Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/6c3485d6-1237-32dd-8713-2aed82f2e07d.roa
File: 6c3485d6-1237-32dd-8713-2aed82f2e07d.roa (raw, json)
Hash identifier: 3WIo/fXbrM/EIyqll3Ol6wQBlMM5tb52mnw4+56UOLI=
Subject key identifier: 7D:A9:F0:97:95:F0:9E:1D:AC:7A:78:91:B8:D5:F3:1C:91:04:75:1C
Certificate issuer: /CN=74a9db22-8d49-4938-9c6f-e3fd428c158e
Certificate serial: 010D0C9F43285848E59BC0A351173FE8F6DE1480
Authority key identifier: 98:FB:A9:0E:C5:77:6A:E8:69:9A:83:85:57:54:2E:33:A0:1C:26:41
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/6c3485d6-1237-32dd-8713-2aed82f2e07d.roa
Signing time: Sun 16 Feb 2025 02:00:40 +0000
ROA not before: Sun 16 Feb 2025 02:00:40 +0000
ROA not after: Sat 17 May 2025 01:00:40 +0000
asID: 396982
IP address blocks: 170.10.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e5:9b:c0:a3:51:17:3f:e8:f6:de:14:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74a9db22-8d49-4938-9c6f-e3fd428c158e
Validity
Not Before: Feb 16 02:00:40 2025 GMT
Not After : May 17 01:00:40 2025 GMT
Subject: CN=ee24175a-533b-4d43-866c-e33cb2b4fef2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:fd:66:07:0e:05:85:42:ea:a2:94:3a:37:27:
f4:83:95:c6:c4:13:69:18:0d:d9:de:d6:9d:00:59:
65:27:42:32:af:f2:c9:89:bb:a7:a4:0b:b3:21:d4:
9f:8f:a4:5f:5c:dc:9c:db:64:3e:21:4b:d3:0f:00:
dd:7c:38:0e:7c:ed:45:1d:1f:5f:65:80:48:0a:65:
70:80:f7:15:6f:33:f5:cd:48:78:20:1a:2d:c2:02:
62:6e:7f:0b:c2:eb:2d:88:7f:fa:8c:79:b2:10:2e:
dc:28:95:9d:37:2d:1a:b3:2a:ae:bb:01:c4:b9:8d:
2a:2f:6f:4a:96:90:80:bf:da:1a:e5:25:92:d3:58:
fa:40:73:0d:7f:50:8c:dd:4e:e4:a9:28:2a:f5:89:
78:f3:81:38:44:14:7b:59:ce:1d:8d:fb:57:99:76:
69:df:1a:53:7a:29:3f:ac:59:c9:14:1c:5f:8c:61:
16:5a:1a:0a:b1:1d:13:29:43:a6:75:83:6f:69:38:
16:18:0a:9f:26:b1:08:4c:c9:28:56:d4:61:9c:2f:
c1:39:73:f7:ed:7b:d0:d0:e8:6e:f1:f4:06:8b:8b:
61:43:2f:7e:90:30:0b:79:f6:99:71:2e:68:ec:10:
92:21:07:ac:3d:7f:3f:a8:14:5a:13:71:63:62:24:
8d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:A9:F0:97:95:F0:9E:1D:AC:7A:78:91:B8:D5:F3:1C:91:04:75:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/6c3485d6-1237-32dd-8713-2aed82f2e07d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/74a9db22-8d49-4938-9c6f-e3fd428c158e.crl
X509v3 Authority Key Identifier:
keyid:98:FB:A9:0E:C5:77:6A:E8:69:9A:83:85:57:54:2E:33:A0:1C:26:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e.cer
sbgp-ipAddrBlock: critical
IPv4:
170.10.222.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:72:54:2d:c5:2c:83:1e:25:2c:23:4a:0a:7d:31:54:35:22:
3c:a2:46:a3:76:86:c5:4d:21:6a:2e:3a:44:07:9c:d5:60:5b:
50:4d:e1:66:55:a3:56:ce:e9:b1:cb:d8:37:f2:2a:de:2c:bc:
f7:b0:96:40:5a:15:80:30:5f:dc:01:48:4d:62:2e:07:1e:4a:
d1:90:95:eb:4d:4b:9e:70:23:f2:0c:fa:39:01:14:ef:6d:6b:
9a:aa:95:d5:57:98:08:a7:4f:85:fc:f5:e0:cb:73:03:53:48:
e8:26:53:8e:88:9a:b1:03:e7:81:8d:d8:30:e1:28:08:7a:fb:
49:c5:28:6a:30:a2:94:1f:c9:63:51:fd:2d:46:0f:2c:a7:e7:
77:24:12:9c:41:d3:5d:96:b3:21:fd:29:43:88:87:ad:7d:67:
fc:27:af:88:75:f1:49:9b:65:cd:74:ae:fe:e7:13:2c:35:cb:
df:36:29:8a:f7:ff:c9:06:d8:dc:8e:5f:ee:0e:d8:51:a0:ca:
1d:4c:7c:5c:ea:0b:4c:1e:a7:5f:b6:4e:d6:5f:d1:7d:83:5c:
9d:2f:2b:9b:17:0c:61:7b:19:d8:6b:fc:20:2d:e8:db:4c:12:
b7:7c:df:76:d3:21:e4:f0:2c:78:3b:a0:17:45:78:4c:1f:0e:
97:64:8d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:01:31 2025 by rpki-client