Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/dc659b2e-e1ec-3398-a84f-1a0622493eed.roa
File: dc659b2e-e1ec-3398-a84f-1a0622493eed.roa (raw, json)
Hash identifier: EqWXcvCxbz5teJDuKLkXxw0vfbOUnsQXha36YqHV3OM=
Subject key identifier: 47:1C:54:E6:72:B2:F1:E9:2A:30:D5:E0:D2:BF:BC:50:4E:48:EF:7E
Certificate issuer: /CN=be3ff10d-9ac5-46a9-8eb4-823027607ca1
Certificate serial: 010D0C9F4328584953C40D4317880B438197F580
Authority key identifier: C5:FD:6F:CD:D2:74:9A:00:05:9F:45:D5:49:E1:47:AE:5D:95:65:C6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/dc659b2e-e1ec-3398-a84f-1a0622493eed.roa
Signing time: Thu 27 Mar 2025 13:00:52 +0000
ROA not before: Thu 27 Mar 2025 13:00:52 +0000
ROA not after: Wed 25 Jun 2025 13:00:52 +0000
asID: 14618
IP address blocks: 170.89.0.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:53:c4:0d:43:17:88:0b:43:81:97:f5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be3ff10d-9ac5-46a9-8eb4-823027607ca1
Validity
Not Before: Mar 27 13:00:52 2025 GMT
Not After : Jun 25 13:00:52 2025 GMT
Subject: CN=ad638785-0b6c-408a-8091-ec8f6d73c9c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:db:f8:a4:c3:3f:d4:01:88:1f:df:90:df:17:
53:64:12:0b:23:d7:cb:74:10:b3:5e:0c:9a:77:bc:
a7:b4:75:f3:65:89:93:73:70:5a:66:e2:d2:a3:47:
2c:72:90:0e:8c:5c:ba:c1:48:84:92:85:aa:05:00:
d4:5e:64:5e:b5:a0:ad:f5:34:8f:bd:1e:43:7e:23:
88:cb:36:ae:f5:c9:c7:0f:a6:97:a6:0a:30:e1:e1:
1f:2c:e4:8e:01:53:24:3f:73:8c:5a:70:c2:15:5e:
db:9f:5f:f8:5e:a3:61:8c:5e:cf:78:4f:46:8d:25:
c4:9d:b4:bc:1a:18:17:ef:af:28:28:8b:60:15:05:
92:63:34:23:32:40:e3:86:f8:85:39:f6:50:58:6a:
73:88:d4:42:3a:b0:e5:1f:af:01:85:97:80:fb:69:
32:4d:8a:51:df:45:8f:11:e1:d9:61:4f:86:92:ed:
65:3b:8b:7d:2a:8f:ca:42:02:c5:da:3d:5d:7a:36:
40:42:48:bf:3a:9a:23:74:60:a1:c0:92:d1:6e:c2:
5d:a3:9f:52:40:d3:a8:b8:14:a9:15:8f:e1:5a:42:
89:27:d1:0c:a6:18:32:ec:65:91:91:ef:a2:e7:ad:
d7:bd:7e:a6:06:f3:50:d0:c2:50:0a:e5:3b:28:9c:
c5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:1C:54:E6:72:B2:F1:E9:2A:30:D5:E0:D2:BF:BC:50:4E:48:EF:7E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/dc659b2e-e1ec-3398-a84f-1a0622493eed.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/be3ff10d-9ac5-46a9-8eb4-823027607ca1.crl
X509v3 Authority Key Identifier:
keyid:C5:FD:6F:CD:D2:74:9A:00:05:9F:45:D5:49:E1:47:AE:5D:95:65:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1.cer
sbgp-ipAddrBlock: critical
IPv4:
170.89.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:23:56:3e:ba:c4:31:28:e0:6f:fb:f6:31:a6:4f:51:fe:ec:
4f:ad:da:dc:b5:fd:4b:45:98:d5:45:08:c9:9b:97:d3:9c:d1:
42:fd:e8:b4:00:0c:41:0d:82:f4:c4:7d:53:f9:18:91:77:c8:
bb:d2:e9:6a:01:f0:fa:8d:5a:22:28:9b:ba:c3:c3:47:d0:a7:
d2:ad:ef:3b:e7:7b:88:6e:97:35:ae:35:cc:5b:00:f6:b2:3e:
2e:91:2d:05:73:5f:f9:d0:5a:61:d8:47:93:09:cc:38:18:ba:
9e:ad:be:ba:19:3f:22:c9:cc:60:09:fa:a0:35:b5:88:60:ce:
66:51:12:a5:65:30:d3:92:97:f7:32:d7:2c:85:51:5c:8d:8b:
18:ac:77:c6:3d:9a:d6:a7:8a:d1:18:1c:83:21:53:ce:03:a7:
fa:df:4c:7b:f4:94:bd:36:bc:29:f7:7a:a7:08:0f:20:0d:66:
08:9e:b5:aa:8e:41:3c:23:6a:4e:bc:85:3d:c3:f3:dd:ce:46:
4d:47:e2:d2:c3:e4:04:34:91:f1:05:74:82:90:cc:30:cf:c9:
82:06:43:43:e9:57:2f:a3:ba:95:be:f6:62:f5:af:55:23:0e:
8c:70:d3:5c:78:29:fb:49:4f:e0:3c:45:f4:80:97:db:ae:9d:
2b:8d:ad:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:42:06 2025 by rpki-client