Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/ec2fa4f8-a7b3-38e2-aa1a-85221290d1dd.roa
File: ec2fa4f8-a7b3-38e2-aa1a-85221290d1dd.roa (raw, json)
Hash identifier: HnUGMCpcEAIH5zsPE9G0/GvLW3dL2kK0JYNKyMpIqwU=
Subject key identifier: 46:68:E9:7E:73:3C:7B:6A:FD:86:E6:92:AA:A4:E0:D7:3F:ED:6B:0E
Certificate issuer: /CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
Certificate serial: 010D0C9F43285848B8F0CD0F24B8A9A3457CCA00
Authority key identifier: 06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/ec2fa4f8-a7b3-38e2-aa1a-85221290d1dd.roa
Signing time: Fri 31 Jan 2025 02:00:39 +0000
ROA not before: Fri 31 Jan 2025 02:00:39 +0000
ROA not after: Thu 01 May 2025 01:00:39 +0000
asID: 11273
IP address blocks: 170.186.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b8:f0:cd:0f:24:b8:a9:a3:45:7c:ca:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
Validity
Not Before: Jan 31 02:00:39 2025 GMT
Not After : May 1 01:00:39 2025 GMT
Subject: CN=acfcb49c-5ec1-47cb-b0c6-374600d2e723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ae:8c:42:b0:36:51:6d:fc:5f:70:8a:0b:69:
ae:a8:85:43:b3:1b:9c:d9:64:25:64:07:13:9a:28:
a1:1f:a7:4c:9a:54:46:d2:5c:53:a3:70:a4:a5:a7:
f1:84:45:3a:27:8f:0a:44:d3:a9:0c:cc:99:46:b2:
21:41:46:fb:99:77:92:02:5e:da:7a:d3:9b:f3:16:
fa:c7:73:52:9e:83:ff:35:36:c0:58:d3:82:9b:5c:
3d:28:d5:81:1a:f7:1b:a4:2b:c4:a6:d6:32:02:a7:
e9:3c:40:5b:31:5d:15:4f:e7:6a:90:ce:12:9c:de:
f6:64:d8:b3:56:e7:30:64:a0:e8:db:0b:8f:f6:3a:
43:b9:ee:c1:68:5d:e5:70:aa:ef:7a:c5:ea:5e:2e:
8a:29:0a:d9:90:71:a2:ea:ec:c2:33:11:ca:6e:66:
71:94:6f:9f:69:59:24:f3:b6:e0:fe:6f:ea:90:19:
29:91:9f:57:f6:48:1b:3e:76:de:5c:17:fb:8c:61:
58:6f:c8:4b:8d:40:6c:6c:2c:31:ca:bf:36:4a:e8:
8d:b1:c8:ee:80:94:ca:7e:83:bd:52:05:1d:76:25:
ce:29:c5:e5:12:8d:92:e8:e2:a1:e7:1d:1f:16:4e:
d7:6b:28:2d:0e:e9:51:bb:26:fe:92:b7:40:07:f2:
4c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:68:E9:7E:73:3C:7B:6A:FD:86:E6:92:AA:A4:E0:D7:3F:ED:6B:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/ec2fa4f8-a7b3-38e2-aa1a-85221290d1dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl
X509v3 Authority Key Identifier:
keyid:06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
sbgp-ipAddrBlock: critical
IPv4:
170.186.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:cf:ee:e1:f6:f8:9f:35:3b:71:10:39:cd:85:a9:4d:fc:4d:
68:25:8f:db:71:42:1e:d5:b6:a9:a2:ab:eb:2b:73:61:ba:4d:
88:51:b3:09:70:e2:f2:1e:5e:66:68:1e:57:12:0f:04:8a:8d:
08:0f:2a:56:84:ec:53:04:43:33:33:b5:ac:95:9c:5f:62:a6:
2d:30:1a:8d:3d:0a:3f:f0:94:c3:21:8f:4d:c3:87:e7:b0:de:
54:1a:0b:4c:2a:dd:f7:6a:c3:99:5a:95:54:2f:3a:16:f3:1f:
6f:1d:6f:63:66:d4:60:30:9e:73:0c:71:e0:21:5e:83:d8:5c:
0e:c6:22:84:8f:57:b1:3b:dd:b6:54:fb:51:cc:ac:65:4e:aa:
9c:c0:91:25:dd:65:bb:d0:3e:59:e8:55:dc:db:6d:be:d6:4f:
10:00:99:6e:e3:2f:c3:9f:c5:7c:3f:da:9d:32:03:11:bc:60:
87:a5:73:e5:14:13:43:a5:0c:31:03:ee:02:f9:e5:2e:51:1c:
f3:4d:1f:1e:b0:b2:d5:ca:df:ef:3c:7b:d0:69:1b:b6:cc:40:
57:34:6f:c7:d1:a7:cd:ac:9f:4a:31:ec:19:9a:6d:10:e2:a0:
37:f6:13:06:92:17:73:e4:b2:19:6d:b0:db:94:6c:cc:b9:12:
a5:73:41:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:32:50 2025 by rpki-client