Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/adababfe-130c-375c-8caf-b14bce1dbd82.roa
File: adababfe-130c-375c-8caf-b14bce1dbd82.roa (raw, json)
Hash identifier: lpPsQ/qXwFFx+PqICJX/khAkeZFJdMnZtgjZ7a53QD4=
Subject key identifier: 24:CB:4B:C3:AB:A8:69:30:A6:89:89:CC:75:78:20:66:06:80:03:CF
Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial: 010D0C9F43285847DC64A7C47BBB4E0A867B52C0
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/adababfe-130c-375c-8caf-b14bce1dbd82.roa
Signing time: Wed 13 Nov 2024 02:00:28 +0000
ROA not before: Wed 13 Nov 2024 02:00:28 +0000
ROA not after: Tue 11 Feb 2025 02:00:28 +0000
asID: 64267
IP address blocks: 68.65.220.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:dc:64:a7:c4:7b:bb:4e:0a:86:7b:52:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Validity
Not Before: Nov 13 02:00:28 2024 GMT
Not After : Feb 11 02:00:28 2025 GMT
Subject: CN=39fb1611-9eb5-4b92-810e-d2bb4c163b4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2c:11:f8:a3:3b:85:01:59:34:e1:e1:cf:f9:
9f:4f:d1:f4:93:a7:78:eb:f1:fa:c2:e4:88:8e:de:
99:ce:1d:5b:2e:12:ce:b1:08:5d:91:af:93:21:44:
51:20:5e:4b:fb:76:a4:83:01:5e:66:a2:f6:59:79:
4e:36:60:20:68:64:c2:56:83:ad:3f:48:e6:d8:31:
48:95:84:dd:ea:9f:ca:02:77:72:57:f2:df:20:88:
41:c5:ca:32:ab:36:62:cb:d2:d8:f8:19:d7:2a:54:
db:92:00:b5:60:62:81:83:32:33:cb:e4:5a:78:ac:
0d:3c:c0:fc:f3:f5:7e:22:6b:b6:aa:18:85:93:9f:
f7:d9:95:5e:bc:81:a0:13:cc:81:7d:09:74:1a:98:
d1:fc:ab:20:b3:a2:86:17:ca:f9:ba:f0:c6:b3:65:
31:8f:6b:36:e0:5d:fb:14:73:6e:06:9e:4f:14:17:
5b:ad:41:b4:2c:38:af:f6:a9:d8:bc:4a:82:3e:f5:
0e:7c:3e:a0:de:1e:04:00:90:7f:7a:6e:5a:f5:32:
e2:b6:0f:6a:d4:55:70:72:55:df:f3:1c:63:33:15:
ba:a8:3f:52:ba:cb:a2:80:af:99:ad:b3:c7:99:87:
4a:f1:2e:75:6d:a0:26:24:db:89:00:64:c5:af:fb:
cb:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:CB:4B:C3:AB:A8:69:30:A6:89:89:CC:75:78:20:66:06:80:03:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/adababfe-130c-375c-8caf-b14bce1dbd82.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
X509v3 Authority Key Identifier:
keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
sbgp-ipAddrBlock: critical
IPv4:
68.65.220.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a0:3e:51:9c:c5:27:1d:ae:bf:28:0e:3b:e0:27:10:2e:ed:b8:
f8:69:28:ba:fd:7d:db:db:a0:c3:23:59:b4:c2:30:c9:18:4d:
20:a5:07:4d:df:cd:d8:86:21:9b:d4:5b:37:ff:1a:b2:ae:ea:
04:03:d9:29:cd:d6:78:08:d0:9e:71:6b:92:1b:bd:47:3c:9d:
ca:9d:a3:20:b6:2e:b4:49:2d:ef:81:f0:bc:10:76:86:4d:23:
be:a7:ee:75:33:a6:79:dd:76:a0:5a:99:c8:99:38:a7:a1:8e:
12:43:3c:0a:b9:ac:10:6c:39:d0:e7:d1:21:93:19:3f:ed:15:
01:9f:ac:02:7b:4f:03:ee:11:f3:1e:e8:e7:81:c9:21:50:07:
ed:3d:c4:1e:65:4f:21:f5:b0:23:e3:cf:f3:87:a8:61:ee:da:
61:2d:49:03:2f:ab:fa:cc:1d:ce:c9:e1:a8:7d:ed:4d:58:52:
5b:0b:25:c9:ee:8a:ea:30:02:84:69:bc:fc:42:83:97:45:55:
56:e8:e9:8a:5f:f2:5b:55:75:93:02:57:81:6b:65:a8:28:97:
49:b5:85:8d:60:0f:d6:16:5d:04:a3:ff:8b:55:3a:c4:78:98:
0a:1f:16:a6:5f:2e:ab:59:e9:df:6b:96:e7:10:52:72:0e:44:
bc:8d:2c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:56:29 2025 by rpki-client