Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/2f4be69b-9bf8-3179-b092-a6686655caeb.roa
File: 2f4be69b-9bf8-3179-b092-a6686655caeb.roa (raw, json)
Hash identifier: E+xQfws7FPTjSVWVPbeuzsCf4GriVvyaV+6WLOAUFPw=
Subject key identifier: 41:B4:25:DF:6E:7B:B7:0C:D8:F1:1E:87:84:BC:36:B0:DF:AA:E0:43
Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial: 010D0C9F43285848DA70F2469A36F948CED056C0
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/2f4be69b-9bf8-3179-b092-a6686655caeb.roa
Signing time: Wed 12 Feb 2025 02:00:39 +0000
ROA not before: Wed 12 Feb 2025 02:00:39 +0000
ROA not after: Tue 13 May 2025 01:00:39 +0000
asID: 64267
IP address blocks: 168.91.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:da:70:f2:46:9a:36:f9:48:ce:d0:56:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Validity
Not Before: Feb 12 02:00:39 2025 GMT
Not After : May 13 01:00:39 2025 GMT
Subject: CN=de4d3cef-7148-4424-a5e7-279b216af65f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:b8:32:ff:a7:55:9e:05:e4:10:c7:23:06:a8:
fa:84:81:2e:af:5d:73:a8:55:0a:e9:a6:a2:d8:c2:
4f:a5:fc:32:40:7e:35:65:8e:1a:62:8b:e0:4a:fd:
8b:45:7e:f3:d6:d8:8d:f2:56:2a:7d:11:cd:71:94:
8d:e9:7c:99:a3:db:c7:d5:e7:11:d0:76:fa:fa:39:
86:a8:4a:be:44:8a:5c:b4:2a:98:49:1e:d5:6a:4e:
50:ef:0a:96:80:86:cf:c7:08:c3:58:cf:24:66:27:
4b:a2:6e:34:36:60:4e:ad:1f:99:38:a3:95:0a:72:
d3:1e:bc:98:2a:18:7f:36:1c:2a:e6:b8:83:47:c2:
33:e4:f8:6e:2a:07:5b:04:01:da:80:09:e9:9f:79:
da:a9:ea:86:ac:0e:ce:93:31:cc:7b:82:36:f5:b6:
4b:22:20:0d:b8:6e:61:8c:63:d4:ec:35:b2:b6:c8:
df:95:17:62:a2:cf:80:9f:fc:ab:55:5e:5e:50:2a:
b5:9b:57:73:ac:c5:11:07:8c:8e:63:d1:e9:19:11:
fa:9e:ab:7f:c4:b2:6b:9b:26:cc:5b:ee:eb:9d:7e:
63:5b:8a:ef:ae:d4:e1:a9:91:e0:cc:8e:97:2e:39:
39:be:1f:11:b5:b5:1c:02:91:96:e5:fd:a9:f0:1e:
65:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:B4:25:DF:6E:7B:B7:0C:D8:F1:1E:87:84:BC:36:B0:DF:AA:E0:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/2f4be69b-9bf8-3179-b092-a6686655caeb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
X509v3 Authority Key Identifier:
keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
sbgp-ipAddrBlock: critical
IPv4:
168.91.43.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d2:75:3a:1f:1e:1d:d8:f3:c1:3e:09:07:f6:84:8d:30:94:e0:
65:0f:6f:09:c9:85:0e:46:9a:d8:c4:64:36:71:bf:7b:56:c7:
22:3c:b2:f0:e8:1c:39:01:1f:af:86:9c:e1:4a:0f:b5:65:dc:
e5:55:bb:35:86:52:9c:19:9f:50:be:fa:cc:aa:8e:ce:20:de:
bc:a1:a5:25:44:a5:24:90:2a:60:09:14:84:79:d8:5b:77:a9:
dd:e0:8b:bb:b6:e0:92:e7:ee:62:a0:02:e3:c6:81:55:36:44:
72:42:e9:e2:a6:a8:f9:5b:c4:d9:b3:d8:1a:ba:6d:38:39:f5:
b4:68:1f:be:a2:38:ad:05:2f:8d:c1:2c:95:68:dd:2c:f3:33:
44:d8:c0:fd:4e:3e:fe:21:55:e6:a6:0c:ef:68:d9:68:26:e9:
2e:10:60:aa:2f:4a:03:5a:7f:7f:e3:e1:f9:59:c7:fb:79:65:
d3:bf:ed:10:33:dd:cf:53:b4:4d:c7:1d:63:5c:42:ad:78:05:
9d:b0:e5:ad:e9:1a:8b:11:c8:36:a2:8e:e7:ac:23:bf:0f:8a:
b4:0a:2f:45:9a:f9:31:63:82:f9:c1:ce:a7:4b:2d:1b:77:59:
ba:87:b6:7c:d6:b7:c2:01:02:b5:35:e4:87:67:a8:37:2c:89:
b3:52:78:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:04:38 2025 by rpki-client