Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/ab602fae-0554-3f41-b770-8c07c3b7f6f5.roa
File: ab602fae-0554-3f41-b770-8c07c3b7f6f5.roa (raw, json)
Hash identifier: qX8A24+gNcpXN4ufF7USwnzLNm0dw9eo0UKnAr6XrIg=
Subject key identifier: 1D:51:04:12:FD:08:1B:4A:EE:71:43:04:90:CD:3D:1B:2A:EC:72:05
Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial: 010D0C9F432858486EF5BB16BA8C26670C893640
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/ab602fae-0554-3f41-b770-8c07c3b7f6f5.roa
Signing time: Sat 04 Jan 2025 14:00:51 +0000
ROA not before: Sat 04 Jan 2025 14:00:51 +0000
ROA not after: Fri 04 Apr 2025 13:00:51 +0000
asID: 16509
IP address blocks: 170.114.44.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6e:f5:bb:16:ba:8c:26:67:0c:89:36:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
Validity
Not Before: Jan 4 14:00:51 2025 GMT
Not After : Apr 4 13:00:51 2025 GMT
Subject: CN=c25f5227-757a-4834-96a1-5f2ee87ad635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:98:ae:0a:7b:3f:2e:ad:e6:20:4a:5a:9e:e1:
9e:fe:c4:23:ae:ee:83:3b:df:03:2c:7e:8f:0f:4b:
74:20:a7:9a:20:3d:2d:a0:9b:bb:66:59:de:df:60:
0f:2c:82:ae:e3:ec:d2:f0:17:58:0f:c5:56:d6:75:
66:78:01:e1:c1:76:76:ec:e4:69:e1:73:c3:20:5d:
9e:57:2e:f9:3d:88:f6:9f:23:07:2a:5f:66:a4:75:
85:77:5d:08:da:d5:3f:ba:87:31:22:93:a9:a7:14:
36:45:88:f4:c7:8f:69:92:f6:c5:ed:1d:4c:a9:67:
7a:e5:f7:5c:fd:ff:f8:bf:16:7c:ee:8a:53:fe:9d:
b0:2c:f6:7f:d0:bf:98:63:ef:b1:5a:de:e4:eb:43:
04:7e:0f:42:d3:9f:65:d9:fc:56:39:c0:85:a9:4e:
4a:c5:76:72:ac:0c:22:73:97:f1:28:76:56:83:62:
1a:62:4c:6c:4b:fe:6a:c7:19:9d:35:f5:3d:ac:24:
b6:d3:3c:26:95:ac:56:1a:c8:89:0c:51:70:8c:85:
7b:f2:f6:67:c7:b0:82:13:c0:2b:9a:d2:03:1e:ae:
37:b7:82:26:69:42:36:50:31:ed:bd:11:02:9f:ca:
49:3d:12:d2:b8:cf:6e:30:57:f2:d5:2c:df:5a:f5:
84:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:51:04:12:FD:08:1B:4A:EE:71:43:04:90:CD:3D:1B:2A:EC:72:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/ab602fae-0554-3f41-b770-8c07c3b7f6f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
X509v3 Authority Key Identifier:
keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
sbgp-ipAddrBlock: critical
IPv4:
170.114.44.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:2e:94:80:b7:1e:8b:3f:ea:5f:e3:ea:cf:5e:a6:00:50:a8:
a6:31:70:9c:2c:e0:46:fe:7a:88:0d:e9:93:ef:e4:80:6e:1a:
8a:60:89:e8:c6:ee:57:e0:61:9f:11:7b:8c:7c:76:cf:2d:89:
be:52:7c:dd:b7:e7:9e:d7:95:b9:17:43:ad:bb:a4:de:71:55:
61:6b:c6:dd:bb:8f:5c:d6:34:dc:80:86:f4:77:77:96:8f:4b:
ef:30:5d:19:e6:86:87:4d:9e:75:4b:e8:80:84:5f:88:5f:5c:
1d:74:7f:84:ad:0d:19:da:fe:95:b2:d0:e0:6a:fe:91:ec:82:
ca:eb:9d:29:6f:e9:3b:3f:45:04:03:b6:c5:8c:f7:c2:75:ec:
60:98:7c:fe:61:5a:f4:d3:98:72:6e:72:03:2c:44:02:b2:25:
da:1b:b2:48:f6:c1:ef:f1:e4:59:75:72:8a:b4:21:ce:27:ce:
a3:a9:f4:6c:1d:6a:8d:96:4e:2e:ea:44:1f:be:27:a8:d5:7d:
e6:ed:a9:11:f4:ba:17:4c:d9:5d:6c:b4:d0:ea:df:b4:65:86:
11:2e:ab:5d:79:54:5f:65:6f:dc:b8:ad:52:f8:10:d8:ac:23:
b8:2d:af:02:2a:94:8f:e2:6a:49:0a:8d:95:57:c3:63:d2:10:
7a:8d:ce:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:30:15 2025 by rpki-client