Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/85b36fda-4c39-3d08-831a-87ed3712c15e.roa
File: 85b36fda-4c39-3d08-831a-87ed3712c15e.roa (raw, json)
Hash identifier: 5lqdpekefAUtOitm1OMey5RnkXF3TEGmO9rzTQQm0cQ=
Subject key identifier: 2F:E3:20:7B:74:34:06:10:9B:37:02:C1:61:FE:C1:EB:44:FE:D4:85
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858489E6B617E864C6E0B8B0D1540
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/85b36fda-4c39-3d08-831a-87ed3712c15e.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 63949
IP address blocks: 170.187.168.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6b:61:7e:86:4c:6e:0b:8b:0d:15:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=10f2a463-16f0-47eb-a371-4e5adb6a2e1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:22:f3:16:79:8b:1b:cb:4e:f6:18:81:ef:29:
ac:8c:cb:c1:dd:6c:7d:1c:d4:0a:e5:ea:65:fd:e1:
6b:d0:d7:61:32:2a:9f:de:96:ad:e4:37:f2:d2:3e:
df:8a:92:a3:7a:65:be:11:e3:91:23:4e:40:dd:cf:
8e:1c:4f:d7:4b:71:b0:cd:dc:4d:00:19:e5:28:80:
c3:63:ed:82:7b:ff:ed:ba:77:73:4d:27:f6:67:9e:
6e:3a:bc:cb:5c:03:ed:b6:5e:9c:0e:ef:0c:34:2f:
53:93:bc:67:ec:cd:55:3c:ee:0e:8a:52:c2:23:8a:
df:bd:fe:f9:49:2d:00:1b:f2:6e:86:fa:67:6e:30:
d6:b6:74:3e:73:6c:13:12:ab:a6:f3:6e:ec:a2:f9:
ed:dc:e5:e6:e6:2d:67:a1:22:a5:24:57:da:93:1a:
75:d6:ff:d3:c1:c9:68:7c:e6:31:39:7a:d1:c7:df:
b6:8e:9c:2d:e3:6e:0a:73:b5:be:a7:11:15:28:13:
c9:fe:c6:82:ec:9e:87:b4:ff:ed:d2:9f:db:4f:7d:
6d:f5:a0:1e:82:87:58:db:56:d3:fd:84:88:55:cf:
bb:50:2a:b2:ab:ac:c5:b4:8d:8b:4d:7d:37:45:30:
59:15:04:d9:dc:87:93:81:02:5e:9e:b1:b2:b5:72:
c7:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E3:20:7B:74:34:06:10:9B:37:02:C1:61:FE:C1:EB:44:FE:D4:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/85b36fda-4c39-3d08-831a-87ed3712c15e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
170.187.168.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:ec:9d:36:95:d0:73:6d:7e:b5:c6:17:d6:c8:81:a5:91:9c:
98:fb:b6:ed:77:4c:bb:11:7c:49:53:cf:cd:78:d0:fc:1a:1a:
4e:3b:3f:9a:86:fb:8c:47:b6:57:82:17:93:d7:96:d0:35:79:
79:52:eb:fc:ee:4f:32:11:a4:c5:d4:1d:1e:cb:a2:96:fb:57:
52:ca:aa:88:b5:cc:92:34:3a:10:4d:d3:11:32:5c:0c:dc:81:
98:1e:8e:90:b2:88:01:08:b7:88:6b:59:64:05:78:62:4e:82:
5b:ed:cd:0a:34:ac:89:d8:fb:6b:97:ba:32:1b:6a:cf:b5:4d:
f3:09:d8:01:f1:27:07:b0:10:7c:b6:53:85:45:e6:4b:29:80:
8e:bf:4e:36:d0:73:52:8a:68:f5:e7:32:57:85:03:c2:50:b4:
39:96:d9:c3:c9:4f:bd:37:51:0b:a1:36:3a:ed:d8:3b:61:b4:
a2:0b:f6:b0:97:47:42:7f:c7:bb:24:3c:6a:ae:92:78:99:e2:
7d:c5:3f:56:9a:19:ef:87:c5:a2:54:7f:fb:ae:41:e3:ad:8e:
52:6c:e2:ee:53:71:6e:c9:97:12:72:61:b2:bb:de:f5:e1:bf:
fc:25:99:d6:9f:23:05:cf:d0:1c:7d:30:4d:66:fb:71:e4:a3:
61:43:c5:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:58:36 2025 by rpki-client