Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/e1e69ec7-1c9b-33cf-8623-0cf33c6cf293.roa
File: e1e69ec7-1c9b-33cf-8623-0cf33c6cf293.roa (raw, json)
Hash identifier: d1185J8VqudqOkkgMRQjn0CgD/H+7lCApRZcBhbw2iM=
Subject key identifier: 2D:F6:19:D5:D3:14:AA:C9:84:4F:3B:C0:4B:11:5C:B1:78:9A:39:CB
Certificate issuer: /CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279
Certificate serial: 010D0C9F432858494B641A754A63FA4ED06D5E80
Authority key identifier: E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/e1e69ec7-1c9b-33cf-8623-0cf33c6cf293.roa
Signing time: Mon 24 Mar 2025 13:00:53 +0000
ROA not before: Mon 24 Mar 2025 13:00:53 +0000
ROA not after: Sun 22 Jun 2025 13:00:53 +0000
asID: 14618
IP address blocks: 170.225.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4b:64:1a:75:4a:63:fa:4e:d0:6d:5e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279
Validity
Not Before: Mar 24 13:00:53 2025 GMT
Not After : Jun 22 13:00:53 2025 GMT
Subject: CN=0770f480-eb68-487b-8458-08f337e1693c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fa:95:f0:03:66:b6:4c:cd:0d:18:76:9b:55:
75:b5:48:31:3b:36:9c:75:44:60:c1:01:a2:1d:40:
46:6c:72:36:40:dd:27:9d:8b:e7:8b:cb:c1:05:dd:
c4:6e:d9:b4:b9:71:dd:e6:ec:c8:7a:4b:e3:c0:2c:
cf:5b:f8:d1:1a:e6:cd:be:4c:56:cf:69:fa:0d:07:
f1:1b:24:ac:44:1e:5f:07:12:aa:6c:2f:cf:e1:68:
0d:f6:7a:b5:ed:f5:69:fc:63:98:d1:41:03:f1:07:
24:01:a3:54:91:4b:d7:5a:6f:3c:ef:cc:b9:c4:a6:
d2:0d:ea:ef:4f:ea:f3:97:1c:d3:48:8a:ba:c5:ec:
e1:6f:78:62:25:6b:4f:de:2f:4e:0a:b0:fc:74:c9:
f4:08:8c:af:9c:08:9c:da:24:a9:ac:f9:f1:0f:f7:
5f:6c:cd:86:66:2e:42:ef:40:61:23:17:36:ea:f2:
8f:85:23:fd:c3:f4:eb:a5:82:48:96:c9:d8:54:83:
eb:75:26:93:3d:6e:41:c3:59:3d:9e:7c:39:b2:49:
df:82:ae:f3:9b:a1:56:4d:1a:aa:b2:5f:1d:d9:fd:
14:f1:d6:59:27:b5:0f:37:d2:68:00:03:68:a7:63:
e3:36:ad:b6:14:fd:de:47:a4:0d:66:b1:7c:30:2f:
97:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:F6:19:D5:D3:14:AA:C9:84:4F:3B:C0:4B:11:5C:B1:78:9A:39:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/e1e69ec7-1c9b-33cf-8623-0cf33c6cf293.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl
X509v3 Authority Key Identifier:
keyid:E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer
sbgp-ipAddrBlock: critical
IPv4:
170.225.215.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:d3:84:ae:2e:4e:9e:17:f4:ae:61:1a:ee:c5:2e:08:2e:0f:
7d:f7:29:2d:20:39:72:df:e4:8d:ad:4a:7e:b4:fd:51:31:79:
07:7b:99:fb:f2:6e:73:e1:85:fe:28:29:c0:ba:08:02:22:f0:
85:21:2c:ad:2e:fa:e5:86:02:a6:a8:12:73:c0:72:12:af:21:
06:2f:e9:57:f5:fe:3a:b3:0c:09:89:d5:47:55:f0:76:cf:fa:
97:69:b5:25:9e:19:22:f7:f2:62:c5:b2:a9:d8:f9:f8:37:45:
f9:cc:44:56:d6:31:27:af:00:34:24:bb:5a:66:6c:1f:8f:53:
1b:41:ce:46:1a:c3:43:8a:52:cf:bf:d6:91:63:d9:e7:a3:35:
aa:2c:20:a2:37:65:62:ea:ea:b1:b5:0c:e6:06:a3:a7:35:e7:
f5:06:b0:3d:fc:4a:32:45:7d:a6:a0:88:d6:e5:68:0a:20:51:
87:f9:31:b3:81:78:b5:e8:2b:94:c7:52:13:71:fd:bd:18:e1:
b8:d4:9c:49:5f:a3:2f:16:bc:de:47:d1:75:48:43:32:1f:d6:
94:6d:de:33:75:81:12:38:6f:71:c9:1c:42:9f:d4:d7:82:8d:
2d:32:9b:97:50:07:b8:60:05:10:5c:c9:36:e4:a4:65:9a:3f:
c2:06:03:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:43:13 2025 by rpki-client