Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/bf607bd4-c593-35b7-8e93-60f04488cbd3.roa
File: bf607bd4-c593-35b7-8e93-60f04488cbd3.roa (raw, json)
Hash identifier: u/BphF8g7N7rV/6SLh1TBGaA/mN7+cJ01zXYajRGqss=
Subject key identifier: BE:CF:8F:66:3A:B1:57:4C:5C:80:74:0B:04:20:56:55:8F:87:32:2F
Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial: 010D0C9F43285848CC7B997EAC7C5C7533B8F780
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/bf607bd4-c593-35b7-8e93-60f04488cbd3.roa
Signing time: Fri 07 Feb 2025 02:00:39 +0000
ROA not before: Fri 07 Feb 2025 02:00:39 +0000
ROA not after: Thu 08 May 2025 01:00:39 +0000
asID: 64267
IP address blocks: 170.199.224.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cc:7b:99:7e:ac:7c:5c:75:33:b8:f7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Validity
Not Before: Feb 7 02:00:39 2025 GMT
Not After : May 8 01:00:39 2025 GMT
Subject: CN=73be37c5-2601-459b-a310-317a84d367d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:22:dc:8d:a4:fe:3a:4b:e0:74:da:ef:8f:9d:
72:07:93:f9:26:09:40:d6:de:80:b3:d6:e8:92:de:
ee:0e:ee:99:44:d8:7b:ac:10:74:45:e8:6d:05:0f:
b4:b6:20:0c:49:a0:bc:26:16:92:12:c5:51:a3:ff:
30:41:f7:c5:69:59:64:03:b5:73:fb:38:c9:80:77:
19:f9:17:ec:e0:5b:3f:3b:bc:6b:a9:12:80:82:54:
14:c7:26:b2:b2:f1:26:1f:3f:a9:20:6d:e1:ee:72:
06:43:bd:0c:73:ca:98:ff:87:38:85:6e:20:31:1b:
32:9d:d8:a2:f0:d7:fe:1b:82:6f:7d:5e:1f:9f:2e:
51:84:c8:7d:36:31:8d:7b:be:27:fa:70:5f:2e:b3:
9b:93:60:1a:e7:9d:1c:a4:92:62:9b:52:db:a0:63:
83:61:27:c6:7d:bd:b5:4d:df:35:5f:83:0b:8a:f2:
1c:ba:f6:3f:83:d3:0e:b6:57:df:2e:fd:c7:59:f2:
8f:9c:7f:d8:8c:86:68:91:13:52:75:19:05:e1:af:
a7:97:3c:d1:d8:83:5c:97:ef:5a:82:43:dd:a5:b1:
f8:04:f2:52:79:10:be:12:2f:26:a2:1f:80:b7:12:
93:fe:f8:7a:91:ad:b9:37:83:14:04:3e:93:b5:99:
f2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:CF:8F:66:3A:B1:57:4C:5C:80:74:0B:04:20:56:55:8F:87:32:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/bf607bd4-c593-35b7-8e93-60f04488cbd3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
X509v3 Authority Key Identifier:
keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
sbgp-ipAddrBlock: critical
IPv4:
170.199.224.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:a2:b8:b1:5b:10:01:73:3a:a0:9d:c2:57:13:ea:78:d0:9e:
8c:eb:68:9a:d1:33:b2:5d:9b:e5:26:29:51:c1:65:f0:b8:7f:
9e:13:85:19:c8:8b:03:44:38:81:87:8b:2d:45:3e:02:95:e7:
3e:32:f0:d3:51:4a:27:8a:44:ae:3b:63:b4:10:b8:6d:fc:da:
f2:ad:ab:42:77:4b:c7:20:1c:6a:05:d2:da:9b:62:d9:8f:0e:
3f:87:0e:eb:2d:a7:f8:cb:c1:ef:0b:26:18:8f:9b:7f:0f:aa:
b9:d5:a4:50:db:f4:f7:59:da:bc:8f:8c:8b:b0:ac:a7:2f:15:
34:dc:bf:c3:ec:af:3f:15:07:1c:34:d3:94:78:4e:f8:0b:91:
be:df:25:08:86:41:22:c2:aa:81:11:f8:1e:61:4d:b3:b2:43:
53:10:87:93:95:fb:be:bf:95:ad:ce:7e:2d:cf:0f:25:41:1e:
08:7d:da:70:98:af:a7:01:6a:0b:1d:94:07:4d:1d:0e:01:7f:
32:21:f7:7b:5d:42:8e:20:61:91:5d:61:fa:59:fe:02:b7:d8:
b9:8a:72:eb:16:71:6b:39:6d:87:ce:a2:1c:08:08:61:75:85:
40:d5:6d:e1:a6:61:b5:04:6d:9b:33:2b:f7:24:cb:f4:ce:0e:
34:50:19:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:30:38 2025 by rpki-client