Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/101b421f-56d0-36b5-8bc2-cd9983162b0a.roa
File: 101b421f-56d0-36b5-8bc2-cd9983162b0a.roa (raw, json)
Hash identifier: gkE8j1f9qeZZNzJC1lOdyHed2wpTrkzDwJp8RalM3hw=
Subject key identifier: BE:5E:A5:77:69:55:3A:D5:DD:A9:C9:11:EC:40:10:B8:68:4D:E4:4D
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E62B67C6E666102B99CAA3A0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/101b421f-56d0-36b5-8bc2-cd9983162b0a.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 15169
IP address blocks: 192.158.28.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2b:67:c6:e6:66:10:2b:99:ca:a3:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=c1c85056-bfe1-4911-8ace-432a4ada0741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5b:93:4c:6e:d4:35:c7:a4:f5:e1:fd:cc:28:
bb:f3:16:5f:fb:1d:41:d1:dc:c1:2b:b6:74:63:63:
94:f4:a7:9a:74:00:64:d1:65:f2:bc:b9:8e:02:60:
76:88:7c:43:b8:a5:8b:c7:66:88:30:60:20:f3:62:
33:a9:b7:60:0e:a6:58:97:4c:69:ac:90:89:4a:d7:
ca:0d:0f:e1:c9:60:d7:47:67:15:00:59:25:d4:06:
5b:d0:fa:81:56:0d:f8:10:68:39:01:d2:a1:ae:bc:
13:77:5c:81:9b:c0:e3:40:18:3f:90:a7:f8:ce:54:
ab:41:26:9c:7d:59:f1:b0:cc:79:ab:bc:69:88:be:
0e:e8:8c:48:cf:50:5d:c6:67:4a:bd:90:7e:a3:7f:
84:49:c7:b9:23:ce:7c:4f:dc:0c:bf:17:66:c8:44:
40:89:e7:02:5d:d7:a4:b9:21:64:6b:66:fe:22:74:
fa:f1:27:57:2b:27:20:17:d6:4c:8b:97:41:73:b8:
07:36:e9:5a:e9:59:93:bb:90:e4:0d:05:d4:6b:f6:
25:55:f6:23:9e:3e:55:33:dd:a7:d8:95:b8:0d:fe:
21:82:78:e0:71:d6:f0:0c:c6:0b:c9:87:9e:89:ca:
73:9e:df:18:b4:ea:88:f8:7b:6a:37:00:92:f0:79:
89:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:5E:A5:77:69:55:3A:D5:DD:A9:C9:11:EC:40:10:B8:68:4D:E4:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/101b421f-56d0-36b5-8bc2-cd9983162b0a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
192.158.28.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:72:45:0c:b4:76:8c:46:26:83:4e:69:72:85:91:a3:74:e3:
52:b3:a3:ea:54:5b:bf:67:d3:10:b7:19:f4:b0:24:14:a0:d4:
5c:70:bd:89:ae:0f:ef:12:79:d2:a5:3b:35:e5:da:43:0c:76:
ba:97:76:98:f4:01:bb:4a:4c:cb:bb:55:f3:2b:35:f3:ee:b5:
de:f9:26:ba:7c:ca:35:87:ff:48:b5:c4:ad:66:f2:b5:04:52:
1a:cb:ee:3a:b8:45:67:af:53:08:00:c8:63:75:c9:ef:ff:81:
7e:25:31:f2:86:fc:1c:69:42:6a:ae:2a:af:fa:11:81:32:b7:
31:a0:0a:d2:62:6a:11:90:8c:45:fa:cd:cb:43:49:47:43:15:
28:29:ea:94:6f:8b:c7:2e:ee:d1:8a:95:05:b4:05:46:5c:f9:
e2:e1:bd:02:32:b8:6b:e6:b1:9c:a7:53:ce:c1:87:79:3d:d6:
55:67:cd:e2:f1:43:2d:2a:eb:86:a7:3a:9d:10:c3:a1:a0:a9:
a8:6a:07:d0:5c:46:c7:46:a6:df:42:d0:f2:fe:00:7e:e3:d6:
4b:9f:f9:e0:d8:a6:ae:0c:f7:c7:ad:95:9f:29:fc:ea:2e:bf:
d3:8c:6c:56:3e:7e:b8:df:c2:e4:9f:85:bb:05:6c:45:73:1a:
6e:61:71:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:04:51 2025 by rpki-client