Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ef8f11fe-0cf6-36d3-83c2-e2eae10d6090.roa
File: ef8f11fe-0cf6-36d3-83c2-e2eae10d6090.roa (raw, json)
Hash identifier: OZa5ULbG/hRjvePshgREI/uSgZazhjQ1WQ0oN5M/Yhk=
Subject key identifier: CE:C6:81:7D:CC:DA:8C:4A:59:14:64:27:73:44:DB:19:20:77:6F:44
Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial: 010D0C9F43285847F84F823A87408F8A1290F300
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ef8f11fe-0cf6-36d3-83c2-e2eae10d6090.roa
Signing time: Sat 23 Nov 2024 02:00:28 +0000
ROA not before: Sat 23 Nov 2024 02:00:28 +0000
ROA not after: Fri 21 Feb 2025 02:00:28 +0000
asID: 64267
IP address blocks: 192.171.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f8:4f:82:3a:87:40:8f:8a:12:90:f3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Validity
Not Before: Nov 23 02:00:28 2024 GMT
Not After : Feb 21 02:00:28 2025 GMT
Subject: CN=a0ce4ba6-f496-4fd5-aba4-5ee85698666a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1f:01:3f:7e:57:6b:70:aa:99:87:fc:90:c4:
8b:48:ad:50:4d:49:d6:13:ea:68:09:d3:ad:8f:e0:
f0:d3:98:28:ef:95:c2:7f:a3:c7:82:78:e4:8f:09:
0e:da:8b:51:23:21:61:2c:3c:59:1f:65:c0:1a:f8:
84:43:5f:28:54:0b:68:0e:d8:4c:e6:f9:ea:7e:e4:
e9:b7:62:98:c3:44:27:02:b2:78:1d:b5:ee:f2:84:
a3:f7:82:56:ef:45:69:cc:5a:ab:06:81:81:a4:54:
bf:a2:b2:41:35:21:96:bc:43:b3:67:8c:8b:0c:df:
90:ed:bb:ed:e9:04:12:18:bf:5b:cf:a1:89:91:b3:
9f:6f:8f:1e:06:43:d1:2b:84:8c:91:87:b5:59:47:
ff:52:6a:bc:38:84:6c:c6:de:bd:46:98:be:66:fd:
23:a7:3b:99:5e:3e:66:43:3a:b3:2a:d0:3d:d3:55:
59:b0:6d:b4:85:c1:3f:8c:8f:7f:00:b9:f4:82:06:
81:85:64:32:e4:b6:1a:4b:13:58:a0:f1:9b:df:46:
b6:20:38:15:42:5f:e9:f9:9e:f2:9a:73:05:9d:a9:
a0:e2:d4:17:06:f1:75:2c:df:45:cd:9d:02:fb:3e:
73:0d:7f:a5:0e:ab:12:a1:95:81:49:6d:e1:d4:6e:
38:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:C6:81:7D:CC:DA:8C:4A:59:14:64:27:73:44:DB:19:20:77:6F:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ef8f11fe-0cf6-36d3-83c2-e2eae10d6090.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
X509v3 Authority Key Identifier:
keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
sbgp-ipAddrBlock: critical
IPv4:
192.171.86.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:12:cb:f8:52:ae:d5:f9:a2:ca:cb:ac:ce:0f:f1:f7:53:c8:
7c:33:b4:36:e3:41:aa:44:b8:00:56:f2:c6:43:73:a1:cf:9e:
e0:a8:db:5a:e2:fa:18:3e:78:37:ad:51:cc:42:c3:73:85:74:
71:76:bc:f0:27:57:73:48:53:35:2b:83:5f:16:ab:23:77:1f:
a0:2f:55:ed:ac:dd:1c:f9:25:84:f5:fa:8b:47:fe:9a:32:bf:
52:be:21:f5:dd:09:d6:d8:94:fa:f4:89:ff:1c:ed:3c:c7:c0:
cf:19:ac:5f:f9:eb:b3:bd:fe:e0:f3:ab:a7:63:53:24:81:2c:
5a:33:5a:e2:2e:59:24:24:12:4d:32:b7:9e:99:73:5b:65:7c:
b7:0d:f1:77:58:a1:e3:b7:49:6d:1f:63:99:8d:4e:d6:3d:c0:
89:36:9f:b9:ce:bc:5d:37:7c:9f:45:91:74:ac:34:78:83:90:
1c:13:7b:68:be:de:76:ca:c9:a4:7a:47:1d:b9:81:f9:28:eb:
07:d5:c2:07:6e:eb:8b:a1:ff:ee:d9:cc:50:83:6c:92:0e:72:
21:f8:e0:46:55:d2:62:75:bd:fb:b8:7e:b1:f6:68:90:3c:2d:
f0:e4:4c:14:b6:95:ea:5a:ef:b3:f6:ec:00:1c:63:94:fe:e4:
8a:91:61:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:29:36 2025 by rpki-client