Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/fea85b0c-dac8-3185-bcf4-24845f6ef0e8.roa
File: fea85b0c-dac8-3185-bcf4-24845f6ef0e8.roa (raw, json)
Hash identifier: 5EdGYp47lEo/CKpFgY2Paj9XPMw7xBNT8grUh9NQPpY=
Subject key identifier: B6:CC:13:07:95:08:3C:1D:6B:D3:D6:61:BC:0B:F9:3F:30:CF:96:80
Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
Certificate serial: 010D0C9F43285849552951C76F27FDFAAF20F080
Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/fea85b0c-dac8-3185-bcf4-24845f6ef0e8.roa
Signing time: Fri 28 Mar 2025 01:00:41 +0000
ROA not before: Fri 28 Mar 2025 01:00:41 +0000
ROA not after: Thu 26 Jun 2025 01:00:41 +0000
asID: 4540
IP address blocks: 170.89.208.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:55:29:51:c7:6f:27:fd:fa:af:20:f0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
Validity
Not Before: Mar 28 01:00:41 2025 GMT
Not After : Jun 26 01:00:41 2025 GMT
Subject: CN=a3aac156-100f-478a-81dc-cc51d96ecdbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:9b:c4:dd:fe:55:ae:7d:f0:bc:8d:3f:6d:4d:
d6:0e:ca:76:06:6e:da:09:64:d3:a1:cf:89:7b:a8:
a6:9b:41:97:39:a6:1a:7b:cf:9c:40:98:f1:b7:6e:
f9:6e:67:91:a2:51:a7:40:bc:4d:4d:ac:be:0b:19:
f7:5b:e2:a8:f8:9a:1e:22:12:be:0e:bd:9f:25:c0:
fc:30:09:65:93:0e:8b:4c:e1:9b:8e:09:28:db:fa:
67:f5:38:54:e2:ab:d3:89:12:ca:7c:bc:9e:bb:21:
35:f1:db:28:9e:b5:22:ca:35:27:04:d6:26:22:e3:
1d:70:7d:df:8b:07:80:a5:b6:1c:4a:b9:e7:23:6c:
5d:cc:d8:26:c3:3a:12:48:3a:c0:20:f1:f8:e8:02:
81:a5:4e:d5:55:41:32:17:2b:17:04:a4:2b:31:00:
c7:db:1b:5e:13:77:2d:8d:55:02:71:6d:ba:5a:b0:
36:d9:ae:be:c1:08:10:20:05:48:83:f2:50:80:1c:
3f:59:3c:97:20:89:5f:c5:e9:bf:aa:99:a4:53:9d:
f4:34:0e:1c:29:e7:ee:a9:65:3d:ca:ce:93:00:b7:
e2:c8:bf:78:64:6b:89:7a:41:d8:11:93:cd:b7:7d:
35:03:06:28:19:95:d7:d0:64:ac:f7:f5:c9:3e:5e:
3f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:CC:13:07:95:08:3C:1D:6B:D3:D6:61:BC:0B:F9:3F:30:CF:96:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/fea85b0c-dac8-3185-bcf4-24845f6ef0e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl
X509v3 Authority Key Identifier:
keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
sbgp-ipAddrBlock: critical
IPv4:
170.89.208.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:b8:16:09:dd:bc:95:10:d6:a4:fd:ee:26:4a:ca:b4:c5:df:
e3:dd:4e:e4:76:ef:2c:52:6f:b9:2f:98:8e:19:6e:ca:2b:24:
52:36:74:42:2d:c3:1f:08:3b:4d:2b:c6:18:e0:a9:21:78:a7:
41:05:2d:15:68:7f:0d:91:e0:77:27:0d:0f:7b:fb:9b:9b:73:
9f:bc:1e:da:5f:29:2e:bd:13:ac:de:7c:0e:77:85:e2:4b:32:
44:a5:02:76:c3:b9:f8:5a:4f:ac:69:5c:1b:33:87:90:ad:18:
6c:94:7e:69:6c:b2:4d:67:6c:b3:fe:a7:30:41:46:b1:42:28:
d5:6a:aa:c1:68:4a:29:67:f2:e5:68:7a:03:16:cc:7b:84:9b:
fe:f5:15:53:70:15:bb:c5:6a:64:be:36:d2:36:d4:ef:05:1c:
e9:6f:dc:c7:bb:da:bd:18:03:71:f6:b5:06:fb:fb:81:22:8b:
2c:4c:25:5c:9a:34:80:7a:40:5b:1f:54:8f:c4:00:64:79:64:
38:81:ba:1b:c2:28:09:bf:c0:ca:a6:3f:54:fb:49:70:17:7c:
ab:6b:96:e3:e7:c6:e1:08:c5:38:cc:af:c9:d4:69:96:75:e9:
03:21:77:a3:45:a9:b8:40:40:dc:15:d7:ef:ab:43:04:9d:56:
3c:fd:bb:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:02:19 2025 by rpki-client