Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/1a652fb4-5e2d-338e-ba84-ac25f63bf537.roa
File: 1a652fb4-5e2d-338e-ba84-ac25f63bf537.roa (raw, json)
Hash identifier: nK/Kk67vSFSE7ZDCNd5Miz+18w32Jq+VopTPCR7M3iE=
Subject key identifier: 8D:12:50:E0:84:C2:9E:37:58:F0:94:B4:15:FB:4B:7D:6E:6C:98:24
Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial: 010D0C9F43285847F84F84344D53BAE786ECD180
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/1a652fb4-5e2d-338e-ba84-ac25f63bf537.roa
Signing time: Sat 23 Nov 2024 02:00:28 +0000
ROA not before: Sat 23 Nov 2024 02:00:28 +0000
ROA not after: Fri 21 Feb 2025 02:00:28 +0000
asID: 64267
IP address blocks: 199.34.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f8:4f:84:34:4d:53:ba:e7:86:ec:d1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Validity
Not Before: Nov 23 02:00:28 2024 GMT
Not After : Feb 21 02:00:28 2025 GMT
Subject: CN=735b6173-c613-4a26-a44f-60ef8de36979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b5:6f:f2:55:23:af:2a:62:8d:16:78:38:b1:
af:93:5e:e5:40:c1:bd:a0:df:e0:53:ff:f6:24:df:
87:ff:bf:5c:46:02:8f:1f:b2:cc:d6:87:97:b9:b9:
c5:de:e4:07:3a:0b:ac:16:d5:47:c7:cb:fb:0c:56:
d8:0f:91:2a:fa:73:be:d4:10:55:fc:03:62:8d:dc:
e4:ec:61:41:5f:84:f2:db:6b:15:ae:97:02:43:a5:
ce:f0:c6:db:86:dc:37:15:69:2c:d7:3e:33:7b:1c:
b2:60:1f:6b:eb:f1:12:c7:2a:f2:41:8b:7a:ef:2e:
07:df:0f:e3:ac:37:4c:7c:8c:59:ca:56:9b:06:e1:
81:8d:33:b3:29:6f:cb:a5:33:95:1d:2b:de:fb:72:
0d:d3:f2:ad:3a:49:4b:98:0d:a3:31:1e:a2:ae:44:
b5:da:44:90:b0:98:55:54:88:e4:c3:50:56:d7:a2:
d8:e9:ad:68:d6:02:b5:75:9f:a6:12:bb:5c:11:31:
c0:d8:e6:23:b9:35:28:da:65:0c:45:7e:fa:7b:66:
8b:a8:17:5e:33:7c:56:7e:fb:ea:e0:c4:99:7b:80:
e8:f0:9e:bd:b4:b2:4c:60:00:d4:14:33:6a:19:f9:
93:18:f2:8c:e2:a2:1e:48:4e:ab:84:3e:c7:0f:be:
72:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:12:50:E0:84:C2:9E:37:58:F0:94:B4:15:FB:4B:7D:6E:6C:98:24
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/1a652fb4-5e2d-338e-ba84-ac25f63bf537.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
X509v3 Authority Key Identifier:
keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
sbgp-ipAddrBlock: critical
IPv4:
199.34.90.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:27:51:15:99:43:b3:21:08:d8:61:e2:42:ef:9a:65:88:ad:
e9:27:df:e1:79:1b:d7:93:b9:78:f1:89:69:5a:17:8f:5a:97:
5e:c8:c1:9a:0f:f7:2c:20:80:da:3b:11:b1:ae:19:26:4b:cd:
ea:6c:50:ad:0e:38:8f:1d:bb:ac:a0:49:1d:c9:a1:3d:22:04:
68:43:56:10:46:22:82:6e:be:7e:1b:6e:2f:2c:61:22:d7:93:
98:07:36:55:25:4e:b4:3e:2a:39:c5:4a:bb:48:85:69:5f:9e:
f0:98:44:f1:ad:ee:ff:20:52:d5:2b:88:6d:12:bf:8b:6e:1c:
98:ca:24:14:5a:c6:bb:94:5e:d4:0d:4c:6d:df:20:7b:ac:c8:
70:ac:65:a5:eb:98:fc:e9:9d:11:6a:0a:e0:ed:46:0e:ae:64:
ff:3d:18:8d:eb:b6:2c:bc:0f:a5:7f:28:bd:1e:90:f2:d0:92:
f0:ce:22:fe:8f:6e:d9:ca:2a:67:14:a2:43:96:23:93:c7:5d:
22:3d:1a:c5:1b:bf:c2:36:db:34:2b:58:41:3c:ee:e8:99:b2:
9a:f5:7b:b8:b4:3c:7f:23:8f:07:59:90:17:1b:77:0b:05:45:
98:20:37:b5:35:96:ad:12:e5:0f:6e:aa:f1:1d:e1:6a:a1:0f:
a1:c0:77:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:06:09 2025 by rpki-client