Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/a3af340a-151f-3e65-b202-a86ab76e7ddc.roa
File: a3af340a-151f-3e65-b202-a86ab76e7ddc.roa (raw, json)
Hash identifier: 3ECvM8zw83OGh7dZZsDcOJWPbu0OQsqnm9wJZy+2HsI=
Subject key identifier: 37:6F:D8:25:D0:3F:5C:11:F7:9C:2A:D6:88:9A:3B:61:27:B4:66:14
Certificate issuer: /CN=2dbf604f-24b0-426e-809d-e65b08be5d50
Certificate serial: 010D0C9F43285848CB164F9E3E99325235513020
Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/a3af340a-151f-3e65-b202-a86ab76e7ddc.roa
Signing time: Thu 06 Feb 2025 14:00:52 +0000
ROA not before: Thu 06 Feb 2025 14:00:52 +0000
ROA not after: Wed 07 May 2025 13:00:52 +0000
asID: 16433
IP address blocks: 170.176.248.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cb:16:4f:9e:3e:99:32:52:35:51:30:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50
Validity
Not Before: Feb 6 14:00:52 2025 GMT
Not After : May 7 13:00:52 2025 GMT
Subject: CN=f6f4bffe-6341-4609-b9d9-e1b9dc4fabe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f3:c0:e5:b1:38:d3:fd:ed:3b:20:43:ae:cc:
db:fd:7c:73:8c:87:a3:47:9c:4f:e8:fe:57:62:2e:
d1:fe:7b:e5:9b:12:8f:3e:c9:2e:c7:82:48:b0:e5:
8e:2f:7d:ad:61:fa:0f:c0:71:6b:f2:53:8b:db:b8:
c1:8c:5c:ba:ba:e9:26:aa:04:69:96:22:33:66:44:
98:9a:09:a9:24:40:c2:93:48:aa:51:15:78:31:b1:
7a:5e:21:66:93:fc:13:a9:75:70:a8:e6:60:34:60:
0f:2f:b7:ec:1c:62:63:4f:91:bf:0b:ba:35:20:ee:
3f:9f:b0:93:83:c1:7f:23:84:f8:8e:e1:ae:b3:a3:
e6:bc:c4:9f:72:84:cc:bb:1e:fa:2e:d8:6a:04:c3:
a5:c6:f0:1f:ae:3c:31:e8:c8:c0:ed:96:b3:f1:4e:
01:76:b0:59:95:4e:e7:aa:da:96:67:b0:75:a0:ed:
9a:2d:51:56:33:53:2e:c9:a3:9d:05:36:6c:5e:e3:
08:e9:3a:36:49:6c:75:ec:c6:43:3f:47:43:1e:0d:
ee:7a:95:8c:6c:14:ac:0c:21:83:52:3a:41:4c:f0:
d9:02:37:de:51:3a:c2:16:86:82:2d:7b:f7:53:8d:
1a:05:49:94:49:6d:01:5f:7e:a4:4d:c5:8a:b3:f8:
b8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:6F:D8:25:D0:3F:5C:11:F7:9C:2A:D6:88:9A:3B:61:27:B4:66:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/a3af340a-151f-3e65-b202-a86ab76e7ddc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl
X509v3 Authority Key Identifier:
keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer
sbgp-ipAddrBlock: critical
IPv4:
170.176.248.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:af:cd:97:c3:1f:43:b9:e6:d6:90:d5:0a:1e:82:0a:46:8f:
44:6a:55:2c:4c:80:42:ed:f5:07:ec:b1:17:ea:54:b0:5d:6d:
0b:a3:cf:23:f7:c7:0c:79:5b:27:bc:21:d8:49:08:7d:16:1d:
c9:b7:40:3d:bc:f0:a9:42:47:ea:36:e9:14:4f:58:88:dc:69:
65:fd:9f:83:c3:d5:51:4e:69:7e:74:2b:1c:7c:5d:a2:76:6c:
71:62:49:46:d4:34:86:6c:5e:41:76:d6:8e:ae:24:9b:92:c3:
db:1f:32:67:16:82:41:71:d6:a4:9e:e5:83:e8:66:96:1b:b1:
b5:2f:d4:d2:87:f4:ce:67:89:11:a0:70:6d:4f:69:69:a3:33:
2f:ac:9f:1e:a6:30:4f:d0:1d:d2:f3:a6:37:69:12:09:d4:5c:
48:2c:8c:36:a5:d1:23:31:f1:2f:28:fb:9f:b3:4b:e4:d9:1b:
49:43:e1:f0:9e:b8:c4:65:32:8f:f2:2b:44:03:60:99:99:92:
07:37:64:74:26:52:18:cc:11:70:f8:a0:e2:9d:e2:62:28:82:
71:a8:01:2f:4a:38:a8:17:a3:e6:68:4b:40:62:f5:09:37:42:
35:87:45:2f:67:41:1f:90:0c:98:75:bd:6f:63:af:01:f6:e2:
79:3a:78:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:03:04 2025 by rpki-client