Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5e8ef0b4-b6ae-3adc-94b8-78a7da679169.roa
File: 5e8ef0b4-b6ae-3adc-94b8-78a7da679169.roa (raw, json)
Hash identifier: oUzX+tcKZnepVZRLiHSIM5TBLUJZNLlHF8X1kF/4P9E=
Subject key identifier: 77:67:EF:FF:65:46:FD:FE:9C:16:B2:5D:B9:50:11:53:7B:8B:E5:0F
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285848C4F466857457338987BC0E80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5e8ef0b4-b6ae-3adc-94b8-78a7da679169.roa
Signing time: Tue 04 Feb 2025 09:17:46 +0000
ROA not before: Tue 04 Feb 2025 09:17:46 +0000
ROA not after: Mon 05 May 2025 08:17:46 +0000
asID: 22773
IP address blocks: 174.70.64.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c4:f4:66:85:74:57:33:89:87:bc:0e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Feb 4 09:17:46 2025 GMT
Not After : May 5 08:17:46 2025 GMT
Subject: CN=aecd38ff-0c81-43da-9a70-060f01635ce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5c:ec:49:36:fe:ac:91:9c:ac:cc:ce:d3:6a:
ac:8f:09:72:f8:8c:7c:b4:3f:85:16:c7:97:9a:3a:
d9:26:53:81:fc:35:38:6d:69:18:a9:42:95:4c:17:
0c:f5:4c:34:2d:f9:fa:18:7b:bb:f0:e7:b5:91:ea:
f1:fb:0d:e2:23:77:a0:36:35:81:d3:52:43:fc:b2:
49:72:64:22:0b:8d:bd:fc:82:96:72:dc:b3:46:b4:
2e:ff:7d:c8:47:90:41:18:3f:52:f0:c6:fe:95:9e:
df:55:7a:95:59:88:a6:49:c3:31:ef:cd:3f:31:84:
75:21:64:3a:49:e6:4b:8f:4e:ce:45:37:11:6d:99:
82:25:be:71:98:4e:85:cb:cd:5b:36:4b:91:71:c7:
b2:fd:1f:00:83:87:a9:93:e5:4a:4a:9f:25:c3:4f:
a3:08:e5:2c:a8:e8:db:c9:bb:c5:ec:d7:5d:5e:15:
d1:b8:15:c8:c0:da:97:8d:c2:36:ac:cc:51:50:3c:
5b:01:26:64:d7:79:f4:3c:d5:4c:df:0d:b6:f3:ce:
7d:c4:c4:d9:10:7a:ca:20:4b:9d:22:e9:6e:36:ff:
e0:a3:69:9e:e9:41:ec:70:cc:66:2a:00:7a:c8:e8:
b5:9b:6b:41:38:4f:a5:31:16:84:1b:4e:a9:c9:e0:
44:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:67:EF:FF:65:46:FD:FE:9C:16:B2:5D:B9:50:11:53:7B:8B:E5:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5e8ef0b4-b6ae-3adc-94b8-78a7da679169.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
174.70.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:e9:75:2f:9e:d5:55:cb:6e:8f:4e:19:c9:b8:b4:51:a5:37:
18:d7:bc:70:e9:97:a0:b4:b4:cb:ed:9b:5e:f5:bc:bb:ed:37:
9f:de:ad:d9:0c:91:7c:a5:0e:58:56:e2:28:c3:23:87:d8:d1:
d4:cf:c2:07:fb:10:6b:66:87:95:72:51:7c:d9:c4:3f:a5:02:
64:73:ce:48:35:8c:4d:b6:21:4e:28:e9:2f:80:bd:36:ad:08:
0a:9a:93:63:36:ad:f5:c4:40:c9:84:43:35:c4:49:c7:20:87:
d3:9e:5d:d4:5c:2a:d9:a7:c6:86:6a:28:8f:e6:8b:b7:9f:ff:
56:e7:55:0e:0f:db:23:45:69:68:48:91:98:11:fa:74:08:c5:
62:bb:72:da:a7:8b:c7:ae:df:36:e4:82:d6:2d:65:ef:be:c1:
5c:12:6f:d0:da:78:d3:ba:9b:46:ee:34:ae:ed:77:ab:c4:67:
04:2b:aa:05:e8:3f:32:fd:dd:3d:25:63:ff:c5:42:e0:dc:2e:
50:3c:e6:f4:d9:30:98:a1:8d:9b:1d:b5:88:78:51:e6:b8:0e:
d1:7a:05:ac:be:9e:ec:24:7e:02:08:53:b2:c5:78:26:15:6c:
ca:0a:51:a3:ce:ae:f3:27:b4:50:39:9d:23:59:92:f1:b8:ce:
5b:36:61:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:51:48 2025 by rpki-client