Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/0ad08d40-214c-3c23-bcd6-50d7a2d4ac5f.roa
File: 0ad08d40-214c-3c23-bcd6-50d7a2d4ac5f.roa (raw, json)
Hash identifier: PkLvTbwtTdfLN2pMdZFChFYdMTHj8b4jY9xZHdMWtt8=
Subject key identifier: 72:28:8E:45:3C:73:AD:0A:8E:9C:1F:73:E6:C6:F0:34:AB:99:2F:79
Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial: 010D0C9F4328584843B0098FE5CFC0F8BE1AF200
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/0ad08d40-214c-3c23-bcd6-50d7a2d4ac5f.roa
Signing time: Fri 20 Dec 2024 02:00:40 +0000
ROA not before: Fri 20 Dec 2024 02:00:40 +0000
ROA not after: Thu 20 Mar 2025 01:00:40 +0000
asID: 7018
IP address blocks: 168.91.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:43:b0:09:8f:e5:cf:c0:f8:be:1a:f2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Validity
Not Before: Dec 20 02:00:40 2024 GMT
Not After : Mar 20 01:00:40 2025 GMT
Subject: CN=848eaf67-66e1-4612-bbff-dffe39c37f87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:c9:a7:50:91:cd:7b:a8:c4:21:9d:8c:dc:63:
18:10:cd:31:75:fe:f7:4e:ad:8a:28:3c:38:df:cf:
34:bd:54:6b:0d:be:cf:dc:cb:c0:00:8f:20:5d:fa:
3b:82:06:48:2c:7f:83:e2:7c:1f:f3:d3:12:78:6a:
f5:3e:56:6d:ae:69:a8:2e:c9:61:15:83:3d:8f:52:
c6:5a:a5:b9:dc:5d:15:3a:7f:8c:b5:a7:cd:ef:ff:
b2:a3:07:f0:f1:a0:cd:7b:ce:ea:a5:ff:d8:14:ea:
74:c2:5c:de:68:31:df:61:57:dd:e7:a3:46:3f:70:
1b:2e:9d:31:16:93:5d:14:ec:d8:c5:d0:41:ea:b2:
47:18:50:05:5e:43:78:1c:0c:99:c7:bd:0a:95:4d:
f6:ad:45:18:63:88:8f:de:e1:42:35:43:f0:af:4e:
54:5d:36:b4:21:19:62:be:f3:15:2a:69:be:ed:69:
55:5c:84:95:b9:b3:8b:b4:c7:ee:88:93:58:71:ac:
8e:18:3f:ed:b4:16:a3:0b:59:2e:5d:97:0a:44:15:
23:bf:c3:4b:1c:9f:da:ac:9e:bd:e2:f4:83:10:de:
12:26:72:a3:52:51:d7:43:b3:5e:01:51:54:96:e7:
f2:75:49:ea:79:6c:1a:f7:63:dd:96:8a:67:e8:21:
4e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:28:8E:45:3C:73:AD:0A:8E:9C:1F:73:E6:C6:F0:34:AB:99:2F:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/0ad08d40-214c-3c23-bcd6-50d7a2d4ac5f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
X509v3 Authority Key Identifier:
keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
sbgp-ipAddrBlock: critical
IPv4:
168.91.40.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:22:c7:16:c5:9f:1f:af:d7:f5:bf:5f:9c:c2:73:06:90:c9:
24:54:40:f3:4a:b0:21:40:39:7f:9d:95:fa:0f:01:d8:b9:a4:
a6:f0:a2:c8:de:d0:3f:38:ef:83:c6:21:52:79:a1:89:e8:1d:
86:30:8f:cf:86:3a:9b:24:b3:5d:cd:89:d3:e8:ac:b2:f8:8f:
21:51:fb:58:36:07:f9:cd:67:ed:9d:5f:0a:f5:9e:ac:34:33:
06:e3:11:18:31:40:d0:fd:c0:40:9c:35:00:43:a2:66:55:9c:
cd:44:c6:5b:e6:15:83:5d:30:0c:e0:38:6e:36:14:6b:b6:8a:
25:1d:ef:d3:26:cd:42:36:88:45:66:47:98:33:fd:b7:d1:61:
ba:41:3f:2d:12:7b:d1:9d:f7:5e:58:2d:e2:39:83:ba:0b:80:
11:c0:4e:01:8c:a2:35:52:d0:16:1c:f9:98:ae:33:8c:24:e8:
f6:50:87:8b:de:54:7a:47:cb:9b:57:d3:12:68:af:6c:8d:eb:
3d:19:9c:ad:65:9a:61:39:81:41:d8:ec:e5:86:0e:44:6f:8a:
8b:66:23:80:cc:07:50:51:cd:7b:ab:38:54:49:12:1a:87:84:
27:ce:e7:6e:37:f7:7c:55:53:1e:30:9d:7b:cd:db:aa:83:4b:
c5:ca:b4:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:05:59 2025 by rpki-client