Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/df302d20-bed4-3532-931d-639ed820e7c9.roa
File: df302d20-bed4-3532-931d-639ed820e7c9.roa (raw, json)
Hash identifier: 4bqEI+Op+kNFfs0mNBUFBnVJxFV523pxJjNmxfCX9Jk=
Subject key identifier: 0C:E7:DB:46:35:AB:75:A6:C6:B4:F1:6C:52:FD:A8:02:C8:79:86:46
Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial: 010D0C9F43285847F84F7E969FDAC6E1852ABEC0
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/df302d20-bed4-3532-931d-639ed820e7c9.roa
Signing time: Sat 23 Nov 2024 02:00:28 +0000
ROA not before: Sat 23 Nov 2024 02:00:28 +0000
ROA not after: Fri 21 Feb 2025 02:00:28 +0000
asID: 7018
IP address blocks: 130.254.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f8:4f:7e:96:9f:da:c6:e1:85:2a:be:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Validity
Not Before: Nov 23 02:00:28 2024 GMT
Not After : Feb 21 02:00:28 2025 GMT
Subject: CN=648a26fb-aa80-4d15-9ab5-304f0b5c2d8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6b:e1:63:f0:87:4a:ab:4a:81:b6:93:fb:ce:
1d:b2:88:f4:57:6b:59:0d:9d:bf:d3:5d:01:30:bc:
27:e8:e1:be:99:7f:fc:06:c4:2f:be:4e:dd:51:be:
73:df:ad:8f:09:5c:e1:e3:3c:f1:6f:08:dd:c6:d2:
fa:e2:67:6a:28:79:ad:16:e8:35:38:77:de:36:61:
e1:26:67:ba:16:36:33:d7:a8:66:e7:02:04:0d:a5:
4b:82:75:00:7c:a2:09:a9:fe:3f:10:84:57:62:51:
9c:37:7a:2f:07:67:d9:b1:d2:6a:1d:f0:89:ba:18:
43:23:8a:af:2a:07:3b:56:48:c9:3c:f9:9b:02:24:
5b:98:93:aa:ce:2d:ff:2a:19:92:21:bb:24:59:4a:
ed:35:81:26:58:df:71:03:fd:fd:b2:4b:6b:af:c3:
f3:3b:ed:5e:ae:e2:31:77:fc:90:f5:3c:a1:95:68:
ea:44:8a:eb:cf:68:9c:6d:18:68:26:70:ef:d3:2f:
dc:5e:93:51:6a:5f:86:89:e8:27:ad:ee:a1:dc:a0:
40:06:ba:77:53:04:5e:b0:69:05:f7:74:05:af:0d:
6b:30:8a:f8:7f:ec:44:33:af:42:1c:11:df:41:32:
ec:b4:dd:53:c5:ca:86:11:c6:02:b0:e5:c3:fb:30:
0a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:E7:DB:46:35:AB:75:A6:C6:B4:F1:6C:52:FD:A8:02:C8:79:86:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/df302d20-bed4-3532-931d-639ed820e7c9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
X509v3 Authority Key Identifier:
keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
sbgp-ipAddrBlock: critical
IPv4:
130.254.109.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:29:b9:eb:12:d3:86:aa:db:ff:41:5c:26:06:47:f8:89:14:
71:32:23:1b:99:2c:65:ee:f7:33:4b:2f:93:31:5a:2d:59:1d:
f7:20:12:86:ac:96:d4:15:4c:be:2a:25:ba:fa:8a:94:ce:8c:
1d:83:0d:24:17:46:30:81:f9:16:73:ad:15:b8:43:b5:37:c9:
1f:eb:5c:17:04:e5:63:4f:17:54:3b:65:b7:e8:6e:f1:54:5f:
1e:a9:74:9b:d5:17:d3:5a:27:dd:20:e5:63:32:01:4c:21:a0:
85:9b:fe:9a:4d:0f:e1:6e:8a:ab:01:91:23:16:25:d1:08:3a:
7e:9f:82:9b:61:c1:f7:65:db:70:e0:7e:69:04:43:9f:b5:f7:
7b:cd:18:41:de:69:55:ef:22:06:54:5f:f1:76:2d:8c:e1:07:
7f:70:ed:03:33:71:0e:f9:99:80:4d:d8:72:6e:e9:3c:b8:47:
d9:2b:2f:f4:1e:90:53:35:a8:47:96:a4:a1:fb:35:28:02:b1:
46:b5:18:ac:88:0c:b6:6e:5b:72:8e:23:8f:6f:63:54:d8:1c:
d3:cb:b9:78:de:2d:46:77:25:83:be:48:33:10:28:60:5e:fc:
0d:9f:fa:40:fd:ed:ea:94:88:66:f4:6a:c3:5d:9d:05:6d:a6:
2d:a7:55:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:36:26 2025 by rpki-client