Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/5253ae96-6f67-3e85-86be-36c4a5535f8d.roa
File: 5253ae96-6f67-3e85-86be-36c4a5535f8d.roa (raw, json)
Hash identifier: BA59tVpC5tv74g8tKwqqa2uYW5nwSDHEX3fAaFn35MY=
Subject key identifier: 37:DF:C4:D8:12:FA:78:A8:11:4F:CD:F5:CA:EB:6E:4E:75:C8:A4:03
Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial: 010D0C9F43285848CDE110934C408470B0E4C4C0
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/5253ae96-6f67-3e85-86be-36c4a5535f8d.roa
Signing time: Fri 07 Feb 2025 14:00:53 +0000
ROA not before: Fri 07 Feb 2025 14:00:53 +0000
ROA not after: Thu 08 May 2025 13:00:53 +0000
asID: 31898
IP address blocks: 170.114.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cd:e1:10:93:4c:40:84:70:b0:e4:c4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
Validity
Not Before: Feb 7 14:00:53 2025 GMT
Not After : May 8 13:00:53 2025 GMT
Subject: CN=bef82b4d-93d6-4b19-b8d3-9f6270599de6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:67:05:36:be:71:28:e0:26:9e:96:e7:b1:d3:
f5:ba:da:1f:25:0c:de:c3:20:73:cd:e4:b3:8a:26:
f0:ab:9f:5c:89:9b:d2:b3:4e:f9:d1:72:9b:17:48:
51:3d:6f:a1:96:d3:61:29:ca:7f:d1:85:64:a0:3d:
e8:20:52:00:e6:e2:cf:fa:7a:8a:b8:e8:67:74:c0:
80:59:da:40:cc:4b:c7:6e:f8:e8:81:9d:ed:18:38:
fa:d3:6d:7b:30:a2:0f:4f:a5:92:b1:d0:62:4f:80:
3c:43:9a:6f:9a:05:41:fa:a8:58:f3:e9:95:71:fe:
2b:a6:72:da:5f:db:98:19:2e:d9:75:59:21:a4:a5:
ef:19:36:20:42:8f:ec:7b:a7:23:fb:ab:85:e1:9d:
79:4d:ce:1f:3e:08:88:6e:99:6a:f0:b2:41:52:2e:
98:ea:d9:20:86:ab:c3:94:ec:6c:d4:51:f6:92:53:
d8:e1:97:04:21:c6:50:cc:01:6c:b2:c2:03:75:d4:
d8:a6:06:29:21:b2:1e:9c:41:8e:70:95:14:82:2a:
ab:d1:49:a8:4d:56:74:9a:ab:d3:f5:11:dc:6f:c6:
86:95:e3:5b:f9:f7:eb:dd:52:65:18:af:66:8f:25:
cb:49:f9:0c:55:34:18:d3:ca:72:71:b4:bd:9f:ba:
7e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:DF:C4:D8:12:FA:78:A8:11:4F:CD:F5:CA:EB:6E:4E:75:C8:A4:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/5253ae96-6f67-3e85-86be-36c4a5535f8d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
X509v3 Authority Key Identifier:
keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
sbgp-ipAddrBlock: critical
IPv4:
170.114.72.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:54:0d:9d:87:9d:ac:69:7f:74:d8:2d:75:0f:ae:14:97:4c:
81:04:5b:ed:03:1d:63:34:2e:3c:60:dc:f7:d6:95:99:ac:3d:
a7:2f:8f:57:4f:10:d3:46:d7:0d:ca:b2:3e:4e:d2:50:8e:1b:
66:40:bf:ce:19:d7:20:99:bf:4c:52:45:13:69:33:a8:a7:5b:
80:8f:5c:39:fd:af:fa:cc:56:75:a5:a8:fb:3a:96:81:2f:ee:
27:e6:3a:da:a7:04:10:8f:8b:a1:34:a4:8b:8f:cf:14:5c:a3:
45:5d:6a:af:30:50:94:90:fb:31:8e:b9:f8:ac:a0:e1:b2:11:
88:5c:a1:3a:3f:a5:9a:9e:63:c1:c6:62:3b:bc:6a:be:e2:55:
ed:50:9b:bc:93:bc:93:be:2b:fd:23:b2:3a:40:bc:a5:1f:33:
11:8d:dd:4e:59:76:66:26:f5:c6:4a:25:56:ce:ba:13:93:30:
33:17:5d:41:4c:b5:03:97:88:00:02:e5:c6:e5:98:a5:43:87:
ba:8b:00:61:34:fe:cf:f5:d6:93:15:b6:34:24:96:d5:92:89:
85:30:f5:44:28:65:34:41:2d:38:94:40:e9:2f:57:2d:96:f0:
4e:d7:9c:e3:39:e7:40:2e:02:f9:7f:3a:9c:ef:18:f5:ff:60:
6a:5c:27:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:21:56 2025 by rpki-client