Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/02b4b5be-576c-320c-8c47-29c2b07fdd0f.roa
File: 02b4b5be-576c-320c-8c47-29c2b07fdd0f.roa (raw, json)
Hash identifier: dUCTvULpMpuHOr8szc1uSD5WtSOkHqN9A+PrSfUd+8o=
Subject key identifier: 8A:58:04:C5:A7:3D:C5:92:E2:73:D6:B2:1F:BC:AA:FB:59:AC:B5:8C
Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial: 010D0C9F43285847FB1A1EA36DCE4AAFEC3BBE40
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/02b4b5be-576c-320c-8c47-29c2b07fdd0f.roa
Signing time: Sun 24 Nov 2024 02:00:27 +0000
ROA not before: Sun 24 Nov 2024 02:00:27 +0000
ROA not after: Sat 22 Feb 2025 02:00:27 +0000
asID: 64267
IP address blocks: 168.91.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:fb:1a:1e:a3:6d:ce:4a:af:ec:3b:be:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Validity
Not Before: Nov 24 02:00:27 2024 GMT
Not After : Feb 22 02:00:27 2025 GMT
Subject: CN=44a98d22-e537-4235-bc27-b477ecafe2a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f1:fc:01:37:7d:4f:b2:35:e5:0b:fc:74:c2:
e6:15:08:5e:25:92:96:d3:48:c8:c2:f8:cf:66:c5:
2c:b5:97:ad:d4:50:a3:db:d7:da:f3:80:00:79:d8:
9c:e6:da:42:f9:76:ad:f2:80:31:07:02:f4:6d:34:
ca:9d:53:c0:78:ee:28:54:04:e7:01:ea:5e:c6:27:
2a:c0:57:39:1b:b6:3f:e9:bc:b5:e4:b0:c6:cc:a3:
02:38:a6:0c:1d:12:ae:b7:4c:aa:66:c5:f4:ba:62:
38:0c:11:ee:f0:ed:20:9e:de:59:4d:fb:5b:ed:17:
2a:bd:2c:6d:29:7c:f6:83:64:ed:9a:02:29:5b:a4:
4b:c5:14:85:62:99:c4:82:bb:04:4e:54:30:4b:8a:
70:5c:99:a4:aa:ff:46:94:46:30:32:62:12:e2:ec:
62:68:e4:1a:99:0b:0e:72:be:9b:28:6b:b9:24:5f:
78:9f:18:53:d2:29:96:0a:77:99:6e:c5:d4:b4:27:
39:a8:17:07:b0:f0:b2:3a:02:8e:66:da:e6:28:6a:
50:be:73:43:cc:6e:37:7d:33:ca:14:cd:bf:8e:59:
bf:13:2b:d1:45:c8:26:89:14:4d:48:53:60:b7:e0:
cc:41:ca:3d:a9:93:95:c2:2a:7a:06:73:19:97:95:
80:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:58:04:C5:A7:3D:C5:92:E2:73:D6:B2:1F:BC:AA:FB:59:AC:B5:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/02b4b5be-576c-320c-8c47-29c2b07fdd0f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
X509v3 Authority Key Identifier:
keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
sbgp-ipAddrBlock: critical
IPv4:
168.91.36.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a7:33:b7:0d:54:f3:8a:28:d7:dc:3b:40:7a:e8:a4:f9:44:27:
a7:6d:a2:8e:cb:db:b4:fd:f9:59:a1:ef:34:74:52:79:ee:0d:
30:d5:66:bb:7f:5f:26:7d:2c:d0:7a:d6:e6:85:8e:61:6b:2d:
10:56:a5:01:3a:e8:7f:d6:0d:23:ff:4a:8d:44:05:e5:e7:29:
12:38:18:42:8d:55:4b:7f:dd:df:31:78:11:5f:d9:a4:ee:5c:
71:af:c4:3d:f0:e0:f7:50:9d:37:79:8e:4c:e4:c2:9d:b4:73:
5d:9b:82:3f:d4:87:bc:4a:ca:67:75:a4:c3:b2:5b:f4:d0:42:
cb:38:7b:7d:61:0a:03:a0:49:74:02:62:7f:f6:ec:02:d2:bf:
1b:d7:a8:8e:b9:76:37:9f:30:b8:c9:60:b0:1e:f3:33:1f:7f:
a4:a9:83:b3:c2:3f:75:c1:54:c2:f3:86:f6:8d:a6:07:5f:ac:
80:ad:29:dd:0f:0a:55:bf:9b:06:08:fd:91:29:db:47:51:72:
09:63:c5:61:84:e4:58:7f:62:db:c5:63:f3:f4:89:05:58:83:
ff:26:d3:b7:53:38:e9:2a:73:d4:e5:df:04:06:f5:9f:88:4a:
dc:98:a6:dd:0e:52:fb:7e:a4:5b:aa:15:a0:a2:f4:54:cf:76:
80:ea:f1:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:29:40 2025 by rpki-client