Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/02b4b5be-576c-320c-8c47-29c2b07fdd0f.roa
File: 02b4b5be-576c-320c-8c47-29c2b07fdd0f.roa (raw, json)
Hash identifier: I23AMyJIbYvBvjoBl1gDhyhnNrYWUfxF/ZDXI0qrbrA=
Subject key identifier: 95:5C:C5:B1:82:9F:5D:1D:B9:9E:47:68:34:72:FB:69:C1:62:1D:92
Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial: 010D0C9F43285848DA70F1D6670BFBF4F81F1180
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/02b4b5be-576c-320c-8c47-29c2b07fdd0f.roa
Signing time: Wed 12 Feb 2025 02:00:39 +0000
ROA not before: Wed 12 Feb 2025 02:00:39 +0000
ROA not after: Tue 13 May 2025 01:00:39 +0000
asID: 64267
IP address blocks: 168.91.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:da:70:f1:d6:67:0b:fb:f4:f8:1f:11:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Validity
Not Before: Feb 12 02:00:39 2025 GMT
Not After : May 13 01:00:39 2025 GMT
Subject: CN=55b92f4f-4bda-44a2-9054-f31185bf28be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d7:ae:2c:20:6b:c7:86:25:50:54:0b:54:34:
f0:8c:ba:1e:b8:d7:6e:1c:c4:3f:05:95:19:cb:6f:
92:6b:05:fd:30:8f:69:a1:bc:6d:e1:a6:b2:e7:c8:
5c:90:e5:be:15:17:92:ec:fb:19:a8:63:f1:27:94:
15:70:a3:fc:85:b2:79:c5:51:74:14:ee:34:c8:6f:
61:c0:9d:7a:e5:3c:40:dd:cf:fb:77:5b:eb:bb:7e:
de:f3:7e:1a:c0:91:11:bd:46:a2:39:45:a1:41:e1:
d4:15:9a:7b:69:9f:b2:72:67:54:11:b8:7e:1f:f1:
fc:c5:bd:50:8b:81:02:d7:48:a0:c7:49:74:6f:10:
e7:21:8d:db:bb:b8:35:28:9d:00:78:4d:bd:af:09:
15:6b:37:90:0e:ff:fb:53:ef:81:79:88:34:f5:74:
79:06:c8:33:1c:42:da:43:46:a4:c5:7d:5c:42:6d:
74:df:2c:db:7c:ab:a7:3f:dc:ad:41:7a:f1:50:58:
2a:da:cb:1b:a5:18:61:87:0d:38:d7:61:75:67:8b:
3e:5c:93:46:14:15:a9:2e:e7:44:48:19:67:99:15:
18:2d:3f:72:4a:96:c6:a8:32:d7:8c:28:e7:f6:50:
81:0e:a2:d2:9b:5b:af:85:4f:e4:14:f8:5d:8a:e2:
d9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:5C:C5:B1:82:9F:5D:1D:B9:9E:47:68:34:72:FB:69:C1:62:1D:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/02b4b5be-576c-320c-8c47-29c2b07fdd0f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
X509v3 Authority Key Identifier:
keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
sbgp-ipAddrBlock: critical
IPv4:
168.91.36.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:00:c3:4a:8f:84:2e:db:05:a6:bd:1f:4f:57:99:d2:1c:16:
1f:64:35:0a:1f:72:c0:40:0d:1a:b5:22:53:df:bd:cd:3e:eb:
59:26:a4:df:cc:e1:73:66:6a:3e:d4:68:81:58:28:47:ac:e5:
99:c2:fe:9b:88:34:5d:1b:b9:cd:7b:10:de:93:b8:e9:0f:15:
81:ad:76:c8:75:f3:df:ad:99:94:7c:18:c6:57:29:d9:69:60:
5e:a6:ff:97:e9:c4:9f:0b:e3:80:ee:4b:5d:fd:8e:29:93:b5:
af:8b:67:7d:2c:a3:19:8b:5c:fc:55:ff:bc:97:10:dc:88:e6:
99:a3:c4:8d:4e:bc:a2:b7:8a:bd:51:29:39:6a:41:62:65:d2:
55:7b:f6:1e:bc:19:4c:83:4b:a8:95:f4:bf:aa:1c:3f:33:a1:
d7:57:72:50:13:11:d1:2d:92:38:2e:17:54:b7:7a:af:1b:83:
d9:ea:2a:2c:88:50:92:6f:74:76:a3:e8:e3:e2:6b:e2:b7:bb:
f5:10:1d:e8:86:03:31:e1:76:02:71:82:d5:2d:fc:65:72:af:
f5:d2:f3:1f:0d:4e:ad:a4:af:c7:57:a0:be:f6:0f:f6:de:2a:
39:72:d4:06:62:a0:78:eb:33:30:0a:ae:5a:e0:32:1e:8f:57:
12:1b:8f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:52:29 2025 by rpki-client