Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55a4d94f-b4d5-447a-9417-908a0f5a404e/dc665ef5-7866-3242-a76c-103dcc34ac7c.roa
File: dc665ef5-7866-3242-a76c-103dcc34ac7c.roa (raw, json)
Hash identifier: TqdOD9u4U6gi7ToQid2fTiF5qyh66B4+P973bZLhQgo=
Subject key identifier: 7A:A3:AA:71:D2:7B:E6:C1:C0:01:84:0D:04:F6:44:07:E7:86:0F:49
Certificate issuer: /CN=55a4d94f-b4d5-447a-9417-908a0f5a404e
Certificate serial: 010D0C9F432858490F7BF11F7C1621F45D7B3600
Authority key identifier: B5:F8:B7:36:93:7F:76:9E:25:D8:97:09:C9:60:7A:A6:D9:0E:3C:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55a4d94f-b4d5-447a-9417-908a0f5a404e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55a4d94f-b4d5-447a-9417-908a0f5a404e/dc665ef5-7866-3242-a76c-103dcc34ac7c.roa
Signing time: Mon 03 Mar 2025 02:00:39 +0000
ROA not before: Mon 03 Mar 2025 02:00:39 +0000
ROA not after: Sun 01 Jun 2025 01:00:39 +0000
asID: 394542
IP address blocks: 170.117.216.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0f:7b:f1:1f:7c:16:21:f4:5d:7b:36:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55a4d94f-b4d5-447a-9417-908a0f5a404e
Validity
Not Before: Mar 3 02:00:39 2025 GMT
Not After : Jun 1 01:00:39 2025 GMT
Subject: CN=2c0f81c5-83c2-4fc8-8109-db130bf37ba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:07:10:03:e5:d6:fb:3e:54:c5:59:12:9a:b3:
e9:d8:be:10:fe:e2:45:0c:e9:15:33:b4:18:cc:b2:
c2:b4:37:1d:d2:d6:59:70:df:ae:92:1d:45:b9:5d:
0f:70:38:23:9c:70:a4:12:e5:5e:04:15:2f:32:31:
9d:32:9e:cf:53:99:37:c1:48:93:c7:a8:33:e0:a5:
a8:fa:c3:b7:0c:3c:29:fa:f3:d8:a8:e2:64:fb:69:
54:a1:13:61:21:51:ff:b5:2a:67:27:aa:17:5c:d2:
ce:ca:d5:d2:56:b0:a5:1d:2b:12:05:10:0a:fb:35:
d0:0e:e1:34:e5:6a:f5:5c:95:d0:bf:d0:63:8e:1d:
1a:71:0b:dd:c7:16:36:fd:1b:f5:8b:99:f0:36:24:
1b:af:ed:1c:25:25:88:21:a6:16:6f:1b:ff:b3:4a:
df:df:2e:c5:ce:03:b8:cb:53:9e:d4:8f:c1:84:8d:
b5:9b:1d:c9:3e:9c:03:7e:26:5b:5b:90:b3:9f:8a:
c4:2b:9e:6a:8d:8d:9b:ec:6c:c1:e3:5c:5e:6e:cf:
45:64:4a:c3:a2:3d:3e:12:a2:9c:2d:e6:e7:e0:39:
02:23:72:04:31:b7:cc:68:14:e8:83:9a:a5:f4:47:
50:19:85:80:cd:06:43:f5:c5:a8:bd:5c:66:fa:c2:
55:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:A3:AA:71:D2:7B:E6:C1:C0:01:84:0D:04:F6:44:07:E7:86:0F:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55a4d94f-b4d5-447a-9417-908a0f5a404e/dc665ef5-7866-3242-a76c-103dcc34ac7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55a4d94f-b4d5-447a-9417-908a0f5a404e/55a4d94f-b4d5-447a-9417-908a0f5a404e.crl
X509v3 Authority Key Identifier:
keyid:B5:F8:B7:36:93:7F:76:9E:25:D8:97:09:C9:60:7A:A6:D9:0E:3C:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55a4d94f-b4d5-447a-9417-908a0f5a404e.cer
sbgp-ipAddrBlock: critical
IPv4:
170.117.216.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:40:68:a9:9a:eb:46:e2:06:11:e6:27:0e:d4:ed:cb:ba:e9:
73:92:10:b5:5d:a5:7d:b1:20:1b:ef:80:2b:4e:1e:07:48:da:
a3:ff:3e:2b:09:13:24:05:7c:00:a7:40:ad:4a:08:4e:58:1c:
3f:2b:9d:23:88:fc:10:ec:ec:c9:ea:35:09:2e:37:65:d4:d9:
e1:85:04:0e:4f:b5:53:4d:5b:48:32:00:76:dd:14:34:ff:93:
dc:89:19:19:16:e0:ab:df:a9:18:84:cb:a8:9d:58:19:7c:75:
f3:51:b2:f5:56:5f:fb:ce:bb:0a:b5:c3:0c:3f:0b:df:99:f1:
32:50:32:a0:51:6a:5b:c6:5d:02:7a:cf:3a:4a:d3:5e:58:71:
e3:27:1c:1a:6d:63:5d:b6:54:2b:11:54:23:a1:fd:22:f0:70:
44:87:69:ea:9e:72:04:f3:06:67:2c:05:40:59:f8:ca:94:a3:
b5:b7:79:74:f7:1b:1f:c8:17:70:f2:67:cf:81:41:9c:fe:e0:
ae:96:97:22:42:57:41:31:a1:18:53:52:94:dc:54:ca:91:b8:
d7:e2:a7:8b:30:64:be:03:37:c2:16:35:18:21:8c:2b:be:e9:
7f:6d:3b:1f:e4:c6:91:9f:96:3b:55:a0:81:6d:73:0b:53:5d:
3c:9b:21:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:46:34 2025 by rpki-client