dd:3a:89:60:1b:f8:99:de:09:83:7c:bb:3c:bd:dd:ca:f6:
56:db:e1:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:44:13 2025 by rpki-client