Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/9ba0d327-5654-3b9f-b7d6-f6b0185ce5c9.roa
File: 9ba0d327-5654-3b9f-b7d6-f6b0185ce5c9.roa (raw, json)
Hash identifier: 0zAoCRaYoR4LSGrguc37NlxOTN000pZe2Ym+YLfbFd8=
Subject key identifier: 54:1A:15:24:C2:BB:F8:49:F0:7B:91:AB:D4:F3:85:EB:6F:6B:39:6E
Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial: 010D0C9F432858480BDA770682C7DCDF436DE880
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/9ba0d327-5654-3b9f-b7d6-f6b0185ce5c9.roa
Signing time: Sat 30 Nov 2024 02:00:39 +0000
ROA not before: Sat 30 Nov 2024 02:00:39 +0000
ROA not after: Fri 28 Feb 2025 02:00:39 +0000
asID: 7018
IP address blocks: 67.216.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0b:da:77:06:82:c7:dc:df:43:6d:e8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Validity
Not Before: Nov 30 02:00:39 2024 GMT
Not After : Feb 28 02:00:39 2025 GMT
Subject: CN=a498c818-13cf-44a2-9ec3-d39e419e5364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9e:b8:2e:7e:37:71:2b:74:25:40:bc:b3:37:
a7:90:ea:84:64:45:d8:f2:c5:8e:12:09:4e:a8:53:
f6:75:e9:91:87:3e:e6:2e:e9:fc:d1:af:ed:dc:e5:
43:29:18:cc:27:90:6e:df:b8:7d:3f:98:c8:f1:0c:
ac:de:88:8b:e6:cd:86:15:99:f9:f2:07:51:26:89:
a1:85:2e:21:38:73:fc:a7:8e:22:f3:57:b5:5a:04:
b1:38:63:57:38:f9:e2:62:0f:df:81:84:ca:d1:4a:
1c:db:88:f5:16:1e:c1:e0:77:9b:47:ab:62:53:9f:
f4:87:a8:41:8f:d7:90:96:73:b4:c1:48:ed:c8:ec:
9c:86:29:0d:f3:76:51:6a:f7:9a:cf:5c:3d:0e:79:
73:d9:e3:62:f4:cc:7e:20:cb:3e:c3:f0:37:d8:36:
4a:30:36:32:14:d7:eb:bd:17:21:bc:38:61:70:b0:
8a:75:ef:7f:c8:dc:c5:85:5c:cf:69:b1:2c:6e:3c:
ee:d8:c6:f3:63:b8:80:3a:f1:24:4f:e0:01:b5:70:
b1:71:fa:b2:98:1a:6b:1c:1c:7e:0c:03:3e:3a:f6:
38:1a:39:75:ff:a5:de:60:0a:76:9c:52:00:c1:dd:
d8:51:c7:d7:4c:16:85:81:fd:4a:db:58:1f:75:0f:
53:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:1A:15:24:C2:BB:F8:49:F0:7B:91:AB:D4:F3:85:EB:6F:6B:39:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/9ba0d327-5654-3b9f-b7d6-f6b0185ce5c9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
X509v3 Authority Key Identifier:
keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
sbgp-ipAddrBlock: critical
IPv4:
67.216.237.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bc:33:85:b5:3e:b6:75:e1:c6:31:93:ab:66:69:46:59:ee:f7:
f0:aa:52:7a:1e:8c:2c:22:38:0c:d4:54:23:34:84:0b:b7:31:
47:cb:bd:45:1d:83:29:e9:2e:c4:11:78:cb:24:7c:81:63:db:
13:1c:33:0c:3e:07:fb:be:0b:1f:3a:cc:1a:19:bc:51:ab:4f:
c0:0b:45:f1:ab:42:dd:b5:dd:2c:dc:ca:af:e8:50:f6:95:cb:
47:65:d4:a0:42:e9:d5:51:17:99:34:6f:fd:3d:d1:7f:c3:86:
1b:b1:34:59:35:c0:76:10:33:7a:67:fd:76:53:77:c6:7b:40:
6a:7e:ad:b8:2a:22:2b:86:4d:86:48:6a:23:85:e6:03:89:5c:
1b:e3:ba:53:fa:07:2c:fb:ab:f9:6f:c7:c0:68:07:59:30:c0:
5e:6a:dd:6c:81:fe:60:6c:c5:ed:c0:e9:e5:90:ea:7f:2b:47:
71:9a:f5:20:5c:9e:99:3b:23:e2:50:38:a4:0e:73:f1:c8:1e:
7c:65:c6:eb:3f:38:17:26:82:a3:94:61:6d:2e:dc:c7:a3:44:
65:6c:d1:19:91:ca:bf:50:4a:23:b6:68:86:cd:f0:29:c2:79:
c9:cf:b0:89:f4:f5:85:ef:15:ae:1c:8d:d8:19:e8:2c:91:40:
be:ee:9f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:27:26 2025 by rpki-client