Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/cd90a2e8-7481-3baa-9a5d-6d57f32a649d.roa
File: cd90a2e8-7481-3baa-9a5d-6d57f32a649d.roa (raw, json)
Hash identifier: 8H9KNOjYkoKGRD7jrxfwD6fP3/QvZ4FKgt1MBUIABGE=
Subject key identifier: 13:C2:B5:A2:4F:CD:66:9C:EA:02:15:3E:DC:46:E6:B7:E0:88:F8:82
Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial: 010D0C9F43285848424AE58D5689C87FED865780
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/cd90a2e8-7481-3baa-9a5d-6d57f32a649d.roa
Signing time: Thu 19 Dec 2024 14:00:52 +0000
ROA not before: Thu 19 Dec 2024 14:00:52 +0000
ROA not after: Wed 19 Mar 2025 13:00:52 +0000
asID: 64267
IP address blocks: 152.44.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:4a:e5:8d:56:89:c8:7f:ed:86:57:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Validity
Not Before: Dec 19 14:00:52 2024 GMT
Not After : Mar 19 13:00:52 2025 GMT
Subject: CN=8d736dd3-eed2-4937-aa01-1eba9e3ecb5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:82:d6:d2:12:9d:b6:4d:93:ac:e5:7e:64:9c:
fa:16:70:36:0d:d1:56:86:6c:a0:8a:fd:dd:8f:76:
fd:5f:a7:c5:e8:f8:d1:62:f1:17:5a:cf:af:49:67:
26:72:ea:bc:89:6f:46:b9:25:85:ad:56:96:f9:67:
63:f0:48:42:f9:1c:0d:e0:1c:4a:7e:1d:9e:c3:fa:
03:ca:7a:00:59:ee:57:77:1d:70:a7:3c:fb:e0:67:
db:79:75:51:c4:b5:43:70:71:35:08:c6:70:89:a9:
70:94:be:b2:3f:a7:ae:1c:3a:7a:6d:5e:32:07:97:
57:d6:85:f9:bb:b9:2b:5f:c1:fd:d1:a2:06:4a:03:
1c:b9:25:bb:ee:ec:fb:5b:1f:2f:95:54:e5:da:13:
8e:0f:89:f2:12:1f:49:20:d0:ea:fe:05:83:02:09:
f1:7f:4c:42:2b:32:ab:9f:72:a1:67:89:6a:fa:78:
cc:8a:20:7e:bf:e3:77:45:3f:0f:b8:f5:15:3c:35:
1c:95:65:95:2b:1d:6c:61:28:cf:27:86:32:2c:98:
e1:81:a7:d3:37:ee:e3:45:51:da:d1:ea:05:4a:75:
92:a6:3e:27:0d:9e:ae:3d:ef:74:94:11:b9:0b:6b:
ad:b9:f1:7e:2c:c9:5d:4c:a2:5b:52:2c:c4:08:92:
e7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:C2:B5:A2:4F:CD:66:9C:EA:02:15:3E:DC:46:E6:B7:E0:88:F8:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/cd90a2e8-7481-3baa-9a5d-6d57f32a649d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
X509v3 Authority Key Identifier:
keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
sbgp-ipAddrBlock: critical
IPv4:
152.44.99.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:8b:77:c6:f9:f8:8c:2a:0c:ac:bb:19:34:47:4a:64:e7:1b:
0e:02:d9:56:7e:29:b7:66:86:6b:1d:f5:e6:24:93:d9:fd:c7:
51:13:89:41:df:af:ca:66:bd:a7:95:b6:d4:c0:bb:6a:9f:05:
7f:f8:08:7e:4b:65:b0:3f:d1:86:2e:ec:8d:d6:5e:c4:48:3f:
40:c3:ee:e8:63:de:5a:03:ba:69:d7:93:a8:66:68:05:7c:74:
08:76:df:ae:29:ec:3f:e8:45:eb:40:a0:21:6f:47:3c:cf:15:
f9:86:63:c3:6e:bc:62:41:6e:ed:91:d6:75:e6:22:9f:f7:32:
2c:89:79:e4:99:a8:27:5e:09:17:57:38:c3:eb:76:68:2b:81:
d8:3e:7a:9b:80:ea:71:bb:ce:3d:4c:13:be:e7:59:d1:89:00:
7b:b5:68:45:2b:cc:77:62:a1:21:81:8f:45:ce:43:69:f6:0d:
79:79:b5:a2:1b:7c:b5:5c:13:c1:6f:ef:d3:81:d2:5b:54:65:
78:0a:1a:be:a9:7a:e0:82:b0:a2:74:68:17:1a:b9:eb:e6:0a:
0f:da:a8:df:07:39:0c:7f:d7:a4:07:dd:82:bf:c5:9e:65:1b:
a8:e3:9d:32:61:38:c5:e0:64:d0:70:cf:96:ce:ed:98:64:cf:
fb:2a:2c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:54:53 2025 by rpki-client