Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/790fc848-d2b2-3618-af2e-754c682b4f44.roa
File: 790fc848-d2b2-3618-af2e-754c682b4f44.roa (raw, json)
Hash identifier: 8Q1nnNjHtIuXYr5oWMxUOqez8BDpZMDCVxiVxZAuKhM=
Subject key identifier: 9B:6D:58:9B:F3:1B:89:B4:7F:8E:3C:73:38:CE:E3:8C:2F:A0:24:2E
Certificate issuer: /CN=8252d812-07cd-4870-b413-e08fb8355928
Certificate serial: 010D0C9F43285848A1360EE6E80D46766ACCC140
Authority key identifier: 22:F6:B7:89:81:53:28:BF:20:D6:FF:E0:86:EC:A6:DC:6E:1E:F6:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/790fc848-d2b2-3618-af2e-754c682b4f44.roa
Signing time: Wed 22 Jan 2025 14:00:52 +0000
ROA not before: Wed 22 Jan 2025 14:00:52 +0000
ROA not after: Tue 22 Apr 2025 13:00:52 +0000
asID: 8075
IP address blocks: 170.88.82.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a1:36:0e:e6:e8:0d:46:76:6a:cc:c1:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8252d812-07cd-4870-b413-e08fb8355928
Validity
Not Before: Jan 22 14:00:52 2025 GMT
Not After : Apr 22 13:00:52 2025 GMT
Subject: CN=141bb258-e3ae-43d4-a3c4-b9c20298576c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:95:03:10:01:00:40:a2:51:bb:69:dd:d9:c5:
cb:30:84:57:86:1b:03:df:19:ed:21:ac:fb:2f:bb:
6e:26:3b:91:9d:8d:d4:58:b3:ee:fb:ea:17:e8:b9:
ae:66:0b:43:b7:7b:68:0e:41:61:59:ac:85:f9:9b:
3f:92:97:d1:fa:1c:ca:da:78:5e:d6:18:0e:d4:8d:
65:c3:e0:45:2c:49:bd:68:bb:93:b3:63:83:87:93:
3b:2a:da:76:15:e5:f4:c0:8f:d3:ea:17:cd:b0:80:
e9:39:bb:9b:df:fc:6a:7e:a5:89:51:ae:91:69:b3:
86:ca:70:79:b3:08:01:e7:2b:7d:ed:76:eb:3d:9d:
82:23:52:68:e2:b6:c4:39:6c:2b:07:c2:09:3d:c9:
92:d5:2d:6d:93:53:30:33:e0:96:ed:47:05:03:98:
fa:c3:e9:f2:85:b6:0f:05:52:c3:38:1c:5d:53:14:
a6:1d:55:52:0d:df:1c:2f:2f:0d:43:8a:05:0a:c1:
43:75:da:a3:4e:09:c4:02:aa:59:04:6d:2c:84:ed:
00:4d:44:28:44:a4:26:f1:e4:96:2c:ca:c9:8e:77:
27:b7:79:38:aa:91:47:fc:f8:9e:7b:4b:8a:92:6e:
da:ae:51:d4:0c:24:28:7f:9d:f9:92:a5:da:f6:dd:
ca:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:6D:58:9B:F3:1B:89:B4:7F:8E:3C:73:38:CE:E3:8C:2F:A0:24:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/790fc848-d2b2-3618-af2e-754c682b4f44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/8252d812-07cd-4870-b413-e08fb8355928.crl
X509v3 Authority Key Identifier:
keyid:22:F6:B7:89:81:53:28:BF:20:D6:FF:E0:86:EC:A6:DC:6E:1E:F6:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928.cer
sbgp-ipAddrBlock: critical
IPv4:
170.88.82.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:c9:f8:90:95:49:af:9f:f2:fe:4c:1d:d9:a3:98:d8:2b:b9:
cf:1c:03:87:cb:f3:5f:5f:98:51:1f:e5:d7:37:15:20:2c:7d:
51:67:c4:66:ed:9e:91:92:30:d7:2a:b7:98:b1:b9:02:22:25:
34:56:da:84:db:18:f4:96:78:eb:57:7a:04:61:6e:ec:8c:b5:
67:34:42:0c:64:73:1e:96:0a:63:bf:32:15:91:1c:57:52:5d:
17:d2:e8:b8:2d:9d:dc:c4:96:d4:de:57:08:a9:93:3e:94:6d:
f3:84:ac:52:f7:8b:1f:e2:20:18:18:3d:ee:ba:88:7e:5d:03:
a9:c6:ec:d9:bf:a8:31:16:ed:dd:33:8a:ca:76:33:ce:ce:10:
7b:85:3f:1c:eb:e0:4d:a4:aa:37:4f:c6:dc:40:73:57:16:f7:
1e:a2:92:cc:f5:05:de:74:d8:cc:0c:45:9d:98:24:97:ee:55:
fc:23:82:a3:d4:4c:75:1f:f7:16:4d:8b:dd:5e:fa:6b:71:8b:
c7:44:9f:c4:1a:6f:b5:c2:65:c4:61:73:a6:86:78:58:2f:e7:
cc:19:da:11:b0:bf:11:31:3b:52:d7:3b:bd:f3:f0:40:dd:4d:
e1:37:3e:c1:b4:a5:5f:29:0a:f7:1e:c7:a8:91:cd:57:7a:46:
1b:65:c9:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:31:26 2025 by rpki-client