Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/c58dfa58-cf97-3858-a61c-fb25dcfd42fc.roa
File: c58dfa58-cf97-3858-a61c-fb25dcfd42fc.roa (raw, json)
Hash identifier: RN+JRfBD4t0rm7S/U+JKihaZYbc76NvI8ANLQilsHw0=
Subject key identifier: 2E:16:D0:24:A2:0B:61:A3:99:DE:87:6E:F7:8F:B9:F6:8C:29:FF:D7
Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial: 010D0C9F43285848DA70F912C13C5276EE830C80
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/c58dfa58-cf97-3858-a61c-fb25dcfd42fc.roa
Signing time: Wed 12 Feb 2025 02:00:39 +0000
ROA not before: Wed 12 Feb 2025 02:00:39 +0000
ROA not after: Tue 13 May 2025 01:00:39 +0000
asID: 397630
IP address blocks: 207.254.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:da:70:f9:12:c1:3c:52:76:ee:83:0c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Validity
Not Before: Feb 12 02:00:39 2025 GMT
Not After : May 13 01:00:39 2025 GMT
Subject: CN=466bf72f-7dfd-4d28-8364-abbe343110ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:85:44:cb:ee:16:22:ff:89:f2:77:ca:94:90:
a3:6f:cf:45:d3:65:98:52:bc:87:ac:dc:4a:db:36:
2a:32:db:af:ca:ff:33:ad:78:b4:46:46:b6:4b:a7:
eb:2a:c0:28:80:fe:0c:10:42:b1:e5:23:9a:87:d1:
2c:f5:94:3a:37:e1:9a:f8:1f:1e:54:37:33:1f:ca:
0c:31:d0:d4:b9:43:8d:d1:3a:40:cd:94:7e:ec:e7:
1a:78:19:d3:18:31:fa:52:2e:05:54:ec:e8:39:82:
96:e0:a4:5e:43:b2:fa:b2:e0:37:2c:12:ed:54:ec:
80:74:2c:e4:fd:1e:86:78:90:b3:08:39:87:c2:bc:
48:89:36:af:ad:7c:a7:10:78:57:7e:b2:9a:b1:3f:
42:c1:f5:a3:77:22:7f:c6:6f:b1:2b:c7:e6:10:7b:
a5:67:fe:82:65:b6:83:84:98:5d:9a:64:84:02:42:
78:70:03:e7:1e:be:72:04:7a:6d:64:1e:bb:9c:4d:
a0:e3:07:3f:f8:ad:e0:a9:af:78:9f:be:eb:38:fd:
52:61:02:7c:dd:08:be:be:37:de:a9:3c:8f:3e:fc:
67:7a:58:07:e0:29:5f:81:42:29:f8:a7:79:2e:d6:
92:cf:38:24:89:ec:86:d3:b1:49:eb:5a:3c:19:b7:
14:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:16:D0:24:A2:0B:61:A3:99:DE:87:6E:F7:8F:B9:F6:8C:29:FF:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/c58dfa58-cf97-3858-a61c-fb25dcfd42fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
X509v3 Authority Key Identifier:
keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
sbgp-ipAddrBlock: critical
IPv4:
207.254.88.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:51:50:a5:cb:c2:56:d0:fa:6e:82:ee:61:d3:27:be:77:7b:
1a:eb:81:eb:a6:57:02:f4:eb:46:96:54:77:a0:09:c1:c2:de:
d0:22:53:b7:d0:e9:20:7d:1a:fa:58:16:e5:bb:5e:be:fa:84:
41:b0:9b:12:6d:d6:be:23:33:bf:26:79:55:bf:e0:56:87:99:
58:81:0b:ec:8d:f4:04:b8:f6:fd:b0:1a:a6:8a:d0:16:00:30:
46:e0:68:40:9b:9a:81:01:7c:ec:99:73:2d:18:fc:14:41:e2:
fb:72:d3:54:3f:10:24:94:b5:19:08:c9:5f:d8:54:5a:6a:bd:
ac:88:52:ab:8a:6e:d4:f6:82:7a:eb:60:43:e5:a5:55:58:e8:
d5:18:60:a1:18:f5:73:ae:83:7c:4c:1e:a4:86:2d:29:97:67:
2d:62:ae:e0:e7:5e:89:c4:05:cb:63:ea:a6:40:cb:b7:e2:c7:
f1:ed:f7:61:18:5a:de:47:8e:1c:f7:c9:bf:df:0f:29:4f:c8:
e7:d8:da:14:4f:1f:a0:fa:b5:94:82:b2:63:1b:c9:e2:51:ed:
cf:b6:f2:48:ac:97:2c:8a:08:66:20:8b:56:b3:d0:ba:04:7c:
94:d3:07:96:87:7d:68:00:d6:30:54:5b:ed:19:da:a1:2a:1f:
c9:53:e4:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:25:35 2025 by rpki-client