Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/550f796a-55e5-3304-a2b2-b77e1122697e.roa
File: 550f796a-55e5-3304-a2b2-b77e1122697e.roa (raw, json)
Hash identifier: gjWE4Oprh48+bhTWV2Ps6MMStm7ll0K9LA+KpnFeMrU=
Subject key identifier: 43:1F:F6:A8:7D:8A:BB:58:05:AD:A1:58:58:DE:F4:1B:90:BF:84:32
Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial: 010D0C9F43285848DA70F22FD5940AC481359680
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/550f796a-55e5-3304-a2b2-b77e1122697e.roa
Signing time: Wed 12 Feb 2025 02:00:39 +0000
ROA not before: Wed 12 Feb 2025 02:00:39 +0000
ROA not after: Tue 13 May 2025 01:00:39 +0000
asID: 64267
IP address blocks: 168.91.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:da:70:f2:2f:d5:94:0a:c4:81:35:96:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Validity
Not Before: Feb 12 02:00:39 2025 GMT
Not After : May 13 01:00:39 2025 GMT
Subject: CN=d8025772-ee1e-4984-afed-e2865898a3be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c2:99:55:67:73:92:b7:b8:1b:7b:b3:24:9d:
79:41:38:53:47:a8:80:44:f6:d9:d4:30:ec:28:b1:
20:17:2c:d8:c2:11:ca:43:a6:17:19:77:fc:64:1b:
70:43:0a:af:99:55:ab:93:2b:05:17:e7:b4:9c:d9:
f7:65:a8:83:a9:fc:3b:b9:af:68:d2:0d:11:13:b1:
59:62:70:7b:0a:bf:7b:69:53:9b:cd:69:3f:af:ce:
fe:67:8e:df:a3:95:a3:54:18:d4:19:19:b9:33:ec:
26:c3:ec:55:7a:6b:1e:8c:d6:b4:71:57:a6:05:74:
ad:1d:3c:bf:09:e1:b6:1b:ee:7c:26:fb:b0:4c:1a:
35:9d:e6:30:d3:8d:90:b4:f9:e6:3c:02:7c:eb:8c:
21:63:e0:72:07:12:e8:fc:bf:d8:fd:fa:bd:bb:ee:
12:e1:28:0c:7d:0b:ec:e4:af:68:5c:fb:3b:c7:5f:
dd:c8:47:d2:ef:d5:89:d3:22:99:e1:37:dd:60:75:
ba:1b:23:66:ed:fd:b2:05:19:9a:06:8d:fd:d3:04:
39:27:b2:be:1d:03:ff:05:b0:d2:e1:ee:6e:e4:a4:
9e:ad:c6:4c:99:b5:3e:8f:28:5e:5c:27:86:11:91:
f5:d2:fd:82:8b:00:66:03:c8:ff:68:8f:a8:cb:f5:
ad:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:1F:F6:A8:7D:8A:BB:58:05:AD:A1:58:58:DE:F4:1B:90:BF:84:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/550f796a-55e5-3304-a2b2-b77e1122697e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
X509v3 Authority Key Identifier:
keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
sbgp-ipAddrBlock: critical
IPv4:
168.91.42.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:2b:30:81:95:e0:ab:39:43:b2:b9:3d:9b:1e:38:fe:32:06:
59:5b:09:17:d4:29:e6:87:1f:16:fe:fa:ed:a1:ce:ad:69:0d:
57:a0:7c:c9:55:5a:00:c7:73:58:00:b1:63:de:81:9a:86:2d:
18:7f:d3:d3:0e:4e:8b:9d:61:19:18:9e:1a:b6:97:c6:cb:7e:
d8:d3:9c:16:ff:68:0b:01:6c:67:8b:33:3c:c8:5c:25:61:0a:
09:77:45:70:6f:87:dd:84:b7:9f:1f:8e:39:fe:59:84:a1:1c:
e3:fb:a7:7f:51:36:51:94:95:1d:54:d5:32:8a:fb:5d:62:35:
50:40:f9:7a:f2:50:e0:8e:39:c7:9e:dc:09:d5:fc:98:d0:0e:
2f:cd:1d:00:55:41:75:4e:2c:64:6a:c2:25:c5:6a:a5:8a:b2:
12:e7:64:d3:01:0c:f3:3b:3a:b3:ba:e2:03:f0:58:33:09:6d:
05:ff:c5:c5:40:90:b9:b8:7d:b3:7b:f4:3a:5b:9c:3d:ee:80:
f4:52:da:9c:9e:81:55:b4:39:96:f1:4d:ad:90:c2:a6:2c:ac:
7d:33:55:a4:b9:1e:b8:16:95:22:25:54:6a:ba:0e:86:3d:73:
b1:e3:9f:4b:5e:3e:43:db:5b:f2:44:72:8b:f0:39:8d:a5:2b:
ec:4c:65:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:11:47 2025 by rpki-client