Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/2e25868c-59f1-35e2-a20d-94b64eb48e82.roa
File: 2e25868c-59f1-35e2-a20d-94b64eb48e82.roa (raw, json)
Hash identifier: kiqh6A24U7G21qvOr9CM+/BQ0SMiO+N+cpyr7MUlaXE=
Subject key identifier: B8:38:80:CB:8A:29:73:FE:E7:30:3D:CF:3C:F1:8E:DA:E0:64:29:59
Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial: 010D0C9F43285847ED24C30511E4BFD8EF32F880
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/2e25868c-59f1-35e2-a20d-94b64eb48e82.roa
Signing time: Tue 19 Nov 2024 02:00:27 +0000
ROA not before: Tue 19 Nov 2024 02:00:27 +0000
ROA not after: Mon 17 Feb 2025 02:00:27 +0000
asID: 397630
IP address blocks: 199.101.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ed:24:c3:05:11:e4:bf:d8:ef:32:f8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Validity
Not Before: Nov 19 02:00:27 2024 GMT
Not After : Feb 17 02:00:27 2025 GMT
Subject: CN=7b7f7cd7-f768-49ed-b8f0-d7f75bf7f727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:62:e8:ba:18:2f:83:86:1f:8c:9b:16:47:79:
d4:13:9c:eb:e9:5a:b2:93:b9:8e:84:d8:fb:62:69:
0d:15:49:3b:64:40:3b:c5:21:f1:19:08:77:ba:03:
9a:82:80:84:13:68:09:1a:f7:ae:0a:6a:dd:c9:eb:
cb:62:a5:7b:29:b1:8a:5d:75:74:bd:ea:0e:e6:ad:
9c:f2:fb:cc:a2:64:9a:1e:21:5d:44:47:86:af:66:
ca:1f:be:4f:ce:62:76:73:fa:59:2d:8f:2a:ee:82:
e0:03:e3:45:ad:0e:d6:c8:8c:7c:ff:88:8e:32:4a:
2e:67:57:7f:1a:30:73:07:cc:ca:c6:31:a8:89:b1:
27:8d:f3:9d:26:13:d7:49:3c:8a:4e:83:84:c0:ff:
e3:a2:bc:f5:bb:36:47:90:63:8d:b1:67:b7:a9:40:
79:4f:30:85:8e:3f:20:c2:d6:e8:7e:a0:cf:aa:81:
07:bc:87:7a:b1:63:02:3c:3d:e2:c1:ff:66:92:3d:
e3:40:4b:8d:e9:96:33:1d:d4:0b:23:fd:39:fb:ff:
44:ba:18:da:0e:29:27:bd:5d:5d:0e:bc:3f:fb:1b:
7d:76:08:73:40:2b:7e:ea:cb:c0:55:12:86:10:0d:
28:82:b1:2c:72:8a:13:71:3f:a5:49:da:48:eb:a8:
39:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:38:80:CB:8A:29:73:FE:E7:30:3D:CF:3C:F1:8E:DA:E0:64:29:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/2e25868c-59f1-35e2-a20d-94b64eb48e82.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
X509v3 Authority Key Identifier:
keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
sbgp-ipAddrBlock: critical
IPv4:
199.101.136.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
cc:de:fe:22:f8:e7:e2:01:2c:e1:38:54:19:21:60:27:3a:14:
b4:eb:27:d2:ff:83:94:43:5e:4f:bb:f6:9f:95:0b:cd:bc:22:
a6:6b:fc:4f:1b:da:f5:47:54:51:26:b7:98:53:ea:40:a0:fe:
c1:71:94:6d:b2:7f:00:74:c5:4e:32:b9:86:ee:9e:eb:05:29:
e0:53:24:ad:4c:2e:9d:76:78:02:c9:e5:99:08:37:59:c1:37:
ce:66:bd:e0:d3:2f:3d:29:d3:3c:3a:fd:b7:7b:85:24:40:3f:
01:ad:89:32:d8:a1:26:59:31:4f:4b:60:84:8c:53:75:20:29:
d8:a8:77:c4:03:11:8e:22:67:34:9b:1d:7a:8b:52:79:18:0a:
21:4c:ce:00:e3:46:cd:ed:8e:09:f4:30:01:8c:a5:db:49:ed:
b5:dd:9f:4e:24:ea:56:1f:97:3a:cb:95:18:bb:c4:56:c9:77:
76:7a:59:3b:cf:37:4c:6c:35:50:ce:70:1d:28:4d:01:4f:42:
95:aa:50:bb:ec:34:ce:d1:35:ae:8a:ed:d6:91:9d:ca:a2:f0:
a1:75:0b:54:47:33:a1:7e:f1:54:f0:cc:29:86:82:2b:2e:d1:
54:1b:2b:8e:a5:02:8c:50:58:6f:25:6f:34:ec:8f:87:85:e9:
02:22:8b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:08:40 2025 by rpki-client