Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/51ac73f3-6872-38f4-970c-00e60be23056.roa
File: 51ac73f3-6872-38f4-970c-00e60be23056.roa (raw, json)
Hash identifier: QcNQ4ZSjuM/ocsNJ5s+jAan7afxKZhQANr3Owf6NSOI=
Subject key identifier: 32:20:60:0C:78:60:B7:0B:26:C0:15:65:B1:80:C5:33:E5:82:A7:51
Certificate issuer: /CN=e02d82fe-95a7-4e09-9a2a-be1e154ba38d
Certificate serial: 010D0C9F4328584898D60EFFB47B3AC7603E4D00
Authority key identifier: A4:C5:B7:53:0A:F7:6C:A4:E1:F7:C3:04:23:AB:D8:5B:05:70:84:6C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/51ac73f3-6872-38f4-970c-00e60be23056.roa
Signing time: Sun 19 Jan 2025 14:00:52 +0000
ROA not before: Sun 19 Jan 2025 14:00:52 +0000
ROA not after: Sat 19 Apr 2025 13:00:52 +0000
asID: 399244
IP address blocks: 170.205.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:98:d6:0e:ff:b4:7b:3a:c7:60:3e:4d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e02d82fe-95a7-4e09-9a2a-be1e154ba38d
Validity
Not Before: Jan 19 14:00:52 2025 GMT
Not After : Apr 19 13:00:52 2025 GMT
Subject: CN=a009a41b-8849-4c0d-a491-96418382c3b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ae:72:b3:40:21:4f:41:b6:a5:03:9b:4c:a6:
5d:ad:91:6a:b7:32:9e:43:30:33:6c:67:4a:c6:c2:
38:65:c8:ce:f0:30:ec:9d:64:3e:12:ed:7c:45:96:
0c:a0:70:62:e1:61:1e:83:8f:a1:2f:18:a3:77:14:
ad:ed:1f:b0:bc:ab:8f:20:09:e4:36:d9:74:5c:21:
46:b2:49:14:3a:67:28:68:f4:79:7f:5c:13:99:70:
7a:e4:aa:d4:61:b3:24:5f:7b:94:4e:0a:da:2d:2b:
3d:30:46:f3:87:54:9f:c3:a5:bd:ac:3f:dc:22:c1:
e3:c9:5b:67:31:9e:e6:e7:9b:8c:a1:b1:f9:80:c4:
c8:09:cb:4f:49:73:87:28:b8:79:c1:57:93:8d:16:
e7:55:9a:c0:e2:7b:7e:cd:1f:f1:63:21:53:8f:e0:
93:13:50:69:83:4a:c0:8f:67:6c:c6:ea:4c:6c:a0:
cb:f3:79:a9:ab:6e:d7:f5:84:65:a2:33:9a:f2:a5:
de:4d:83:ec:5b:fc:0e:54:52:49:14:0e:b9:18:7b:
18:2f:ff:fb:d9:c4:79:8c:5f:cd:69:4a:77:77:09:
50:75:1a:ba:da:98:bc:18:01:0d:2b:ed:87:20:b5:
4d:bd:e4:63:c7:fb:37:92:f2:e9:2b:94:47:20:07:
3d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:20:60:0C:78:60:B7:0B:26:C0:15:65:B1:80:C5:33:E5:82:A7:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/51ac73f3-6872-38f4-970c-00e60be23056.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.crl
X509v3 Authority Key Identifier:
keyid:A4:C5:B7:53:0A:F7:6C:A4:E1:F7:C3:04:23:AB:D8:5B:05:70:84:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer
sbgp-ipAddrBlock: critical
IPv4:
170.205.24.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:50:78:46:44:67:fc:99:06:4b:e9:ce:10:e4:10:43:f0:b5:
0f:59:8a:ff:97:fa:7c:96:98:94:87:77:97:87:c9:33:fa:b5:
1b:11:d1:32:35:50:63:8a:ad:ec:c2:72:c5:c0:4d:0c:44:a5:
a8:11:ce:14:6c:79:6a:3b:85:a8:b2:63:ac:26:b8:60:56:b3:
1a:7d:75:0a:ba:93:18:2e:77:21:0e:80:aa:f4:2a:c6:7f:85:
84:ac:4b:37:2d:cf:81:ed:10:c9:50:d0:0b:db:cc:73:c7:a4:
dd:a1:05:ca:0f:56:54:9b:2b:d7:0c:c7:9b:2d:57:90:a9:20:
37:76:ab:53:61:ce:77:e2:11:ac:77:f8:70:9f:c8:3c:6e:57:
70:a9:76:06:e2:3c:b6:d3:d5:98:9a:6c:2f:53:dd:d5:d7:4c:
18:80:c0:21:bc:ff:5d:7d:7a:16:2e:35:dd:b1:dd:f1:0f:07:
ca:73:a8:9e:ee:90:7f:9b:d6:f1:09:4b:02:67:0a:8f:3a:22:
60:b0:92:8c:cd:9a:f0:0c:9e:32:98:af:e2:62:d0:d6:6e:fc:
f6:85:1c:b5:93:fd:13:c1:0c:49:4a:e3:f3:09:20:ef:91:31:
dd:ed:06:14:ad:80:7b:ea:ab:74:02:55:ab:42:9d:de:8d:2f:
06:a9:56:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:44:26 2025 by rpki-client