Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/6d35a9ea-db64-354f-a06f-3a7ae9024bea.roa
File: 6d35a9ea-db64-354f-a06f-3a7ae9024bea.roa (raw, json)
Hash identifier: 9UcI671++SzycAws8CMbJD+KsBBgiP0CS7wrG01+KYw=
Subject key identifier: F1:AD:D0:E2:B1:02:A9:AA:1D:42:5F:B0:C7:38:BD:5E:26:44:7C:D0
Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial: 010D0C9F43285847FB1A25BF4ABC14FFB3397C00
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/6d35a9ea-db64-354f-a06f-3a7ae9024bea.roa
Signing time: Sun 24 Nov 2024 02:00:27 +0000
ROA not before: Sun 24 Nov 2024 02:00:27 +0000
ROA not after: Sat 22 Feb 2025 02:00:27 +0000
asID: 397630
IP address blocks: 207.254.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:fb:1a:25:bf:4a:bc:14:ff:b3:39:7c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Validity
Not Before: Nov 24 02:00:27 2024 GMT
Not After : Feb 22 02:00:27 2025 GMT
Subject: CN=bc694e9e-4183-4912-8d0d-66acf79c20ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:d5:84:13:bd:8c:b8:3b:fe:34:5f:b8:bd:77:
8b:62:44:f8:ad:0e:98:6c:88:55:e0:23:f0:af:cf:
25:2b:67:51:4c:97:f4:55:19:d8:a9:6d:78:7d:7e:
43:90:81:c5:de:84:6e:25:f4:3c:fa:51:dd:85:31:
04:50:c1:eb:9c:89:6d:34:1d:0c:95:b8:9d:c8:35:
84:72:72:5e:0f:32:4e:f8:f9:49:96:62:2b:e8:f8:
19:70:e6:bf:27:76:6e:ca:77:e2:72:8c:99:e4:e5:
ec:dc:e1:19:cf:75:5d:12:6a:20:17:7c:df:99:94:
d6:90:f5:66:dd:b5:b1:00:e5:02:36:dd:3e:5e:7b:
45:99:4b:2a:50:04:86:a3:c1:fa:94:54:d6:1e:3f:
47:25:23:ef:f3:17:1d:48:bb:eb:22:58:23:fb:52:
8d:f4:97:05:50:4f:77:51:4b:96:4b:53:88:b6:2d:
ab:c7:29:4e:7a:8c:7d:eb:55:88:3f:4d:52:45:33:
d1:dc:5c:2c:cf:44:a2:64:b0:8a:d4:77:2e:46:28:
30:6e:f1:1c:7e:c8:92:b0:aa:e7:f7:de:ae:4e:75:
5f:42:2e:d7:81:5b:d9:30:6b:1b:fb:cc:58:da:4e:
a4:0e:a1:92:70:84:62:44:89:dd:cc:f2:e9:5a:24:
3f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:AD:D0:E2:B1:02:A9:AA:1D:42:5F:B0:C7:38:BD:5E:26:44:7C:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/6d35a9ea-db64-354f-a06f-3a7ae9024bea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
X509v3 Authority Key Identifier:
keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
sbgp-ipAddrBlock: critical
IPv4:
207.254.90.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
af:ef:2d:89:53:3c:05:b5:b9:db:45:1f:eb:20:04:3a:06:dd:
61:5d:a5:4f:42:57:2f:c7:72:a4:fc:86:fd:06:07:17:c6:ed:
ef:1c:00:cd:07:1c:05:ca:6c:af:73:8e:bb:24:0c:06:bb:ce:
81:79:76:7b:ac:ca:5e:0f:36:8c:ce:bb:70:21:eb:2d:04:e3:
a3:16:5c:00:a6:7a:0c:d0:02:c6:d5:b9:ba:f0:ed:04:2f:b9:
bb:1c:0f:c0:29:dd:56:36:2c:71:97:0d:b8:89:e5:68:95:15:
23:d0:22:30:6e:b0:73:c7:a6:23:df:02:f5:5b:df:97:cc:97:
a3:ac:c5:f0:45:24:e8:ab:10:0d:86:a5:bb:e5:51:2e:1b:99:
84:5b:73:47:df:20:6c:ed:d9:c3:0e:54:18:0c:2c:8f:95:83:
8a:b3:fd:be:c5:cb:7b:d8:e1:5e:07:e8:08:30:da:76:69:bf:
ae:78:92:91:a2:84:9b:01:c6:1c:b6:42:54:8a:8a:a0:42:df:
e5:37:73:78:80:66:da:58:cb:91:db:fe:cf:c0:3f:09:8a:71:
bc:1e:5e:aa:b8:65:ea:e9:fa:04:2c:60:69:ce:73:b1:6f:3f:
35:a2:fa:b7:c4:a0:27:b3:be:cf:18:14:dc:d8:54:dc:55:98:
a0:ce:91:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:57:50 2025 by rpki-client