Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/d490b4ec-a37d-3473-800b-69852b5ca56d.roa
File: d490b4ec-a37d-3473-800b-69852b5ca56d.roa (raw, json)
Hash identifier: eaHq93FRbG/Cjku3FhAVFz9OHqBfwsr4bE6tbJ+qoqQ=
Subject key identifier: 4F:23:A0:8D:D6:60:92:58:8F:E3:3A:86:33:17:23:FB:C4:D7:1C:59
Certificate issuer: /CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4
Certificate serial: 010D0C9F43285848EF615C150CAE6DFDBAE3F480
Authority key identifier: D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/d490b4ec-a37d-3473-800b-69852b5ca56d.roa
Signing time: Wed 19 Feb 2025 14:00:52 +0000
ROA not before: Wed 19 Feb 2025 14:00:52 +0000
ROA not after: Tue 20 May 2025 13:00:52 +0000
asID: 14618
IP address blocks: 170.176.160.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ef:61:5c:15:0c:ae:6d:fd:ba:e3:f4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4
Validity
Not Before: Feb 19 14:00:52 2025 GMT
Not After : May 20 13:00:52 2025 GMT
Subject: CN=876a03c1-9c29-4905-9e50-bcf26d38193b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:ae:a1:ab:3f:1d:0a:93:14:c0:e0:99:0d:56:
d7:af:1c:e5:99:5e:1a:9d:8c:fc:21:09:06:2e:50:
fd:51:83:e6:14:03:b1:d1:aa:cd:b6:9f:52:38:3a:
e3:a3:8c:21:3a:b0:4a:a1:11:ba:66:a6:5d:2c:f9:
1e:d5:c6:a6:61:6d:21:42:d5:b6:c0:13:95:75:51:
bd:e5:bb:b3:40:02:45:4d:7c:ce:58:22:92:25:76:
17:42:ee:2d:b9:78:94:6c:73:fb:a3:13:17:d6:73:
29:55:a0:e9:c5:70:bf:e6:4a:13:af:7c:29:5c:b1:
b0:71:94:d8:f3:c7:20:87:7b:8c:de:6f:8b:af:ef:
94:54:7c:83:dc:a6:1a:7c:f8:37:11:a6:3e:78:39:
c5:97:ea:93:c1:9a:21:70:29:9d:bf:83:11:53:93:
cc:53:63:e2:32:13:a9:58:86:c0:a6:db:83:08:0c:
52:7f:ec:63:70:95:c6:4a:03:64:99:76:83:ce:ea:
f5:e5:47:57:b9:b6:6a:b3:79:0d:e4:03:43:62:38:
77:9b:ac:40:f4:95:32:1f:02:17:60:45:92:db:91:
8c:46:3b:f9:92:58:cc:d1:6e:ba:cf:28:d7:d8:20:
9a:26:e6:3c:32:39:8b:17:b9:7a:20:4b:a4:7a:73:
c4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:23:A0:8D:D6:60:92:58:8F:E3:3A:86:33:17:23:FB:C4:D7:1C:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/d490b4ec-a37d-3473-800b-69852b5ca56d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl
X509v3 Authority Key Identifier:
keyid:D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer
sbgp-ipAddrBlock: critical
IPv4:
170.176.160.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:13:d0:55:8e:17:18:a2:fa:bd:5a:27:69:57:7a:05:4b:74:
1a:8c:a1:0b:d1:0c:1a:aa:e5:83:38:9e:c3:c2:bd:cd:c2:92:
54:ed:45:30:91:15:16:44:1a:2a:86:75:01:02:5b:99:bf:38:
6a:93:d8:81:1e:fd:3b:03:df:b6:01:05:de:f1:69:bc:3c:50:
f5:5b:bf:74:e7:12:65:32:ab:4a:bc:9f:80:9f:16:2d:e5:28:
79:1b:b2:14:09:ff:89:9b:14:b2:28:bb:02:74:79:c7:1b:af:
70:0f:87:91:f5:fa:35:b9:17:e8:b1:ce:58:9a:59:fe:31:5a:
db:12:42:7a:1f:14:a2:ca:be:34:2c:b1:04:79:bc:8b:98:e7:
77:0d:88:16:ce:32:b2:45:4c:6e:38:42:53:82:2c:3e:1c:f5:
a6:92:99:9f:8d:33:2f:81:9c:59:fc:f1:cb:d5:32:31:08:e3:
57:8b:ae:0d:27:44:e8:d9:21:08:dd:12:7a:3f:b9:63:ea:3a:
cd:09:fa:3e:2e:a5:5e:8c:fb:04:04:73:24:3f:29:91:48:ad:
c8:e9:a4:6e:4d:09:c9:c7:ee:ab:ee:7e:c3:20:f7:fe:1c:d7:
8c:ab:85:52:63:3e:21:8f:7e:3e:73:50:fd:d5:f8:e7:c0:81:
2b:9d:2f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:31:14 2025 by rpki-client