Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/2eb74f13-24dd-32a8-8c5d-9d1f53478499.roa
File: 2eb74f13-24dd-32a8-8c5d-9d1f53478499.roa (raw, json)
Hash identifier: 8nygSrc4PITWyhQ1xTm6o/y8j0X1fB07wEXDt3VhaPU=
Subject key identifier: 6B:03:1C:7B:6D:B4:85:EA:1E:B7:91:16:44:7A:7F:0D:FA:F0:A0:27
Certificate issuer: /CN=8252d812-07cd-4870-b413-e08fb8355928
Certificate serial: 010D0C9F43285848A29B48F2906E321AFBDC59C0
Authority key identifier: 22:F6:B7:89:81:53:28:BF:20:D6:FF:E0:86:EC:A6:DC:6E:1E:F6:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/2eb74f13-24dd-32a8-8c5d-9d1f53478499.roa
Signing time: Thu 23 Jan 2025 02:00:40 +0000
ROA not before: Thu 23 Jan 2025 02:00:40 +0000
ROA not after: Wed 23 Apr 2025 01:00:40 +0000
asID: 8075
IP address blocks: 170.88.85.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a2:9b:48:f2:90:6e:32:1a:fb:dc:59:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8252d812-07cd-4870-b413-e08fb8355928
Validity
Not Before: Jan 23 02:00:40 2025 GMT
Not After : Apr 23 01:00:40 2025 GMT
Subject: CN=25d8363b-1983-4970-b199-42c0c78502fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3b:ca:fd:3f:20:bd:0e:14:fa:81:bf:4b:25:
d5:5e:3b:b8:3a:a5:c3:22:e5:eb:34:c1:ce:6a:e5:
f7:79:7d:f0:de:48:90:61:eb:9a:56:1b:5b:68:fe:
04:98:2c:93:45:30:14:0b:ab:6c:94:c0:8b:bb:ba:
98:04:d9:8c:be:c4:88:61:1d:d0:77:36:1a:a6:69:
df:32:00:6b:b7:0b:a5:44:b9:e6:a0:3c:2c:9f:7e:
ab:a4:aa:53:8e:87:47:41:83:52:aa:d3:eb:41:6b:
df:57:23:c6:ff:32:52:31:1b:42:f5:a8:78:55:db:
1f:e0:22:08:84:02:11:2e:7c:c5:49:8f:82:97:4c:
7c:d3:23:f3:61:6a:3f:1b:94:ac:35:b2:42:24:17:
6c:e5:2e:3f:e0:bd:12:53:7b:3d:dc:03:26:01:9c:
4c:56:fb:aa:96:e1:fb:cb:91:0d:ee:43:fa:46:50:
92:e6:68:e4:b1:46:8c:b1:33:98:19:3f:70:c4:13:
d8:9b:01:8f:5e:ec:aa:ac:9e:c4:6e:59:f0:87:a6:
24:48:4b:b3:69:1c:34:dd:47:f1:f8:75:5f:2a:c9:
96:31:b1:fc:ad:46:ea:eb:d8:69:5c:dc:e4:28:41:
60:56:11:2b:5d:5e:c4:bc:79:74:c4:6a:3f:fa:88:
b8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:03:1C:7B:6D:B4:85:EA:1E:B7:91:16:44:7A:7F:0D:FA:F0:A0:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/2eb74f13-24dd-32a8-8c5d-9d1f53478499.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/8252d812-07cd-4870-b413-e08fb8355928.crl
X509v3 Authority Key Identifier:
keyid:22:F6:B7:89:81:53:28:BF:20:D6:FF:E0:86:EC:A6:DC:6E:1E:F6:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928.cer
sbgp-ipAddrBlock: critical
IPv4:
170.88.85.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:9a:f2:62:0f:7b:8a:3e:03:3c:57:a4:3a:8d:c1:cf:d8:e9:
5e:24:8c:97:78:d0:af:4e:30:6d:54:68:b2:bf:82:d6:f8:c6:
3f:79:e9:76:58:72:42:8c:03:e0:b0:5c:63:f1:df:bb:6d:84:
b2:bd:a8:b4:eb:52:32:ea:c6:31:a5:f4:69:1c:10:da:1e:12:
ab:fc:f3:8b:04:c7:69:72:50:86:ca:5d:d3:e8:99:16:57:b1:
b0:30:9d:70:0b:5b:b2:b1:d7:e4:2c:cd:1f:90:cc:00:67:86:
09:8f:2b:35:46:c0:ee:aa:e6:ca:54:58:36:9a:97:50:78:2c:
37:ff:b8:9f:90:ec:4f:42:1c:fe:c3:2b:45:92:5f:74:60:2d:
1a:b7:57:27:53:f5:a5:a0:fe:7c:a8:41:af:65:99:e2:91:c9:
fb:7f:61:bb:2b:8b:b4:10:7a:11:ff:0e:51:fc:c4:c7:47:d6:
d1:6b:f3:ec:45:40:57:2e:e5:7f:24:a4:ca:52:9e:2d:41:dd:
28:0f:39:d3:3d:57:d0:ae:ed:2e:a5:eb:8b:3b:e3:c9:c1:c3:
7d:3c:72:01:ba:da:b1:9d:22:5c:52:40:a1:b9:2c:ed:fe:16:
14:eb:52:81:2f:b0:98:57:f9:aa:fe:2c:44:d1:bc:a2:a7:9d:
d2:0b:bd:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:46:44 2025 by rpki-client