Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/587fa17e-6074-36b9-a166-4b4cac46f9a8.roa
File: 587fa17e-6074-36b9-a166-4b4cac46f9a8.roa (raw, json)
Hash identifier: 1J67OG7Q5y1vAxc/BXcPa3jj8dV6cs4lRngcSYdOAYM=
Subject key identifier: D3:03:CD:CD:50:81:55:73:F2:79:9D:7C:3F:D3:34:85:68:43:FA:0A
Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65
Certificate serial: 010D0C9F43285848C150D224E33EC5A3E6D02580
Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/587fa17e-6074-36b9-a166-4b4cac46f9a8.roa
Signing time: Mon 03 Feb 2025 02:00:39 +0000
ROA not before: Mon 03 Feb 2025 02:00:39 +0000
ROA not after: Sun 04 May 2025 01:00:39 +0000
asID: 213122
IP address blocks: 170.39.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c1:50:d2:24:e3:3e:c5:a3:e6:d0:25:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65
Validity
Not Before: Feb 3 02:00:39 2025 GMT
Not After : May 4 01:00:39 2025 GMT
Subject: CN=8a740806-e41f-4734-8482-45a8385f3817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7f:6e:9a:30:ad:81:b6:9b:2c:38:51:23:28:
02:79:4a:fc:3b:1b:90:ab:93:ad:aa:7a:72:d5:27:
db:d9:3c:5e:07:38:53:bf:af:d0:25:94:bb:e0:75:
5f:0a:28:3c:68:eb:5b:70:d2:78:ae:1f:66:ba:1c:
30:81:1f:c6:30:66:1a:ba:b0:49:53:33:8e:24:81:
cc:88:32:94:86:92:a6:94:00:cd:bc:42:f1:9a:ea:
f5:f3:72:93:6f:ea:15:43:2e:a3:ca:2c:18:6f:06:
eb:ac:0b:e8:82:64:90:c8:2e:a7:7b:a1:05:9d:8e:
c5:b9:55:ed:18:4c:42:3c:6d:db:1d:fa:86:f9:c5:
7e:97:f4:72:95:4a:4a:d5:ec:92:ad:71:1b:0c:30:
24:ca:71:d4:fc:99:00:e6:69:6a:7c:ee:48:75:42:
fc:f5:d9:c2:ee:c9:51:43:3d:e3:19:19:20:6f:a4:
2e:d1:87:6c:55:bb:39:fb:bb:48:b0:bd:e2:ee:9d:
43:3c:e5:d7:e5:38:38:b2:97:ea:84:ba:27:13:0f:
dc:7a:cc:f9:6f:45:02:65:04:ba:0b:0e:8d:37:ef:
de:41:bc:c0:c9:e7:2d:15:25:0b:2f:07:54:57:c8:
e6:0b:6a:33:9d:a0:47:dc:d4:f7:d9:0a:45:fe:aa:
40:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:03:CD:CD:50:81:55:73:F2:79:9D:7C:3F:D3:34:85:68:43:FA:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/587fa17e-6074-36b9-a166-4b4cac46f9a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl
X509v3 Authority Key Identifier:
keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
sbgp-ipAddrBlock: critical
IPv4:
170.39.185.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:17:63:5e:b4:09:71:0a:04:9a:22:37:b2:eb:4b:38:17:d6:
6d:23:d0:a2:fd:6b:a8:0b:ba:21:29:28:43:10:22:2a:c5:cb:
32:2d:bf:77:ff:2d:e5:bd:65:1e:e5:47:1d:e9:6a:38:43:fc:
2d:10:96:9c:6d:41:35:a3:74:8a:ed:c4:9f:4c:ec:e2:49:d9:
86:7f:b6:1f:4c:c8:e6:16:c5:37:9f:15:e0:ad:eb:11:41:08:
2b:bb:0c:f4:df:a2:66:e8:ae:50:95:ae:ab:5a:15:89:4b:86:
ed:54:f5:08:95:c6:ca:55:21:1b:55:a6:3c:46:ff:fe:c2:3a:
cc:ed:7a:05:cc:20:53:94:ab:3e:ce:fe:9b:32:97:46:c1:66:
0b:a7:95:3e:f9:ea:97:ea:7f:de:20:24:ae:0b:5d:54:f7:26:
f9:4d:5e:bf:10:e3:91:62:ea:db:2c:9b:89:df:ef:75:b1:ea:
b8:58:ed:93:c3:b9:4b:7d:86:0a:42:ef:56:e5:3f:95:41:bf:
33:7f:2d:b0:1c:a9:8a:78:97:65:22:18:17:c9:6c:bd:f7:5f:
69:60:06:1c:7b:1e:f1:ca:4e:4b:7d:24:1e:65:ac:5d:c4:15:
e8:08:05:e5:2e:71:ea:c9:f4:18:dd:90:d6:a9:bf:a3:9b:15:
58:d8:55:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 05:29:53 2025 by rpki-client