Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/889a0616-a575-364c-979f-3d5a3c126b3d.roa
File: 889a0616-a575-364c-979f-3d5a3c126b3d.roa (raw, json)
Hash identifier: j5psIZxwBK5BpT+1J/NDUOhI3fq3yzsXhW5Zf9zQ8ew=
Subject key identifier: 88:20:21:28:DC:97:79:E9:59:20:AC:9C:01:E8:C7:6B:4A:A1:1C:91
Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial: 010D0C9F43285847F84F836390DDF102A7687FE0
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/889a0616-a575-364c-979f-3d5a3c126b3d.roa
Signing time: Sat 23 Nov 2024 02:00:28 +0000
ROA not before: Sat 23 Nov 2024 02:00:28 +0000
ROA not after: Fri 21 Feb 2025 02:00:28 +0000
asID: 33287
IP address blocks: 158.62.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f8:4f:83:63:90:dd:f1:02:a7:68:7f:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Validity
Not Before: Nov 23 02:00:28 2024 GMT
Not After : Feb 21 02:00:28 2025 GMT
Subject: CN=6297315f-4714-4cfb-8136-07cfaf6f2e25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:dc:0d:31:81:55:d1:c5:28:fc:e7:24:e5:98:
3b:99:fe:a5:91:94:32:a9:4f:6b:e1:b7:e0:e3:17:
c1:1a:9e:6c:61:ef:73:c2:3e:9d:c3:7a:fc:80:d7:
f5:7d:24:3f:66:fe:40:ef:8a:3b:e6:c1:06:ce:30:
d8:2f:66:24:da:4a:9c:b7:24:78:0c:51:4e:b5:3f:
2a:85:17:d2:e4:7e:53:a8:a7:6d:9c:73:19:74:d5:
d7:46:d2:32:18:7c:04:c1:2b:a2:23:01:83:86:99:
1d:5e:17:92:d0:f8:2c:79:59:f6:24:d6:ae:04:1a:
de:b5:f9:de:23:9f:0f:d2:8a:90:23:d9:e5:67:54:
7c:7e:d3:d6:d7:23:30:52:44:b3:d0:0d:2c:b4:5f:
47:57:d4:d5:fe:e0:4f:d0:0e:0f:b7:1a:46:03:d2:
e2:5e:ed:01:93:78:5a:98:f0:dc:96:0e:a4:5b:71:
55:80:0b:63:b3:0f:49:25:7b:a4:f8:65:17:09:00:
b0:b7:8e:e8:dc:9c:df:0a:33:f7:d4:83:b2:d7:44:
a6:45:ae:5e:b9:38:2c:95:77:9e:fa:0a:63:5c:19:
cf:84:1c:e6:56:95:3e:9e:2f:7e:8e:ab:6e:c7:59:
02:de:90:14:7e:10:6e:1f:7e:33:f7:64:a4:7a:4c:
82:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:20:21:28:DC:97:79:E9:59:20:AC:9C:01:E8:C7:6B:4A:A1:1C:91
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/889a0616-a575-364c-979f-3d5a3c126b3d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
X509v3 Authority Key Identifier:
keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
sbgp-ipAddrBlock: critical
IPv4:
158.62.215.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:84:51:b3:7d:27:bc:a2:c0:19:db:b4:e9:fd:e2:d4:d1:39:
42:8c:bf:3b:5a:14:4b:8b:b3:6a:36:92:46:07:b1:5e:73:b4:
2e:7a:27:8c:34:36:d7:6b:0a:7c:81:b8:22:9d:8e:4e:62:03:
fe:aa:67:02:51:80:5c:cc:9b:ac:fb:18:40:a7:f3:cd:4b:65:
de:24:87:a2:55:d3:88:de:59:2b:04:9e:82:a6:38:11:92:cb:
ba:e3:72:48:ca:61:83:6c:f9:08:33:0f:b2:db:c2:19:99:80:
bc:4e:88:1a:0e:a0:3d:ba:e4:99:a5:dd:a5:ec:fd:10:00:a6:
ea:8d:31:b7:bf:dd:10:84:a7:83:06:37:f8:52:06:54:0b:94:
5d:09:e7:1c:5b:2b:cb:d0:f3:18:d5:12:f3:11:8f:35:8e:4c:
fe:79:aa:0e:be:ee:26:f1:5b:17:be:e3:52:43:fd:da:fb:26:
58:71:9e:bb:ee:6a:42:95:4b:d6:c9:d7:39:15:3e:7b:55:c0:
89:fd:a0:da:37:d8:c6:9f:65:5c:1d:28:2a:e3:80:12:be:7d:
e1:8e:c1:50:c0:c1:d3:75:b7:dc:73:65:39:11:7f:45:c2:7d:
f0:02:4c:7c:ec:40:92:7d:2e:3a:2b:90:28:d4:f6:81:e3:2e:
2e:ef:fa:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 08:05:10 2025 by rpki-client