Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ca998017-6342-3bd8-b5af-2c3ba316b4a6.roa
File: ca998017-6342-3bd8-b5af-2c3ba316b4a6.roa (raw, json)
Hash identifier: buIwLFFNdLliRIROaQ1yj7dr3tV0XQJiPkjPVkFmnvA=
Subject key identifier: 88:F4:ED:A4:2C:6F:9D:3F:EA:EB:60:6A:62:48:58:BC:70:0C:58:08
Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial: 010D0C9F43285847FB1A1E8ED0416D2B4BDE4CA0
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ca998017-6342-3bd8-b5af-2c3ba316b4a6.roa
Signing time: Sun 24 Nov 2024 02:00:27 +0000
ROA not before: Sun 24 Nov 2024 02:00:27 +0000
ROA not after: Sat 22 Feb 2025 02:00:27 +0000
asID: 64267
IP address blocks: 168.91.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:fb:1a:1e:8e:d0:41:6d:2b:4b:de:4c:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Validity
Not Before: Nov 24 02:00:27 2024 GMT
Not After : Feb 22 02:00:27 2025 GMT
Subject: CN=531f1a3e-734f-4cce-91c3-63ddd58d9cda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b5:5e:99:31:0d:79:1a:15:3a:e7:33:dd:7c:
1b:3b:f2:79:e6:da:73:0d:61:78:a6:1f:17:b7:97:
4d:b2:9c:53:9b:7b:89:cd:7f:52:63:75:de:a2:d5:
de:4c:36:cd:54:e2:d7:44:99:60:84:cb:69:92:e2:
3a:9d:e1:ca:27:bf:87:4e:39:3d:e1:07:44:6e:f8:
2b:04:4f:90:b7:f6:d6:2e:c1:a7:54:db:28:58:17:
05:82:9d:d1:da:6b:ae:37:b3:9f:41:90:be:9c:21:
c8:45:c1:22:7e:db:4f:dd:88:ea:56:cf:b4:05:90:
1b:24:18:ea:0e:8d:61:ec:98:7b:2a:75:62:c8:58:
ec:40:d9:f8:85:9f:d3:b7:84:0e:c0:c4:99:ab:eb:
9c:06:cc:68:e1:9e:3f:d7:10:aa:eb:4a:6b:d3:27:
b7:f7:c6:40:f4:ad:67:73:37:2c:0d:eb:ff:5e:36:
26:cc:f4:62:1d:d4:36:b7:9c:62:b9:8f:4a:55:f5:
c9:e6:16:ad:a0:cd:18:d4:b2:c3:88:ec:a3:ff:54:
44:8c:eb:4b:3f:cf:72:d9:55:ff:be:f6:e5:9e:6c:
ad:f0:85:18:7c:00:2a:0b:72:58:bc:bf:0d:ac:af:
ff:3c:c5:48:5b:88:74:f5:d5:87:5b:1f:bc:f1:92:
6c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:F4:ED:A4:2C:6F:9D:3F:EA:EB:60:6A:62:48:58:BC:70:0C:58:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ca998017-6342-3bd8-b5af-2c3ba316b4a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
X509v3 Authority Key Identifier:
keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
sbgp-ipAddrBlock: critical
IPv4:
168.91.35.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:3b:c4:35:29:09:ab:5e:2d:24:62:8e:3f:64:55:82:db:f6:
2e:63:e3:10:4b:8f:c9:e2:cd:fb:1f:5d:9b:98:75:d6:7a:7e:
29:b1:24:f8:4f:5c:14:c6:ff:cf:7c:b1:63:ee:68:2b:06:ce:
39:33:4d:a3:2a:8e:db:16:fb:79:85:8c:d7:b5:d9:76:d9:67:
13:5f:a0:3b:7b:ee:80:98:a8:8c:4b:4f:fb:fb:4f:97:31:03:
d8:75:a2:d8:07:5c:ee:c1:17:d3:d4:18:21:68:d3:1e:be:2e:
7b:57:62:a8:75:b5:46:8d:af:a8:5e:fa:f1:bf:8a:db:9e:0a:
95:0f:b2:ee:16:3f:4d:b9:81:d5:ff:be:52:b0:88:f7:ed:39:
b0:46:7c:ff:56:b3:20:3c:98:76:35:06:6f:da:b0:ba:d9:cd:
a7:e8:fb:21:c2:02:91:8f:21:0d:88:d3:2f:6a:cb:84:b1:07:
4e:25:b1:57:59:8b:a7:e9:ed:63:cf:69:34:1f:ca:94:3e:5d:
59:3e:dc:f3:71:65:34:34:00:c3:8a:ae:a4:a8:c6:c4:52:9b:
f2:1d:f8:c2:cd:b0:d9:50:18:f3:4b:b3:94:76:16:82:31:93:
74:77:0b:3d:8f:41:50:8f:5c:fe:0f:54:b9:78:1a:c2:bf:64:
bf:1d:35:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:46:29 2025 by rpki-client