Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/bfba4049-9260-3ea8-abbe-443facb7c8f1.roa
File: bfba4049-9260-3ea8-abbe-443facb7c8f1.roa (raw, json)
Hash identifier: vvxrJJlLvaXvCxNRsXdeWhEEvQYeJJUVDJVlZ87GtTs=
Subject key identifier: 34:83:FE:40:CF:67:2D:F5:BD:61:D2:F0:5D:0D:19:32:71:64:ED:CA
Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial: 010D0C9F43285848D7A654D155E970DC3C43E940
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/bfba4049-9260-3ea8-abbe-443facb7c8f1.roa
Signing time: Tue 11 Feb 2025 02:00:39 +0000
ROA not before: Tue 11 Feb 2025 02:00:39 +0000
ROA not after: Mon 12 May 2025 01:00:39 +0000
asID: 64267
IP address blocks: 192.171.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d7:a6:54:d1:55:e9:70:dc:3c:43:e9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Validity
Not Before: Feb 11 02:00:39 2025 GMT
Not After : May 12 01:00:39 2025 GMT
Subject: CN=45046915-b3aa-4ca7-9c34-11ec7abd8a28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:81:c3:3f:ab:08:ab:60:68:e4:7b:cd:10:63:
ff:44:dd:0e:eb:c4:e2:37:44:70:04:4c:f1:25:40:
84:33:ed:2a:e4:64:65:70:e3:b1:9b:90:f0:b9:93:
50:6c:5f:c9:ee:d9:be:29:28:16:31:9f:65:18:b7:
0f:ec:c7:c0:ec:8b:c6:34:04:5d:05:17:b3:1c:8d:
09:9b:c5:65:43:ae:e6:ee:4f:a6:a5:c3:93:9c:40:
8f:23:82:e4:87:d8:52:72:35:d1:81:cd:ed:bc:58:
58:84:8e:3a:27:c8:d9:3d:a7:fb:5c:b9:92:48:ae:
f0:9a:13:fe:86:e2:9f:ec:74:85:b4:58:72:aa:19:
ac:f2:75:c3:f7:7d:6a:6b:05:5c:8b:57:49:ac:78:
2a:d3:6b:0f:61:cb:c6:1b:b5:37:6c:29:17:08:91:
12:a1:c3:a9:64:b1:ea:d1:62:30:ec:e4:f3:2e:c8:
44:10:f8:0b:77:b8:91:25:85:1b:ff:02:8e:e1:32:
9c:a6:29:c5:9e:72:99:c2:c0:30:06:cc:43:2c:41:
59:cb:9c:ce:9e:36:bc:19:9f:e4:67:4d:4d:fc:e8:
c5:be:5c:ae:15:e3:c4:80:55:0a:e0:a5:dd:47:75:
8b:92:d5:55:98:3b:27:73:4f:5b:84:95:d8:dd:d9:
1b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:83:FE:40:CF:67:2D:F5:BD:61:D2:F0:5D:0D:19:32:71:64:ED:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/bfba4049-9260-3ea8-abbe-443facb7c8f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
X509v3 Authority Key Identifier:
keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
sbgp-ipAddrBlock: critical
IPv4:
192.171.95.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
e0:e9:56:35:dd:6f:30:72:18:28:0a:7f:7a:a4:46:77:9d:02:
1e:a9:0b:35:bc:62:17:2b:08:bb:b8:b9:28:37:d2:80:b2:b3:
02:ec:d2:34:9c:97:58:e6:1b:db:e6:44:df:4f:96:b2:5f:2d:
5c:6e:a2:37:e5:23:73:a0:a2:ec:70:26:a9:be:8d:d0:5a:6c:
36:2f:b1:cb:2e:43:92:68:5a:bd:7d:20:fe:31:4b:72:ca:80:
dc:b2:82:5f:05:17:74:29:d5:fc:62:15:15:7c:b8:73:d9:98:
ee:c9:68:59:fc:63:d6:62:57:f4:a2:2a:9c:0c:84:41:11:ca:
0b:03:c5:57:ae:9d:4d:54:cb:e1:db:c8:a8:7e:22:3c:eb:da:
28:01:58:1c:96:0d:11:ad:57:6e:bf:93:8c:e9:c8:ae:89:05:
f4:82:be:49:d4:7e:89:5b:6d:03:0e:6e:5b:6f:6a:87:97:b9:
04:2e:4f:73:59:e8:5f:eb:1a:ee:ef:4c:c1:64:fc:86:fa:ee:
39:a1:cd:0e:50:92:9b:be:f5:08:9d:02:6a:af:ee:9d:6c:47:
76:6a:9e:f7:de:89:0f:7d:78:30:36:ad:2b:2f:7f:ab:61:b6:
87:43:d1:53:37:e8:58:ca:9c:f1:4f:15:35:ae:94:38:d6:9a:
be:a0:da:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:09:19 2025 by rpki-client