Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/7714f8b4-e08c-3ecd-b63d-aac5909ad71d.roa
File: 7714f8b4-e08c-3ecd-b63d-aac5909ad71d.roa (raw, json)
Hash identifier: xPjRYrLPW4/ulFYSaNEtNRuAuytCzvjZgiZ0zTUw+ek=
Subject key identifier: BD:9B:29:39:FA:25:47:60:A5:6F:D7:D4:C9:CB:EB:B5:07:7E:94:59
Certificate issuer: /CN=b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1
Certificate serial: 010D0C9F43285848D2114256C617BBB210FC1C00
Authority key identifier: DD:F6:09:95:17:8B:B7:4A:6E:9C:AA:DF:B0:69:85:38:26:70:0B:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/7714f8b4-e08c-3ecd-b63d-aac5909ad71d.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 398203
IP address blocks: 170.117.176.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:11:42:56:c6:17:bb:b2:10:fc:1c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=352c1804-43d4-4384-8a16-cdac38947216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:bc:ac:a0:70:93:0c:e6:8d:45:43:36:f6:d3:
9d:a6:ff:6d:d5:e8:e5:95:01:0a:4e:d8:96:05:e1:
32:b1:43:d0:68:96:f4:1c:f2:11:93:c0:da:b8:e6:
09:94:47:0d:eb:ee:ee:3f:6b:da:09:37:96:ab:dc:
56:43:ce:53:28:8a:b6:55:2e:7b:a5:ef:3b:d4:4c:
2f:b2:53:bc:b3:0a:3d:f7:f2:be:99:17:71:9d:39:
48:5d:e7:99:e1:45:d5:bc:7e:2f:f1:ea:a1:1f:b5:
ed:4f:9d:7a:9c:6e:97:9b:60:9f:22:97:8e:59:ac:
54:55:68:fb:81:81:da:0b:f3:12:cf:f0:e4:8c:d4:
c8:4b:c9:60:3d:00:98:a9:88:d7:94:86:89:50:78:
0c:f1:30:c6:de:1f:e7:0e:62:6f:44:bd:85:d4:3a:
86:36:42:8b:ce:d5:60:0f:85:4f:38:55:a8:5c:20:
04:e5:0d:c5:79:86:d9:f2:5c:c2:67:e4:95:b1:02:
2f:33:c0:c9:d9:ab:53:7c:18:92:3d:64:93:5b:0d:
15:fb:41:16:83:30:2b:bc:d7:66:bc:b7:60:cd:81:
70:bc:ff:0f:ab:14:5a:1d:1f:fa:c7:78:c4:f0:6b:
a1:3c:64:01:4b:ac:26:f5:f5:6d:c7:79:5c:2a:94:
58:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:9B:29:39:FA:25:47:60:A5:6F:D7:D4:C9:CB:EB:B5:07:7E:94:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/7714f8b4-e08c-3ecd-b63d-aac5909ad71d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.crl
X509v3 Authority Key Identifier:
keyid:DD:F6:09:95:17:8B:B7:4A:6E:9C:AA:DF:B0:69:85:38:26:70:0B:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.cer
sbgp-ipAddrBlock: critical
IPv4:
170.117.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:37:0f:5e:04:07:9b:03:11:c5:ee:84:86:c4:66:44:a2:86:
d6:54:2a:08:29:19:8d:5d:85:4b:91:a1:a1:8d:50:d4:bc:c6:
5c:40:b5:ef:ef:d7:38:27:5d:a2:84:5d:eb:05:ca:f5:32:28:
6b:98:44:d3:db:46:d2:98:7e:8c:52:70:0b:c9:f0:82:00:fe:
b6:11:50:2b:07:52:fc:3f:cc:b2:93:44:e0:f5:bb:19:e0:29:
6e:90:1e:5b:de:f8:15:86:f5:08:3b:e6:4a:31:eb:77:ab:b1:
fe:62:31:f4:eb:fc:c9:21:c7:46:ad:8f:14:29:17:bb:ef:1f:
9c:44:3f:66:ed:f0:31:05:6e:73:1c:f0:5d:d9:60:61:77:f6:
f9:70:9f:08:42:b5:f6:a3:72:e2:2b:89:0a:a9:0e:da:ae:b1:
ce:68:14:3c:8a:f0:07:52:34:46:a7:2e:ce:54:c9:d6:42:4e:
b5:5c:56:80:1a:09:7a:22:b9:30:92:ed:f7:ec:9e:36:d4:69:
63:ea:6d:4e:04:4b:24:bc:f1:a1:f1:50:71:e2:e0:b2:16:c0:
bf:cb:39:e8:d3:95:05:35:22:0f:44:7a:d4:ed:8b:c2:1f:6f:
85:1f:7b:79:c5:eb:c7:c9:20:43:60:43:e2:eb:7b:54:43:91:
69:28:30:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:33:14 2025 by rpki-client