Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/2e101c4a-a0da-35e0-9bc5-e1f123c8e78b.roa
File: 2e101c4a-a0da-35e0-9bc5-e1f123c8e78b.roa (raw, json)
Hash identifier: LoQm85iWAp9xFpfE+ux0mj0t8GLseLGod3fA4tghWEc=
Subject key identifier: 13:7A:05:1D:E2:B7:A4:ED:D0:43:6B:EB:54:82:08:6E:EE:55:B1:45
Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial: 010D0C9F43285848C6E634E9342188D2035747C0
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/2e101c4a-a0da-35e0-9bc5-e1f123c8e78b.roa
Signing time: Wed 05 Feb 2025 02:00:39 +0000
ROA not before: Wed 05 Feb 2025 02:00:39 +0000
ROA not after: Tue 06 May 2025 01:00:39 +0000
asID: 7018
IP address blocks: 68.234.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c6:e6:34:e9:34:21:88:d2:03:57:47:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Validity
Not Before: Feb 5 02:00:39 2025 GMT
Not After : May 6 01:00:39 2025 GMT
Subject: CN=d394fa66-9baf-4acf-9961-0e21d02ed5b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2e:95:8b:cf:1d:16:d8:5d:bc:d5:c5:ad:0c:
03:35:dd:20:f2:cb:8b:f1:8e:12:7e:e7:64:c9:3d:
55:10:7e:58:b0:08:f3:1a:89:43:6b:25:20:4d:7b:
4c:af:27:4b:f4:8b:60:f2:6a:d8:05:1f:69:0f:46:
3b:f7:04:2a:8b:ff:2f:cf:e0:34:5b:1d:55:6b:9b:
7c:3c:be:11:1a:be:67:0b:dd:59:c1:7d:33:7b:1e:
f0:11:82:a9:08:3b:0f:1d:15:31:4e:3d:22:df:c8:
53:02:92:f3:e9:56:2b:fa:f0:1d:f2:4b:cb:d3:49:
f0:e1:10:58:75:72:78:78:5f:ac:e9:a0:68:22:6b:
8c:ee:c3:c9:be:a8:95:b7:d3:28:81:e2:fc:ba:dd:
fd:99:68:2b:e4:b5:68:ef:08:59:a2:ce:d6:35:db:
f0:24:54:c0:70:93:24:49:c2:d8:d3:7c:20:4c:d9:
08:4f:19:b3:8e:1b:a2:38:70:dc:88:13:78:64:d6:
84:84:4c:7d:c6:29:83:3e:6b:e4:91:65:ec:5b:8b:
53:0e:2b:c9:51:41:0c:24:c4:47:55:a3:13:0e:bc:
a2:a2:24:04:19:a3:f2:04:c2:92:7f:ac:33:4c:31:
18:7d:74:95:6d:eb:5f:13:1a:9b:42:8f:7c:a3:24:
63:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:7A:05:1D:E2:B7:A4:ED:D0:43:6B:EB:54:82:08:6E:EE:55:B1:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/2e101c4a-a0da-35e0-9bc5-e1f123c8e78b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
X509v3 Authority Key Identifier:
keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
sbgp-ipAddrBlock: critical
IPv4:
68.234.45.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:24:c8:ba:db:f7:64:bb:6a:8c:06:b9:55:ed:dd:79:d6:f6:
5c:fc:8e:76:5d:b1:bb:83:4e:a0:e3:66:a9:d6:13:71:35:3c:
c6:5f:ee:dd:0c:8f:ff:fd:be:fe:9b:83:17:59:a2:b9:d2:64:
36:2e:50:d0:82:0a:ea:ce:5d:89:50:29:58:6f:01:28:90:64:
9d:e1:a8:a5:1c:a6:6f:80:80:e7:1b:b4:1c:e4:de:1c:60:6a:
9d:71:42:00:f3:28:97:22:ca:b5:35:ef:e3:89:dd:df:fa:d5:
47:e5:22:b8:1f:41:99:34:c6:d2:8a:08:d6:f2:b2:28:23:45:
a9:5f:e5:d2:1a:21:68:33:5a:c4:d3:09:93:48:ea:db:a5:50:
19:bd:d6:70:ed:eb:da:4d:58:f3:c7:59:fc:fc:28:d1:25:f8:
8f:9c:76:29:d7:de:3a:cb:f3:7d:60:c7:06:84:09:9e:de:dc:
b4:30:83:00:b7:a0:5a:86:8a:48:be:28:6a:2f:b2:4c:8b:6f:
5a:68:56:2f:a4:6a:b6:23:cc:c8:b7:98:b9:7c:f7:7d:aa:9c:
f3:a9:79:55:90:32:01:b0:01:09:8d:89:01:bd:d1:a5:f3:b5:
54:2c:22:83:32:73:06:f3:bc:71:cd:8d:81:6d:33:c8:fd:49:
9a:c7:f0:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:11:20 2025 by rpki-client