Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/7c3fa070-5295-38f2-82dd-677394ac2f8a.roa
File: 7c3fa070-5295-38f2-82dd-677394ac2f8a.roa (raw, json)
Hash identifier: 9e2HF9dnoHIA8HpcOV76jYz1MsD06eDnEDQrp080hog=
Subject key identifier: B3:AA:EF:13:C9:23:97:CE:DB:E9:D6:F7:DC:FF:34:89:25:12:31:96
Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial: 010D0C9F4328584917DC01319EFBF2DA482D1980
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/7c3fa070-5295-38f2-82dd-677394ac2f8a.roa
Signing time: Thu 06 Mar 2025 02:00:39 +0000
ROA not before: Thu 06 Mar 2025 02:00:39 +0000
ROA not after: Wed 04 Jun 2025 01:00:39 +0000
asID: 7018
IP address blocks: 158.62.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:17:dc:01:31:9e:fb:f2:da:48:2d:19:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Validity
Not Before: Mar 6 02:00:39 2025 GMT
Not After : Jun 4 01:00:39 2025 GMT
Subject: CN=622f02a8-8107-4ecc-96be-42340cd31d10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:6f:80:2c:81:da:45:5d:3e:0e:ca:b4:3b:83:
db:8e:3f:67:83:c3:df:9d:0a:94:74:3e:bc:e7:c8:
a9:78:ff:7f:a5:2c:75:d1:ff:46:f5:c8:8c:2e:c4:
e5:7b:86:44:b5:13:ab:c1:ae:e6:c2:6e:e5:82:5f:
61:37:a4:cb:ce:f3:9f:12:04:fe:39:a1:ca:50:3a:
f2:39:ee:3a:3c:b1:ca:3c:9a:c8:1c:ab:71:c6:9a:
93:a3:ea:aa:57:ab:fd:db:22:71:36:86:cc:c4:33:
eb:35:70:7f:eb:7e:69:39:9c:ea:93:9d:cb:07:63:
7b:ab:37:9c:d1:6b:0e:ab:9e:a2:97:18:70:05:b0:
17:10:0d:4a:3a:fa:b6:1f:f7:45:cd:a5:9d:43:89:
54:1b:e4:f4:2d:9f:7a:82:38:5a:a2:9a:ac:d8:d1:
07:a4:f5:63:fc:2d:c0:dd:ab:ed:79:13:c5:03:ab:
4e:39:60:16:27:97:ad:a2:b3:9b:ff:e7:d3:97:80:
c5:61:ba:68:a7:ce:47:4b:37:01:de:98:43:31:84:
62:9b:e2:67:94:ea:92:bc:3c:7b:67:26:2e:da:4b:
47:d1:47:d2:f1:6f:a0:3e:63:89:58:c6:da:23:c9:
90:7e:06:7b:7c:76:91:62:0f:c8:cd:79:a6:13:e2:
b1:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:AA:EF:13:C9:23:97:CE:DB:E9:D6:F7:DC:FF:34:89:25:12:31:96
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/7c3fa070-5295-38f2-82dd-677394ac2f8a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
X509v3 Authority Key Identifier:
keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
sbgp-ipAddrBlock: critical
IPv4:
158.62.208.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
cc:66:d4:4e:44:33:21:cb:1c:4b:6d:c2:e5:45:7c:d8:7e:01:
ce:bc:4f:e3:c4:9c:5d:56:96:8b:84:98:73:8e:cb:c3:da:6e:
10:d6:2d:b2:2e:c4:98:72:c1:2b:d3:d5:40:9a:70:86:d1:16:
4a:3d:98:d8:0f:43:ab:86:d0:19:be:54:0d:cd:18:0e:c9:36:
56:6e:e2:15:fa:d4:1d:8e:2f:1a:5e:eb:2d:59:cf:a4:77:e1:
09:0f:fe:9f:fe:24:26:77:46:e9:5d:91:76:9a:87:7d:4c:1d:
e1:46:1d:a7:a2:c3:5f:a6:d3:1f:50:ce:ec:88:10:90:56:76:
f9:53:44:b3:fa:44:83:64:ac:63:38:b4:40:eb:3d:c5:fa:de:
13:19:e4:7b:07:dd:89:65:4c:2d:78:10:93:44:e6:38:2d:3b:
90:95:51:cc:d8:26:ed:f4:df:26:8f:08:e3:8f:31:28:69:87:
18:68:95:7d:e0:01:ee:84:5e:ad:da:88:95:42:8b:71:6d:a9:
95:35:c2:e2:ef:4b:b9:f7:02:c7:61:d4:da:e2:82:4a:12:7e:
2a:85:f4:44:26:58:8e:88:83:17:64:b5:9e:d7:c4:b0:9d:29:
cc:04:1a:91:dc:a0:16:dc:42:f8:66:c0:60:9e:2e:ec:c1:0d:
ec:6f:8a:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:56:02 2025 by rpki-client