Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/41c44b8d-1756-37d5-ba2a-56bdeaf08b9a.roa
File: 41c44b8d-1756-37d5-ba2a-56bdeaf08b9a.roa (raw, json)
Hash identifier: 7595y4MNPEMQA2Isg38/EEcULM51FDZFm0kiHFCxhK0=
Subject key identifier: B3:0B:4C:27:5F:57:C7:C0:81:E0:A8:0C:2D:F2:6F:82:A0:FF:73:42
Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial: 010D0C9F43285847FB1A25B012327ADA8D3386B0
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/41c44b8d-1756-37d5-ba2a-56bdeaf08b9a.roa
Signing time: Sun 24 Nov 2024 02:00:27 +0000
ROA not before: Sun 24 Nov 2024 02:00:27 +0000
ROA not after: Sat 22 Feb 2025 02:00:27 +0000
asID: 397630
IP address blocks: 207.254.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:fb:1a:25:b0:12:32:7a:da:8d:33:86:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Validity
Not Before: Nov 24 02:00:27 2024 GMT
Not After : Feb 22 02:00:27 2025 GMT
Subject: CN=ff417f11-2ed4-47d2-9bd3-6e1be94c62d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f3:21:cb:d1:48:7c:ff:9a:99:db:cc:50:c1:
fe:1d:df:d6:c3:63:c7:5c:fe:e9:6d:19:5c:4b:99:
a5:99:b0:b3:a1:93:43:dc:85:ae:1f:b6:c8:69:fd:
0e:14:4e:aa:3b:c3:36:16:8b:be:72:cd:a2:8d:d4:
6b:7a:92:cb:e8:21:0b:54:9b:92:75:ff:b5:3c:23:
34:a0:c0:18:6a:2b:19:72:57:76:c0:e5:64:7b:14:
77:9f:7e:af:d2:e8:28:c6:f0:e4:a5:fa:c8:e8:22:
9e:bf:5e:cd:de:00:8e:e8:ee:8e:0b:99:3d:97:5c:
3c:e4:d6:7e:5f:65:26:70:d2:ea:00:d2:5a:db:e2:
3c:d1:72:83:d0:00:6b:52:ac:76:25:f8:db:0a:d9:
e2:fc:e9:83:3c:e2:16:91:19:04:fd:e9:87:f1:0b:
64:bd:3e:a2:19:3d:04:e8:71:6b:1b:38:40:8f:df:
47:2b:49:11:65:08:be:1b:cf:69:c6:54:ae:9f:e3:
2e:ae:db:7a:01:12:6c:63:68:cd:02:19:cf:d0:a6:
b2:12:b3:60:37:41:bb:95:be:be:1c:04:70:17:94:
6c:83:7c:84:0d:e9:a1:2e:66:d5:96:d1:e6:74:37:
6c:1c:e6:33:ee:46:d2:1d:0e:7d:d9:9a:ff:ff:1c:
46:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:0B:4C:27:5F:57:C7:C0:81:E0:A8:0C:2D:F2:6F:82:A0:FF:73:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/41c44b8d-1756-37d5-ba2a-56bdeaf08b9a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
X509v3 Authority Key Identifier:
keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
sbgp-ipAddrBlock: critical
IPv4:
207.254.89.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:51:0c:8a:66:9c:e2:67:df:72:5a:e7:1c:b8:c9:c3:36:fd:
64:99:6a:f7:06:52:29:bb:56:5e:ab:9a:ea:06:e5:f0:36:16:
d6:70:83:a1:1d:8d:d9:af:64:1d:0c:c0:61:23:4f:da:71:6a:
cd:bd:bd:fc:9e:35:1b:cc:f3:8d:68:5e:2b:b4:e6:1d:91:ed:
a0:73:ce:c5:06:91:4d:88:a2:58:c2:e9:c8:40:0e:5e:6f:05:
52:1c:3f:60:dc:c5:8a:15:a8:1e:7a:50:18:c2:47:41:31:e8:
c1:23:f4:d7:7f:71:6b:88:1a:df:05:6f:74:91:83:68:25:38:
77:bf:19:87:02:66:4c:52:1f:41:dc:e5:61:36:89:6d:57:f4:
5d:7b:37:0f:05:d7:56:45:77:0b:43:bd:b7:fe:61:3b:c3:74:
89:3f:ed:2b:30:62:95:91:8b:d2:f5:87:fa:5a:09:fb:28:af:
10:dd:e8:63:20:45:41:c0:f8:97:37:59:90:cd:a7:eb:42:00:
08:2a:e3:e4:c9:96:52:58:3d:a2:20:bc:c2:58:4f:92:e7:fa:
88:9c:52:29:98:8b:a9:fc:4b:ce:df:d4:08:29:2e:6e:19:52:
cf:8e:9e:73:29:39:4c:74:18:07:ae:d7:90:a1:7f:42:d9:24:
ab:bb:55:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:15:09 2025 by rpki-client