Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/1b6d170b-dd1f-3d5f-934e-d7c7cd19008c.roa
File: 1b6d170b-dd1f-3d5f-934e-d7c7cd19008c.roa (raw, json)
Hash identifier: k2Z2ZUQZC5kTIfNN8h2iEvwLltZ3IwsPepseZOqKWsw=
Subject key identifier: 56:D0:67:B6:CB:77:C8:52:3C:CD:CD:8C:66:0D:DC:6F:32:4D:D3:76
Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial: 010D0C9F43285848D7A653D915BA4AFE7DF44F00
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/1b6d170b-dd1f-3d5f-934e-d7c7cd19008c.roa
Signing time: Tue 11 Feb 2025 02:00:39 +0000
ROA not before: Tue 11 Feb 2025 02:00:39 +0000
ROA not after: Mon 12 May 2025 01:00:39 +0000
asID: 64267
IP address blocks: 192.171.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d7:a6:53:d9:15:ba:4a:fe:7d:f4:4f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Validity
Not Before: Feb 11 02:00:39 2025 GMT
Not After : May 12 01:00:39 2025 GMT
Subject: CN=81b82990-d482-4ed2-b14f-b379b83f9918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a0:c9:ed:52:44:15:71:29:39:94:09:98:5b:
f9:a6:70:f1:d6:ab:36:e5:a4:14:73:1f:d7:93:51:
d7:bb:b8:90:c3:c2:f0:62:22:a5:10:6c:c5:81:86:
39:c7:96:a2:cb:eb:7d:c9:a6:a8:f5:92:bc:91:f1:
84:59:03:a5:26:76:c8:66:e3:95:fa:8e:9c:4b:5b:
62:66:bc:07:ef:f5:bd:97:a1:f3:db:a1:ae:ac:bd:
07:1e:45:5b:d0:4c:a8:e5:dd:69:d9:da:fe:cf:b5:
3b:fd:91:de:eb:5f:3b:00:ed:d0:b3:3a:6c:d1:17:
e5:6f:5a:15:37:57:a8:77:25:42:11:78:59:8c:e1:
15:0e:9b:fc:af:e8:c1:3a:58:90:16:83:4f:23:cc:
d7:54:43:30:6a:c9:ac:ff:79:63:2b:ce:67:2a:dc:
44:10:23:15:74:c9:77:57:19:94:7a:41:33:a7:42:
b7:98:ad:6f:ab:56:9c:10:a5:df:94:5f:4d:11:70:
22:88:7d:d4:2c:df:0d:88:e6:c6:db:ed:b7:c3:aa:
1d:80:3f:86:9f:86:45:c4:ca:c6:ba:91:1d:7b:56:
9f:97:2f:b8:3e:3f:03:4f:ac:29:10:33:4b:dd:2f:
b9:97:c3:22:ce:69:02:41:dc:6d:98:b0:11:8a:9c:
89:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:D0:67:B6:CB:77:C8:52:3C:CD:CD:8C:66:0D:DC:6F:32:4D:D3:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/1b6d170b-dd1f-3d5f-934e-d7c7cd19008c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
X509v3 Authority Key Identifier:
keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
sbgp-ipAddrBlock: critical
IPv4:
192.171.80.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:20:fa:64:cc:0b:ce:b0:4b:02:f9:a3:43:33:5e:ce:c8:41:
7f:dc:d7:9b:4f:e3:41:14:cd:6d:19:e4:51:7c:e2:d0:4b:46:
83:81:23:a1:2b:74:6e:c0:d7:b8:51:55:eb:17:4f:1c:83:4c:
ce:b4:73:b4:17:15:cf:ac:58:8f:12:d4:54:5c:d9:85:ef:ec:
08:0f:3d:60:8e:e1:cd:91:78:73:c2:25:2a:44:a3:83:fa:c7:
ac:57:d0:5a:7d:a9:5b:f8:cf:70:d6:8e:ba:ac:25:c2:a0:9e:
9b:9a:bd:eb:32:a4:3d:d2:e6:25:5c:d0:bd:52:ce:9b:3a:d7:
27:79:8a:50:9c:a9:79:07:fe:ac:e6:7c:f1:27:0f:7c:22:88:
3b:e0:81:b2:53:cc:4d:e6:92:72:63:f5:23:3c:85:c8:d7:87:
9b:af:28:96:01:36:f0:24:0e:d3:36:2a:47:0e:6c:13:a6:55:
de:92:4f:79:78:a7:e5:3b:35:a2:3b:51:3c:e8:16:28:13:16:
6e:f4:2d:88:4a:97:e1:56:98:65:32:95:47:4c:fb:6d:04:f0:
51:e1:5a:8d:dd:19:1d:6a:ca:79:9f:2c:9d:b4:8d:6c:e8:bb:
6b:7b:5e:66:75:19:aa:c2:02:82:30:e3:bf:d4:24:88:05:82:
f3:03:0d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:42:18 2025 by rpki-client