Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/78a72f61-a55c-3e02-a5bb-14e1f60c6149.roa
File: 78a72f61-a55c-3e02-a5bb-14e1f60c6149.roa (raw, json)
Hash identifier: 2NyP98sY+5Y4P4CSKO4VrWd7LTNO78wdmUZ8SghX5vs=
Subject key identifier: 30:73:1F:AC:BE:A3:42:A8:5A:6D:D7:09:57:E6:69:4F:44:7F:3F:6E
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F432858490CB171969A72BEE23827DB40
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/78a72f61-a55c-3e02-a5bb-14e1f60c6149.roa
Signing time: Sun 02 Mar 2025 02:00:40 +0000
ROA not before: Sun 02 Mar 2025 02:00:40 +0000
ROA not after: Sat 31 May 2025 01:00:40 +0000
asID: 22773
IP address blocks: 174.70.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0c:b1:71:96:9a:72:be:e2:38:27:db:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Mar 2 02:00:40 2025 GMT
Not After : May 31 01:00:40 2025 GMT
Subject: CN=fc887e57-a92d-4547-9d46-b2519de82eb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c2:eb:d8:56:ae:d3:db:34:82:dd:1b:78:d2:
15:1c:4c:be:fc:20:4f:c5:ed:9c:72:51:3f:21:34:
1e:3f:62:02:58:5b:15:8b:19:12:25:ca:96:2a:2a:
e3:23:ae:da:9a:1d:73:18:7e:90:11:cc:7a:7a:6e:
09:df:d0:b5:2f:61:cb:1f:cb:71:f0:2c:88:01:4d:
c7:1b:5c:e3:21:e0:75:3a:51:77:9b:ef:f8:74:a7:
bc:db:4d:68:26:83:3e:db:72:d0:6c:dd:64:2c:10:
56:41:4c:41:56:5e:66:ab:50:78:6e:f1:f3:a5:a6:
ce:df:14:b0:61:f2:22:f3:7a:3e:9a:69:5e:e0:09:
44:ce:3e:1a:d8:ee:4e:22:91:31:ce:f9:de:8c:bf:
67:3c:ac:2c:52:d2:c0:da:67:b7:02:21:d2:95:47:
d9:71:4e:3f:38:53:9f:cf:69:d4:f6:96:fe:4c:e5:
e2:41:ef:4d:36:3c:10:ab:df:05:96:81:76:4b:3d:
7d:1b:ba:d9:4e:f2:c5:90:df:c6:d4:eb:7e:d2:9f:
75:ed:ad:c8:3e:e4:ac:03:26:19:13:78:1c:9c:02:
a4:17:d7:c6:f6:e4:93:58:fe:87:f1:48:1f:7b:49:
f6:45:9e:0f:ba:f6:33:a9:e6:34:23:39:fd:8d:bc:
af:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:73:1F:AC:BE:A3:42:A8:5A:6D:D7:09:57:E6:69:4F:44:7F:3F:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/78a72f61-a55c-3e02-a5bb-14e1f60c6149.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
174.70.16.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:55:ee:9c:4f:55:46:1e:8c:61:ed:d0:32:e8:49:2e:b3:1f:
ab:17:29:b4:eb:1d:0a:69:f1:c3:42:da:93:a4:5a:1f:a4:8a:
c5:c0:f5:19:7c:35:d5:9c:bb:c6:a5:33:80:3f:fc:d0:37:3f:
d5:1d:58:ef:76:65:57:f7:ed:44:44:32:94:70:64:b4:0a:5c:
d9:a2:78:bf:b2:75:06:89:6a:f4:1d:01:96:90:0c:49:67:39:
e7:6a:6b:77:7f:98:d9:4b:45:59:38:2f:f3:58:d6:fa:0b:16:
63:03:c7:5d:ab:7f:77:0c:e3:c3:90:1c:58:33:65:24:6e:5b:
0e:fe:b0:c9:28:2a:b8:31:77:d1:86:55:82:25:21:b7:62:0d:
53:07:83:48:e4:58:f8:f7:01:a3:15:50:96:ff:93:08:53:b5:
35:90:22:b9:f8:91:f8:3c:63:f1:4a:f4:77:23:bd:55:20:53:
c2:15:7d:83:bc:38:c9:c5:fe:0a:66:53:21:0f:85:13:78:99:
46:dd:5e:f2:cb:62:bd:12:7b:50:b3:f0:0b:04:ea:ed:82:ba:
44:f5:b2:0c:b2:5c:c0:f3:67:3e:15:a8:8d:94:58:1e:48:42:
67:16:cc:4b:63:40:a0:80:8e:9c:ee:a0:c1:e1:b6:06:de:a2:
62:d7:5d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:52:41 2025 by rpki-client