Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/2489eab1-fab2-357f-aeb8-08dc32897f54.roa
File: 2489eab1-fab2-357f-aeb8-08dc32897f54.roa (raw, json)
Hash identifier: nRnEbqVId8zBp14HTkSwnaqLpWtUaWdMvUqPCXSlNeU=
Subject key identifier: E5:06:1A:90:C4:54:A6:86:61:68:F1:70:5B:81:44:A9:3C:39:88:51
Certificate issuer: /CN=4b81c928-08cc-4234-b15c-0f1a197c6e00
Certificate serial: 010D0C9F43285848CB164ECF33795654A7FA4800
Authority key identifier: 1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/2489eab1-fab2-357f-aeb8-08dc32897f54.roa
Signing time: Thu 06 Feb 2025 14:00:52 +0000
ROA not before: Thu 06 Feb 2025 14:00:52 +0000
ROA not after: Wed 07 May 2025 13:00:52 +0000
asID: 20419
IP address blocks: 69.28.108.0/24 maxlen: 24
69.28.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cb:16:4e:cf:33:79:56:54:a7:fa:48:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b81c928-08cc-4234-b15c-0f1a197c6e00
Validity
Not Before: Feb 6 14:00:52 2025 GMT
Not After : May 7 13:00:52 2025 GMT
Subject: CN=84c2462d-0640-4813-9bc4-f91cb43845b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:de:c5:dd:36:68:96:2b:12:42:9e:bc:60:f8:
6e:ff:fc:df:89:9a:ec:2e:94:f3:8f:1a:ff:28:1d:
8d:3b:ab:57:78:44:22:7a:90:06:73:97:dd:69:6a:
1a:ec:bd:f2:a3:50:fd:b1:70:1a:d5:37:61:96:e7:
c8:26:7f:b9:d8:3c:bc:79:97:fe:9b:00:77:77:a2:
0d:34:cc:79:c2:6d:3e:65:ad:1a:6d:3f:14:1f:8b:
b3:6f:11:bc:65:8e:70:fb:35:cb:f2:e6:7f:ef:32:
e4:da:08:2b:75:7f:33:fa:e9:c1:61:54:0f:69:ab:
ad:df:01:eb:77:7c:a1:fe:4d:1b:7f:78:2d:72:5b:
e0:f7:a3:a8:db:d9:77:54:a8:ae:dc:10:4f:70:e5:
f6:91:85:8d:6a:8f:5e:fe:67:f1:50:25:d1:ee:07:
1c:75:d2:21:93:db:18:10:98:01:fb:2b:e1:90:49:
75:1f:52:fd:5c:87:65:2e:f2:fa:a6:60:a1:60:df:
c8:0d:b9:02:7d:72:84:ca:2a:55:4d:d9:da:57:d9:
43:8b:89:f6:a1:9e:9f:8d:6f:99:0f:8b:52:5a:e2:
c5:73:04:ca:6a:0e:37:1f:1b:bf:c5:63:f2:e9:aa:
1e:e9:25:f6:9a:a0:08:cc:d5:89:f2:14:02:d9:e1:
9f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:06:1A:90:C4:54:A6:86:61:68:F1:70:5B:81:44:A9:3C:39:88:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/2489eab1-fab2-357f-aeb8-08dc32897f54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl
X509v3 Authority Key Identifier:
keyid:1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer
sbgp-ipAddrBlock: critical
IPv4:
69.28.108.0/24
69.28.116.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:3c:86:fa:fc:48:89:a3:a1:12:34:ae:4c:73:d3:5f:3e:a3:
a9:e9:b7:1b:c7:bc:9c:4d:db:3d:33:04:93:97:0b:15:f6:77:
5d:ef:0f:7c:60:ad:8b:6b:f9:02:7d:6c:03:a0:a2:7b:c1:03:
8d:c2:fb:42:d2:64:8d:dd:e6:61:59:34:be:0a:69:ad:f8:2e:
c1:5b:59:43:f0:fa:1c:75:a0:62:e0:82:cd:a1:b2:58:d0:13:
09:7a:33:2c:1c:a1:a5:4f:6e:fd:b7:45:95:6d:59:91:64:4a:
d6:78:d4:e8:f7:1b:85:a9:8f:97:98:7f:f8:29:fb:59:10:cf:
fc:da:c9:c0:02:31:84:2d:33:13:d6:f4:87:f1:6f:17:a1:3a:
08:93:fd:ad:30:04:f6:34:2e:f8:21:31:ca:20:dd:8f:37:c4:
4d:77:ed:b3:ad:81:0b:55:e3:1b:a6:1c:60:1d:13:31:79:aa:
41:a0:f9:ce:45:35:1f:6c:a6:db:4c:1c:f0:af:b6:ca:45:96:
42:30:25:a1:92:fa:ab:18:29:50:35:0e:cd:66:e8:67:f7:e1:
46:21:8d:58:2e:09:76:a3:32:97:94:92:3f:bc:ff:35:c8:16:
a1:48:68:1f:bd:3a:ca:4e:24:67:f5:f2:22:6c:b1:2e:e1:90:
a9:c4:65:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:43:10 2025 by rpki-client