Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/28f935d3-57e6-314d-95ed-7c825db00b08.roa
File: 28f935d3-57e6-314d-95ed-7c825db00b08.roa (raw, json)
Hash identifier: TPj+6GdV/vKWsIu9hzFZcsMT7X5DlWukeA1DA2POjRA=
Subject key identifier: D8:36:EC:DA:CE:2E:1C:E5:FA:D2:7A:A6:41:65:E5:C7:93:18:79:FB
Certificate issuer: /CN=0be9634a-0674-471a-bb54-7866e12ded7a
Certificate serial: 010D0C9F432858486A4FB49C34AA066EF379F200
Authority key identifier: 99:C2:73:13:67:C3:46:38:B7:EB:0A:6F:DD:5E:E9:B8:81:48:F7:B1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/28f935d3-57e6-314d-95ed-7c825db00b08.roa
Signing time: Thu 02 Jan 2025 22:03:10 +0000
ROA not before: Thu 02 Jan 2025 22:03:10 +0000
ROA not after: Wed 02 Apr 2025 21:03:10 +0000
asID: 18888
IP address blocks: 64.42.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6a:4f:b4:9c:34:aa:06:6e:f3:79:f2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0be9634a-0674-471a-bb54-7866e12ded7a
Validity
Not Before: Jan 2 22:03:10 2025 GMT
Not After : Apr 2 21:03:10 2025 GMT
Subject: CN=710bbc26-7909-4734-8a5b-7389c190dbed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:aa:06:e3:24:02:85:93:fd:2a:61:23:73:b9:
1d:87:de:09:e0:29:5d:5b:42:fa:3f:a0:e7:99:cf:
29:bb:94:84:d1:14:b2:e0:98:29:25:93:69:75:0e:
3e:90:85:b6:b2:81:4b:af:5e:5d:15:92:90:36:09:
8a:28:09:22:56:ed:13:de:c6:d6:aa:2c:2b:12:1e:
dc:d4:12:c3:aa:6a:27:dc:e2:d0:b1:35:10:33:df:
58:96:a3:b0:0a:27:59:ff:a8:80:4f:65:9a:36:d6:
9f:61:1e:c7:af:47:50:d9:fc:70:88:80:29:e6:0f:
47:6c:e7:85:93:0f:40:60:6e:8b:b6:33:56:55:86:
37:90:41:68:07:36:0e:2d:e2:7c:8c:a8:20:47:9a:
85:93:2f:c1:b7:cd:32:cd:5d:36:99:d5:58:30:48:
f2:59:53:20:dc:83:e0:9e:ee:96:ef:8d:81:51:da:
53:ab:95:80:5b:dd:a4:ac:0b:35:ea:00:b9:a9:5d:
ee:89:db:3f:32:65:13:18:b6:86:b9:94:30:df:91:
24:80:86:a3:93:58:34:e1:70:e1:21:5b:62:2e:cd:
fc:88:a1:13:0f:78:cf:ff:a8:fb:0c:f2:85:dc:75:
6d:e7:dd:ba:c4:79:c8:7e:5a:6d:6b:41:0b:1a:91:
17:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:36:EC:DA:CE:2E:1C:E5:FA:D2:7A:A6:41:65:E5:C7:93:18:79:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/28f935d3-57e6-314d-95ed-7c825db00b08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/0be9634a-0674-471a-bb54-7866e12ded7a.crl
X509v3 Authority Key Identifier:
keyid:99:C2:73:13:67:C3:46:38:B7:EB:0A:6F:DD:5E:E9:B8:81:48:F7:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a.cer
sbgp-ipAddrBlock: critical
IPv4:
64.42.191.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:fc:30:39:39:27:f4:4c:93:fa:aa:a5:ea:35:0d:47:0d:c7:
4e:ba:15:b1:37:3a:b7:21:89:bd:ad:eb:2b:03:97:4b:67:db:
0d:c5:6a:02:7c:af:ee:2b:e8:bc:48:65:c2:78:af:44:c3:79:
90:08:2f:18:e0:f7:cb:7e:a4:a8:f7:30:72:2e:a1:49:4d:92:
f2:63:80:7b:d4:1a:eb:5d:76:39:f5:e3:9a:13:46:38:ac:c2:
3b:69:1e:25:dd:b2:9c:2f:97:8d:1b:d8:7b:2d:4c:bb:c4:94:
72:c1:21:79:0b:a6:b9:51:a6:66:20:b9:6a:f3:60:08:58:cc:
34:5d:19:e2:47:0e:95:14:cd:9c:30:4b:22:23:09:77:26:62:
36:69:fa:0c:87:98:57:8c:19:f6:89:0e:18:6f:6e:06:30:7b:
3e:d4:8a:93:a5:bc:86:1e:49:94:f8:90:62:48:db:ab:15:eb:
91:70:17:56:b5:24:5e:62:ab:2d:be:c8:5c:0c:43:1d:f3:4a:
f6:da:0f:c0:b0:be:87:6a:2b:cd:7a:4c:5a:d0:fd:a0:dd:c8:
91:c4:7e:5e:dc:fa:06:28:fd:db:a3:00:bb:71:b6:e9:da:c1:
1a:e8:42:4a:23:ff:64:84:b6:3e:89:90:b8:82:6e:f0:0c:82:
ea:74:82:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:59:55 2025 by rpki-client