Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ef29559d-ea9b-3488-8c9b-1953f7d3a4ae.roa
File: ef29559d-ea9b-3488-8c9b-1953f7d3a4ae.roa (raw, json)
Hash identifier: H3Byr+DjH6vuB/C4SSVFK7a3n5ltH1E7u8HpTtyD6JA=
Subject key identifier: 31:45:2C:19:C0:03:31:88:CA:A0:EF:D2:87:6F:20:9B:25:39:66:4F
Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial: 010D0C9F43285848372009A927E4ECA19F718E00
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ef29559d-ea9b-3488-8c9b-1953f7d3a4ae.roa
Signing time: Sun 15 Dec 2024 14:00:53 +0000
ROA not before: Sun 15 Dec 2024 14:00:53 +0000
ROA not after: Sat 15 Mar 2025 13:00:53 +0000
asID: 7018
IP address blocks: 170.199.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:37:20:09:a9:27:e4:ec:a1:9f:71:8e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Validity
Not Before: Dec 15 14:00:53 2024 GMT
Not After : Mar 15 13:00:53 2025 GMT
Subject: CN=d65f1284-0f37-4baa-804a-0394187332c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6c:b7:93:25:62:f0:3c:9b:1a:7f:3e:d9:ec:
e6:16:f6:33:1d:a3:32:9d:e4:61:0c:a3:6b:ab:3c:
3c:16:d0:26:5b:22:eb:bd:41:2e:6a:85:0d:56:81:
de:56:ba:50:ad:ec:d7:f2:30:70:f3:b6:0e:f9:45:
ba:be:2e:7e:9e:af:a0:50:f9:91:61:7c:c0:36:2b:
83:56:4a:2a:0b:12:0a:8c:98:c5:3f:8d:52:b5:6e:
a4:6f:fd:99:a4:34:50:2b:f5:82:12:fb:de:84:d9:
e3:d0:f7:3c:9d:a1:24:c9:97:74:bd:f9:98:39:04:
af:07:8d:fe:d5:dd:5c:47:df:10:a8:41:15:52:a9:
bd:86:dd:75:64:48:36:81:9a:b1:04:d1:18:30:c9:
a6:4e:d2:6c:34:9d:95:97:ac:17:b1:46:c5:7f:4e:
9f:df:3e:83:7b:e0:ff:b3:d8:8c:66:4c:53:b2:c1:
0d:25:b0:2c:48:61:4f:68:33:e7:20:16:39:71:c7:
de:65:34:9e:45:64:49:8b:2c:95:e4:07:50:58:42:
5f:96:e9:db:b6:4d:23:7a:07:d2:32:2a:25:b1:e4:
0c:d6:b8:7d:32:db:d1:08:40:54:84:66:f5:16:0d:
4e:13:2c:9b:a0:3b:29:3d:cc:68:62:47:13:37:31:
0c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:45:2C:19:C0:03:31:88:CA:A0:EF:D2:87:6F:20:9B:25:39:66:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ef29559d-ea9b-3488-8c9b-1953f7d3a4ae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
X509v3 Authority Key Identifier:
keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
sbgp-ipAddrBlock: critical
IPv4:
170.199.228.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:5c:7d:f6:94:84:22:36:aa:13:7b:84:37:e2:e2:bf:d7:fc:
11:30:60:33:a4:bd:8e:2f:bb:5e:ee:9d:30:60:d6:bd:3f:a2:
97:0a:3a:c7:92:51:8e:f9:5f:92:d7:98:4a:dc:da:22:86:bb:
52:31:18:92:c2:89:8f:85:4e:a8:1c:9d:dd:87:83:16:d3:f4:
1e:62:8d:53:cd:f5:e0:c7:2d:11:8f:fa:f6:9d:00:dd:68:30:
a1:43:40:2e:4b:7b:a9:a6:f2:5a:97:dc:10:dd:75:d1:a9:c8:
bd:df:7b:bb:5e:30:7b:cd:af:5d:7a:f0:be:e6:8e:43:04:ba:
23:a1:54:06:0e:f0:94:84:ea:ca:a7:c6:b2:89:fc:2a:68:e4:
bd:a3:44:8e:10:51:cf:f4:6e:29:03:63:55:72:0e:e1:5a:dc:
d1:8b:c1:9f:1e:a6:b4:4b:8f:d3:42:61:e7:58:ac:cf:b5:5f:
e0:b5:e6:82:c2:42:dd:31:b0:25:ea:9e:fe:99:5e:5c:56:02:
7e:6e:4e:3b:67:72:a1:f4:93:c9:19:3c:e8:06:a1:ee:59:00:
af:67:d4:89:7e:af:5a:cf:8c:d2:67:d4:d6:97:71:ee:78:cc:
e3:f9:d9:53:5b:6e:d9:4a:ce:1b:a0:ea:92:6c:c1:4b:33:de:
c1:9f:cb:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:36:21 2025 by rpki-client