Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/cf74587b-27aa-32a1-8742-484a2c276e4e.roa
File: cf74587b-27aa-32a1-8742-484a2c276e4e.roa (raw, json)
Hash identifier: V/ZJrvhBF1s3ZzQB6t1TQyXCS5qsvR3tE3L20ceNLrs=
Subject key identifier: EA:15:72:D8:E3:E7:0F:AC:35:A4:76:5D:75:6D:C6:44:BF:CD:C1:1D
Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial: 010D0C9F432858481DFFE22B0F426D3DC180CC00
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/cf74587b-27aa-32a1-8742-484a2c276e4e.roa
Signing time: Fri 06 Dec 2024 14:00:51 +0000
ROA not before: Fri 06 Dec 2024 14:00:51 +0000
ROA not after: Thu 06 Mar 2025 14:00:51 +0000
asID: 7018
IP address blocks: 208.89.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1d:ff:e2:2b:0f:42:6d:3d:c1:80:cc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Validity
Not Before: Dec 6 14:00:51 2024 GMT
Not After : Mar 6 14:00:51 2025 GMT
Subject: CN=695c5373-328c-4c89-b920-efc8891a145c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:bc:8e:08:7e:ed:db:02:9f:84:74:7e:9a:2d:
89:a0:68:d2:4d:21:63:ae:dd:d6:02:f5:d5:cb:16:
17:3d:a6:d2:ac:b7:aa:d0:a4:45:d0:3d:30:c0:f2:
3b:33:82:4a:c3:c1:ab:8e:e8:6b:5c:10:3c:2b:9b:
3c:6f:14:47:64:98:cf:f3:49:95:97:fd:a0:e1:bc:
a4:4d:5b:87:a5:3a:da:3f:34:e8:3e:63:78:e0:c1:
e6:ef:4e:74:c1:6f:ec:c1:65:b9:6c:35:29:cf:49:
63:42:5f:41:4e:be:8b:21:07:95:c0:bc:55:fe:24:
bf:65:b5:36:6a:32:e3:70:71:fb:0c:03:b5:01:e9:
22:b9:26:fa:36:8e:12:8a:cd:a4:9d:9f:9e:1c:0b:
88:98:11:cc:ab:2b:76:5b:d4:b9:51:bf:47:7d:6e:
5f:98:46:fb:42:d8:50:e8:e5:89:2f:27:3a:48:43:
92:9a:ad:7d:f0:d7:b1:57:67:01:56:70:e1:75:70:
72:95:10:2b:8e:1a:f8:78:6a:a0:1a:35:1f:4f:ad:
3c:bb:a5:81:82:52:d8:9c:84:76:de:5c:e4:67:9e:
99:ca:5c:f0:06:dc:34:4a:05:4d:e7:99:af:ca:0b:
36:b9:8f:81:76:36:3c:5a:a0:41:cf:be:9d:8c:7f:
a2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:15:72:D8:E3:E7:0F:AC:35:A4:76:5D:75:6D:C6:44:BF:CD:C1:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/cf74587b-27aa-32a1-8742-484a2c276e4e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
X509v3 Authority Key Identifier:
keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
sbgp-ipAddrBlock: critical
IPv4:
208.89.240.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:cd:cb:2e:5b:1c:15:de:d3:b0:37:61:3a:92:d3:0c:31:63:
db:b2:39:13:d9:33:81:1e:e2:83:80:35:9f:57:73:a0:5e:dc:
b3:cb:90:6c:6f:e1:e3:d1:b3:3f:f8:7d:bf:2d:fb:cd:dc:38:
ea:16:c2:7d:71:91:e6:ab:b9:f9:53:f2:02:e8:d7:e3:fb:db:
4a:43:d0:69:51:03:64:8d:bd:d0:00:85:e7:b7:6e:96:d7:2e:
f4:5b:f5:bd:a5:c8:11:39:dc:06:7a:e1:c7:37:74:57:dc:8c:
f8:54:0d:fc:df:35:fa:c0:ca:00:ed:31:e5:b4:09:10:bc:ae:
8c:ea:bc:75:ec:57:59:47:8b:77:48:28:4f:64:99:17:b9:8d:
4a:11:de:86:bf:b6:d2:60:36:8f:33:a9:da:3e:50:5c:51:99:
45:f0:a7:42:c0:a6:c8:46:64:e4:c3:4c:52:9b:3e:6d:0e:1d:
ea:6b:08:3e:1f:7b:6d:44:aa:63:a5:52:28:30:e4:15:36:95:
6c:6e:34:6b:0f:ad:4d:ae:eb:fb:f0:08:36:66:32:44:45:46:
32:50:d1:60:4b:52:c4:e6:c1:5b:fe:5e:93:07:d9:e1:fe:8a:
f0:f9:94:c5:66:95:30:94:a2:0f:0f:1d:79:d4:db:9f:56:9f:
86:0c:22:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:36:03 2025 by rpki-client