Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f42ba754-2a4d-4b4e-b364-698af500fc82/2caf4efb-d9b1-3f28-9f82-f3d59a35ea55.roa
File: 2caf4efb-d9b1-3f28-9f82-f3d59a35ea55.roa (raw, json)
Hash identifier: MCKxDD2NXRrNMuXhTmpKIjRyBIm/gEQMaKRnVtDZpX0=
Subject key identifier: 33:D1:CB:6A:67:36:12:9A:8C:EE:91:0A:9D:B4:22:02:E1:D8:FB:92
Certificate issuer: /CN=f42ba754-2a4d-4b4e-b364-698af500fc82
Certificate serial: 010D0C9F4328584863CB0DA584EC19F95787FFA0
Authority key identifier: 7E:C2:DF:26:B9:88:C5:11:94:F3:BC:2C:44:11:34:0D:C2:5A:0C:05
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f42ba754-2a4d-4b4e-b364-698af500fc82.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f42ba754-2a4d-4b4e-b364-698af500fc82/2caf4efb-d9b1-3f28-9f82-f3d59a35ea55.roa
Signing time: Tue 31 Dec 2024 14:00:53 +0000
ROA not before: Tue 31 Dec 2024 14:00:53 +0000
ROA not after: Mon 31 Mar 2025 13:00:53 +0000
asID: 14618
IP address blocks: 168.100.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:63:cb:0d:a5:84:ec:19:f9:57:87:ff:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f42ba754-2a4d-4b4e-b364-698af500fc82
Validity
Not Before: Dec 31 14:00:53 2024 GMT
Not After : Mar 31 13:00:53 2025 GMT
Subject: CN=a16e1c43-ea62-4f01-a24d-b34ab6d1b138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:64:df:9c:13:1c:7f:39:d6:19:cc:eb:b9:fa:
23:18:41:2a:8d:76:2a:fb:2c:1c:58:e8:ff:aa:20:
f5:2b:5d:9b:12:17:d0:f6:fa:cd:a4:b0:8d:4f:83:
ba:97:e4:7b:97:95:15:2f:72:20:1c:b0:20:6c:11:
15:f3:82:5f:b6:7b:1b:aa:e6:28:cd:ee:98:1c:da:
d1:9a:b0:ae:08:d2:41:99:39:84:2c:db:b6:5e:6c:
f8:fd:ca:2a:d8:7f:76:ff:c5:a3:0e:22:24:8c:11:
11:2f:75:8a:e0:ef:84:0c:1f:15:65:be:af:66:4d:
e8:98:28:7f:57:0b:d1:d8:18:4c:aa:65:ac:88:7c:
f1:c3:fa:1e:2e:da:8e:bd:61:38:24:9d:d6:bc:af:
79:62:d7:c5:db:af:8e:c5:cb:93:8f:a0:11:27:9e:
04:7d:8a:b2:06:4b:b5:0c:b3:03:f6:00:6d:45:58:
49:08:4c:fc:16:45:51:bf:c2:04:ff:13:47:03:54:
9b:e2:54:66:50:6a:81:0c:40:91:3d:56:d9:94:9d:
4e:fd:5e:43:1e:2b:79:7f:2d:5c:64:b0:c9:d5:f9:
c2:dd:fb:d8:fe:25:40:ff:5f:2b:b5:90:9f:1e:d0:
e3:3d:a6:80:76:0b:0e:c6:dc:bc:a8:71:ed:7c:1f:
da:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:D1:CB:6A:67:36:12:9A:8C:EE:91:0A:9D:B4:22:02:E1:D8:FB:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f42ba754-2a4d-4b4e-b364-698af500fc82/2caf4efb-d9b1-3f28-9f82-f3d59a35ea55.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f42ba754-2a4d-4b4e-b364-698af500fc82/f42ba754-2a4d-4b4e-b364-698af500fc82.crl
X509v3 Authority Key Identifier:
keyid:7E:C2:DF:26:B9:88:C5:11:94:F3:BC:2C:44:11:34:0D:C2:5A:0C:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f42ba754-2a4d-4b4e-b364-698af500fc82.cer
sbgp-ipAddrBlock: critical
IPv4:
168.100.255.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:52:b9:69:3b:4b:0c:7f:84:bb:91:3e:81:5a:db:11:ba:8c:
e3:d0:73:cd:b9:cb:18:76:fa:88:fa:b5:ce:c8:af:22:fd:76:
9d:41:f7:4c:2c:57:c1:d5:6b:f1:ca:cd:7c:fe:4f:53:58:11:
67:49:a8:b0:33:5c:31:88:e8:da:f5:6e:db:c3:ca:c3:d5:21:
3d:75:b3:ee:20:a1:66:9a:a7:4a:f5:4d:a3:ca:bf:3f:65:94:
e5:9d:70:6a:3a:b5:da:92:dc:fa:a3:96:c5:d4:ee:67:31:f9:
9e:c4:ac:5f:b7:74:b7:e5:1b:14:8d:c2:60:d3:f1:bc:c5:ef:
db:c7:31:4e:bc:3b:71:b6:53:3b:30:52:09:2f:b3:c4:b3:16:
4d:7b:4c:f7:d0:34:a8:7a:fd:d1:b2:6d:c1:6a:2d:f5:71:84:
bb:60:81:67:8f:f0:c7:39:46:cd:2c:b3:64:d8:38:ce:e8:bf:
dc:fb:17:f5:39:2d:a3:7e:eb:4a:5b:50:39:f6:15:bf:95:09:
72:77:fe:0f:09:43:75:c0:35:ac:32:74:30:a0:51:03:3f:f0:
a4:2f:c2:b6:9c:4c:b4:8e:92:c5:ea:6f:9b:0b:de:b0:93:3e:
d5:39:67:f8:e9:65:3d:09:32:31:44:52:17:bf:4c:9c:e2:62:
47:a3:da:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:28:53 2025 by rpki-client