Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/5c3108b3-4900-35c3-86a1-e25092452588.roa
File: 5c3108b3-4900-35c3-86a1-e25092452588.roa (raw, json)
Hash identifier: /5V1mcyP2/+2b2hrZH3Qh8ehgBkho92wrIwsESRC5ls=
Subject key identifier: 9E:1B:89:D7:02:91:37:99:5B:44:67:8D:D0:B2:58:BF:0A:21:DD:40
Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65
Certificate serial: 010D0C9F43285848C150D04A856BB7F175ABB000
Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/5c3108b3-4900-35c3-86a1-e25092452588.roa
Signing time: Mon 03 Feb 2025 02:00:39 +0000
ROA not before: Mon 03 Feb 2025 02:00:39 +0000
ROA not after: Sun 04 May 2025 01:00:39 +0000
asID: 931
IP address blocks: 170.39.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c1:50:d0:4a:85:6b:b7:f1:75:ab:b0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65
Validity
Not Before: Feb 3 02:00:39 2025 GMT
Not After : May 4 01:00:39 2025 GMT
Subject: CN=bfde4e36-9a8d-4f1d-ab4e-f500253caf1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:09:8c:55:b8:1f:c7:c8:a0:ad:f9:31:8c:b6:
88:6b:79:98:50:91:90:4a:48:d5:25:52:09:87:04:
22:2f:2b:5e:0b:87:73:69:2a:15:0a:0b:64:12:18:
3e:bc:f4:ed:3c:f1:e6:69:ce:0e:86:56:8a:a7:2a:
15:04:81:69:fe:90:97:5b:5b:1f:26:4b:6d:41:b3:
db:7b:20:fd:a3:17:73:83:89:48:da:3b:6e:a0:9f:
d2:28:55:99:bb:40:ac:04:ad:aa:f3:99:f1:93:42:
6e:bc:30:0c:e3:b3:96:0b:b3:39:43:33:6b:3a:8d:
3d:c6:23:d5:ff:09:a4:aa:78:d7:98:10:b3:fe:7c:
0f:fb:ac:06:ec:39:37:6a:e9:e5:dd:ee:72:0e:c8:
45:1b:a8:f4:4b:56:41:3c:81:54:02:c2:9e:0e:0c:
7d:ea:4b:a2:47:86:94:22:a2:72:c3:e0:ef:80:09:
6a:17:36:df:5a:55:d5:c2:da:28:af:9c:0c:d2:1c:
0d:52:91:ab:27:7a:e8:8a:bb:b4:1c:e9:8a:35:7e:
e2:f9:4c:0a:d1:be:33:5e:ca:ca:46:65:1c:bb:6b:
ca:5f:ca:d7:58:ab:14:d8:95:b8:6c:ba:17:0f:0e:
ea:32:40:40:3f:14:04:f2:71:1e:4a:8e:1b:f1:f8:
c5:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:1B:89:D7:02:91:37:99:5B:44:67:8D:D0:B2:58:BF:0A:21:DD:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/5c3108b3-4900-35c3-86a1-e25092452588.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl
X509v3 Authority Key Identifier:
keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
sbgp-ipAddrBlock: critical
IPv4:
170.39.187.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:02:d8:2f:5f:6b:df:70:e0:ca:2d:42:d1:23:10:be:6f:34:
5e:3c:b8:13:d2:a8:a4:e2:7d:c5:6c:01:83:cb:18:e3:9c:a2:
24:78:d6:bd:c0:5b:e7:f0:04:ef:a6:91:22:68:53:03:82:4f:
74:7b:24:bf:51:ec:d6:08:fb:b9:f5:26:a7:d8:9c:e2:8d:58:
2b:f9:86:04:62:39:85:6c:45:32:68:d3:66:9e:71:5e:ef:84:
d5:d3:e3:8c:cc:f7:b7:3b:cc:5b:d4:12:fd:9a:38:a1:19:09:
e0:a7:e6:ad:51:ea:6a:1d:ba:1f:dd:1f:a6:d4:18:02:5e:0f:
fb:72:10:9b:43:30:40:84:ba:39:df:23:64:93:89:3c:79:7d:
80:ae:73:e4:fc:a5:c2:8e:ea:b3:d8:2c:28:8b:b2:37:38:ec:
86:dd:0a:c0:3f:f0:6c:f6:cd:23:75:17:03:ad:15:33:26:ea:
44:ef:03:99:42:e9:ff:ac:fb:60:0a:26:bb:22:4b:85:05:1a:
15:03:9d:f0:27:33:6c:0b:72:0a:4c:06:7e:a8:91:8e:38:69:
e0:24:c6:c3:78:63:c3:59:41:72:20:65:49:68:e7:08:fb:67:
45:f3:09:d6:af:2c:c0:6e:14:e7:14:c4:33:01:fd:a6:d5:46:
8a:96:87:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:58:41 2025 by rpki-client