Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/01e76461-567a-47c1-a387-9b9f7415be5f/c46438d3-efc7-3a29-b024-983a8aaa71ec.roa
File: c46438d3-efc7-3a29-b024-983a8aaa71ec.roa (raw, json)
Hash identifier: fXmRvYI4jfCXz20Aw91yJ+tJj7jLLefiFHjE3cyTzPk=
Subject key identifier: 98:6E:EA:CB:A2:2F:D6:8B:B5:0A:90:B5:BF:88:78:2C:D2:03:D0:D3
Certificate issuer: /CN=01e76461-567a-47c1-a387-9b9f7415be5f
Certificate serial: 010D0C9F432858491ED6DB438B4E929300217C80
Authority key identifier: DA:98:D7:DC:C3:99:BA:24:EE:F1:1D:1E:63:35:EE:23:6E:88:2F:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/01e76461-567a-47c1-a387-9b9f7415be5f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/01e76461-567a-47c1-a387-9b9f7415be5f/c46438d3-efc7-3a29-b024-983a8aaa71ec.roa
Signing time: Sat 08 Mar 2025 14:00:52 +0000
ROA not before: Sat 08 Mar 2025 14:00:52 +0000
ROA not after: Fri 06 Jun 2025 13:00:52 +0000
asID: 21833
IP address blocks: 170.232.224.0/21 maxlen: 21
170.232.231.0/24 maxlen: 24
170.232.232.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1e:d6:db:43:8b:4e:92:93:00:21:7c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01e76461-567a-47c1-a387-9b9f7415be5f
Validity
Not Before: Mar 8 14:00:52 2025 GMT
Not After : Jun 6 13:00:52 2025 GMT
Subject: CN=2ce49fb1-4d46-4f85-8fc0-035068d1c378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:37:c4:93:71:88:5d:86:97:43:b8:0b:ef:c7:
46:56:fb:c8:18:df:d5:66:58:52:52:d8:44:38:cb:
63:ea:c6:12:e6:78:c0:7a:f6:7e:a8:04:8b:37:27:
d3:21:7b:59:86:e6:18:20:b6:60:64:b3:e4:e7:32:
f0:34:55:02:6b:44:c7:8c:7d:9d:af:e2:01:12:84:
ac:23:5b:ad:5f:f8:63:22:51:41:41:11:6c:6b:cb:
7b:c5:95:ac:e4:c6:22:7c:03:f4:33:fa:6c:34:c5:
ab:b3:55:21:4a:0e:ad:f5:26:7c:8b:03:a5:10:f7:
53:49:4e:2f:89:e7:fb:23:41:95:9d:71:75:a6:84:
bd:32:40:cb:0e:bd:33:3d:ef:84:af:29:6a:03:4c:
64:1b:d6:60:df:4a:80:64:c5:c7:01:51:cd:b2:c7:
13:53:bf:e7:c9:a0:83:cd:a8:34:a3:44:c6:ec:7c:
5b:c6:e8:a7:ff:73:22:69:91:f7:02:ab:23:df:32:
a2:d5:f3:fa:71:93:9e:6e:91:90:fb:af:83:d5:54:
30:1a:72:b3:00:72:f8:83:ef:9b:60:f3:33:c1:4c:
bd:3a:5a:cf:ea:4e:1a:0c:45:24:c9:28:4f:a4:72:
6e:75:e4:54:72:97:66:b4:68:f1:ae:62:ef:30:e4:
6b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:6E:EA:CB:A2:2F:D6:8B:B5:0A:90:B5:BF:88:78:2C:D2:03:D0:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/01e76461-567a-47c1-a387-9b9f7415be5f/c46438d3-efc7-3a29-b024-983a8aaa71ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/01e76461-567a-47c1-a387-9b9f7415be5f/01e76461-567a-47c1-a387-9b9f7415be5f.crl
X509v3 Authority Key Identifier:
keyid:DA:98:D7:DC:C3:99:BA:24:EE:F1:1D:1E:63:35:EE:23:6E:88:2F:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/01e76461-567a-47c1-a387-9b9f7415be5f.cer
sbgp-ipAddrBlock: critical
IPv4:
170.232.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:ba:11:10:43:44:53:94:45:e2:2e:54:3c:5c:58:f4:7f:fd:
da:bf:33:ca:e3:12:30:36:4f:da:92:9d:ca:34:e6:74:9a:5b:
62:93:ba:85:97:6e:8d:d6:2a:09:7e:a8:1f:ef:54:5d:31:d5:
25:5f:7a:f6:29:46:13:34:fd:69:4f:75:5a:fd:cc:6c:54:a4:
47:b8:7a:6d:42:8b:75:ff:e2:3f:af:ab:17:bd:26:77:1a:ba:
d4:ff:df:7b:87:41:c2:7e:7f:bd:2a:0c:dc:ff:51:65:dc:cb:
c9:6f:71:f3:5d:ae:29:30:0d:89:a6:b3:4d:26:8b:1b:e6:34:
b0:95:2e:54:c8:7b:9f:89:f9:fc:2a:9c:91:9e:5d:7b:81:bd:
9e:0a:ed:cd:27:9a:97:e6:07:d9:18:0f:a8:d2:74:f1:97:85:
84:db:f5:ed:ac:73:f4:57:74:82:aa:c2:e0:1a:38:f0:b4:72:
9b:61:74:f3:c2:c5:49:27:56:13:e3:90:d4:96:c0:ce:15:2f:
34:86:b0:9f:95:8b:4b:f0:84:4a:b5:a7:27:23:a0:78:68:c0:
4d:0d:e0:85:14:52:54:a3:0e:fe:85:9e:f6:9a:66:06:4d:d1:
74:76:25:b8:f1:57:ef:66:f7:22:a8:06:1e:27:c8:c0:2c:ba:
a9:66:f0:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:55:08 2025 by rpki-client