Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/30f8881a-7d17-3ea7-a77f-2b0e42f8b0f5.roa
File: 30f8881a-7d17-3ea7-a77f-2b0e42f8b0f5.roa (raw, json)
Hash identifier: QeL+a/OXNRsvn+mMbMN5PWvynNkHIQU0ER5o8bOU6Ck=
Subject key identifier: C5:D6:DE:81:04:C2:01:31:4A:96:56:AD:9D:D5:14:06:E1:C4:24:77
Certificate issuer: /CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4
Certificate serial: 010D0C9F432858491ED6D6F110E7B39378B500D8
Authority key identifier: D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/30f8881a-7d17-3ea7-a77f-2b0e42f8b0f5.roa
Signing time: Sat 08 Mar 2025 14:00:52 +0000
ROA not before: Sat 08 Mar 2025 14:00:52 +0000
ROA not after: Fri 06 Jun 2025 13:00:52 +0000
asID: 16509
IP address blocks: 170.176.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1e:d6:d6:f1:10:e7:b3:93:78:b5:00:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4
Validity
Not Before: Mar 8 14:00:52 2025 GMT
Not After : Jun 6 13:00:52 2025 GMT
Subject: CN=675caf1b-75ed-43a6-b62c-54923a07e89d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3c:d8:e1:9e:6f:e9:af:7e:45:d9:6c:75:6a:
79:7d:a0:e7:4f:ca:ef:96:3f:d4:24:60:e9:32:45:
bf:b5:bf:97:fe:6e:b1:b2:2f:6b:2c:04:c3:6e:8d:
d3:84:7b:81:db:e1:65:28:55:a3:8d:9c:4d:12:03:
07:6c:97:76:46:32:8e:c3:fd:14:39:08:23:e2:7f:
ca:66:bb:b8:be:1e:c3:34:01:2f:74:18:e6:c2:89:
9a:4f:53:5e:c6:e9:9e:34:17:1a:27:cf:26:53:98:
11:02:58:55:c9:8d:21:aa:4a:f3:55:19:74:79:93:
56:72:7d:17:9e:43:bd:31:dc:e1:03:af:25:a0:08:
ae:98:28:24:d8:c9:a5:63:5d:30:11:1b:3e:ab:80:
e9:b7:48:b0:70:fa:1f:bf:7f:89:61:8e:5d:d3:7f:
31:70:ed:03:ec:18:f1:60:10:31:ea:c8:32:1d:f9:
8c:ce:07:8a:bf:51:47:6d:f3:cf:c8:f2:1f:a8:bb:
fe:7b:65:2a:02:0e:80:5c:2c:87:15:22:15:39:37:
21:f2:8c:b4:28:8a:a8:8e:48:57:6b:ab:61:3d:20:
69:41:87:70:fa:ca:ca:ca:c3:f8:66:b3:ef:3c:ab:
0b:78:69:17:e9:52:95:fa:b5:31:73:67:d8:97:b8:
f0:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:D6:DE:81:04:C2:01:31:4A:96:56:AD:9D:D5:14:06:E1:C4:24:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/30f8881a-7d17-3ea7-a77f-2b0e42f8b0f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl
X509v3 Authority Key Identifier:
keyid:D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer
sbgp-ipAddrBlock: critical
IPv4:
170.176.129.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b6:54:3f:28:5f:9f:4a:0c:23:c6:09:14:73:64:3d:2d:29:ec:
d5:88:72:2b:6e:13:5c:19:ab:77:f9:51:24:fa:c9:d9:d0:3e:
ec:81:07:30:ac:4b:80:b1:c4:4b:bd:ca:4e:81:38:1b:f7:e2:
b2:c9:e4:1c:53:a9:fb:84:3f:40:8d:59:88:76:c5:75:c6:80:
12:e6:9f:61:10:4c:13:31:46:48:ab:5e:e2:53:7e:d7:8b:e8:
ff:7b:76:eb:9d:84:c1:9b:d9:2e:d2:16:0c:9a:68:ac:98:d1:
b1:49:fb:d4:3f:d5:bd:63:74:02:d6:72:1b:ea:33:16:72:ef:
0c:6f:03:37:49:91:05:97:f0:c6:06:0b:78:14:f3:ce:9b:98:
2f:fe:b5:9b:c6:0a:8f:3d:43:b4:0f:e9:ad:47:73:12:1a:a3:
75:0b:b9:2f:1f:73:39:7e:4f:2b:f0:25:8a:bb:02:97:db:1a:
1c:32:a0:f1:10:a7:35:2f:74:25:ac:bb:a7:cd:29:76:16:59:
8c:84:94:b2:78:8c:ad:ea:93:98:79:2f:87:7f:c8:04:b4:c0:
e5:02:37:ea:40:03:90:1a:a9:ed:ae:96:2a:33:05:41:80:02:
96:7e:95:81:f8:25:2c:ab:f1:87:03:0f:c5:e8:0a:80:78:e1:
e3:d1:8e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:52:12 2025 by rpki-client