Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/e0f13160-9c37-3768-a2a8-bfb424bf8264.roa
File: e0f13160-9c37-3768-a2a8-bfb424bf8264.roa (raw, json)
Hash identifier: gO0lwW17hRX9gby6co8FHdz2Pog9px4lvSN2ms9cFgA=
Subject key identifier: 2B:C8:26:F2:76:8D:86:DE:71:FA:0E:30:1F:08:86:60:84:6E:6E:C3
Certificate issuer: /CN=dc598c19-9d8e-4650-abce-c34c5146591f
Certificate serial: 010D0C9F432858491D71709FB43987275F84FB00
Authority key identifier: 64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/e0f13160-9c37-3768-a2a8-bfb424bf8264.roa
Signing time: Sat 08 Mar 2025 02:00:39 +0000
ROA not before: Sat 08 Mar 2025 02:00:39 +0000
ROA not after: Fri 06 Jun 2025 01:00:39 +0000
asID: 7979
IP address blocks: 172.85.109.0/24 maxlen: 24
172.85.110.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1d:71:70:9f:b4:39:87:27:5f:84:fb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc598c19-9d8e-4650-abce-c34c5146591f
Validity
Not Before: Mar 8 02:00:39 2025 GMT
Not After : Jun 6 01:00:39 2025 GMT
Subject: CN=f3a36171-8c7b-4c6e-ab56-2c0dfe6eb011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:8f:e6:c4:1a:7d:47:7a:ed:42:5a:aa:67:d2:
1c:91:b6:59:f2:32:9e:eb:7f:9b:ed:57:ff:2e:fd:
b3:a9:09:f8:96:e3:dd:36:81:ee:73:44:90:d1:ad:
c0:bc:f2:38:a6:95:9f:1d:21:0a:8a:ed:e7:75:e2:
91:3f:ac:c2:d8:ec:79:2f:11:fa:e0:49:b1:d3:9a:
18:94:7b:f1:23:11:16:09:49:69:2c:a4:fa:f0:a9:
57:07:f3:54:7a:73:78:03:69:1b:84:5c:c1:31:c4:
82:4b:4f:6f:e2:20:b0:09:7e:2b:00:82:04:08:17:
f3:37:6b:b3:d0:55:e5:97:3f:91:45:ef:81:9d:51:
b5:dd:79:f1:31:7c:d6:34:19:c9:54:16:62:85:b0:
e8:ee:18:55:15:a3:3d:f3:27:9f:2b:5f:f0:10:a1:
5d:2a:b9:3d:76:de:2e:e5:f1:5c:a0:47:ff:41:aa:
1b:20:82:2d:6c:dd:09:c8:38:77:ca:b5:65:39:de:
bd:f5:1b:54:48:18:d8:a2:e1:2e:2d:8f:52:f8:af:
12:c6:b0:bc:b9:30:e3:4f:5e:45:42:3c:e6:03:5c:
67:6f:af:99:65:8e:12:2e:48:e3:ed:82:7a:28:a0:
2e:93:bf:60:82:e4:fa:d1:03:24:eb:d9:1e:18:fd:
9b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:C8:26:F2:76:8D:86:DE:71:FA:0E:30:1F:08:86:60:84:6E:6E:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/e0f13160-9c37-3768-a2a8-bfb424bf8264.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.crl
X509v3 Authority Key Identifier:
keyid:64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer
sbgp-ipAddrBlock: critical
IPv4:
172.85.109.0-172.85.110.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:b0:17:e1:28:c5:8b:39:e3:e1:35:8e:ba:f9:59:37:8c:e9:
6c:3b:a7:50:a1:c2:85:4c:71:4e:d4:90:ed:b6:ea:3a:83:eb:
37:fd:59:4e:14:3d:cd:0b:11:6c:15:e6:a5:49:52:46:f4:27:
ad:8b:30:c1:ba:21:97:3d:65:0e:93:65:8c:68:29:89:e5:03:
87:51:6e:c2:78:5a:ab:38:f9:20:ab:34:9b:6e:c7:45:b0:3f:
bd:3a:e3:92:8f:90:c5:c4:f6:81:75:2b:5d:e7:21:46:77:a4:
87:50:51:0b:9d:39:fc:e9:5a:9a:6f:e7:3c:f2:2b:3a:65:d8:
68:74:c5:9f:ab:86:3c:ce:10:a6:3c:b8:93:a8:63:24:8e:08:
41:c5:31:4a:60:28:46:77:86:53:ee:2b:40:16:bb:b5:36:9a:
fc:7f:40:38:02:92:99:63:2a:d0:9e:74:e8:cd:d1:c7:06:94:
e9:04:cc:b0:45:c4:d2:88:94:bd:01:35:e5:9f:e3:bb:d2:91:
84:f5:77:c8:41:5a:c8:eb:5f:3b:3c:7b:5e:4b:63:78:48:1b:
99:f8:d0:2a:94:b7:ce:e0:1b:e1:09:ed:ec:74:c6:3d:48:d7:
82:cf:55:d9:e5:ad:b5:d8:56:d7:13:06:b5:2d:1c:13:ef:7e:
7a:56:6f:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:10:55 2025 by rpki-client