Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1c784e5c-bd0e-4d16-9b7f-8fddc41c1414/bebf7928-f361-384a-ac34-db9c92606597.roa
File: bebf7928-f361-384a-ac34-db9c92606597.roa (raw, json)
Hash identifier: AIUl0AqqjSRoxfyIzpglqs8CvmnxkCkwxz+4RQZN454=
Subject key identifier: 42:66:25:42:BD:5C:E7:71:73:5C:03:A3:29:15:2F:08:81:6B:C2:69
Certificate issuer: /CN=1c784e5c-bd0e-4d16-9b7f-8fddc41c1414
Certificate serial: 010D0C9F432858488AE09E72ABC3D25877746280
Authority key identifier: A4:7A:B8:9E:7C:33:7B:AC:79:92:22:2F:25:B5:96:56:E9:A7:15:D0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1c784e5c-bd0e-4d16-9b7f-8fddc41c1414.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1c784e5c-bd0e-4d16-9b7f-8fddc41c1414/bebf7928-f361-384a-ac34-db9c92606597.roa
Signing time: Tue 14 Jan 2025 14:00:51 +0000
ROA not before: Tue 14 Jan 2025 14:00:51 +0000
ROA not after: Mon 14 Apr 2025 13:00:51 +0000
asID: 23465
IP address blocks: 69.71.32.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8a:e0:9e:72:ab:c3:d2:58:77:74:62:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c784e5c-bd0e-4d16-9b7f-8fddc41c1414
Validity
Not Before: Jan 14 14:00:51 2025 GMT
Not After : Apr 14 13:00:51 2025 GMT
Subject: CN=b23260a6-2c79-4792-9297-2dd2bbb689b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:82:49:88:66:57:91:df:f6:e2:f8:59:85:8d:
bc:84:34:a8:11:cf:a1:af:c4:cd:ba:b2:84:c9:b5:
5f:e7:6c:40:3f:9f:75:a8:16:ac:35:77:3f:f7:9d:
2a:72:c4:d9:01:d9:b5:f4:24:0a:7b:92:46:a3:05:
61:c4:eb:09:b2:a0:34:8a:cc:5b:82:6e:b9:d1:e2:
02:5c:a6:ff:99:d7:f4:c6:84:21:04:40:3b:28:90:
38:35:9c:09:ec:c8:c4:2c:d4:66:3a:6d:08:de:46:
ab:db:93:42:8b:c1:b8:77:ac:cd:52:26:08:d6:8d:
04:66:58:aa:9c:f8:4b:3f:00:04:2b:b1:2d:c8:cf:
e7:23:56:9b:31:2b:8f:c8:eb:50:6c:69:f6:7b:80:
c9:b7:9d:e6:0a:a2:d9:55:c5:0c:71:3a:db:98:9b:
7a:1e:7a:43:9c:eb:68:23:26:a7:3b:d1:59:f7:86:
f5:7f:57:4f:82:5e:65:95:2e:56:dd:9d:17:c0:c7:
d7:98:e0:cc:10:e4:16:42:52:b6:26:0c:a3:cd:d8:
8d:38:cc:ec:c7:14:f0:4e:79:e4:5b:95:d9:27:72:
14:13:a0:f0:b0:3c:20:13:d4:2e:68:06:b2:1a:e5:
e7:16:0c:6e:74:fc:8e:ce:df:e5:25:7f:53:34:19:
99:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:66:25:42:BD:5C:E7:71:73:5C:03:A3:29:15:2F:08:81:6B:C2:69
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1c784e5c-bd0e-4d16-9b7f-8fddc41c1414/bebf7928-f361-384a-ac34-db9c92606597.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1c784e5c-bd0e-4d16-9b7f-8fddc41c1414/1c784e5c-bd0e-4d16-9b7f-8fddc41c1414.crl
X509v3 Authority Key Identifier:
keyid:A4:7A:B8:9E:7C:33:7B:AC:79:92:22:2F:25:B5:96:56:E9:A7:15:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1c784e5c-bd0e-4d16-9b7f-8fddc41c1414.cer
sbgp-ipAddrBlock: critical
IPv4:
69.71.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
cd:53:7a:e0:80:3d:82:99:a4:cc:b4:c7:5f:8b:92:73:07:0d:
d2:4b:65:02:06:25:92:87:05:ee:43:d3:fc:7c:3b:88:18:26:
bb:77:b0:f1:89:6c:e9:49:11:50:2a:ff:fd:03:da:ce:7a:c1:
ce:92:1b:aa:07:3c:ca:59:2e:a4:be:46:36:6d:4e:d1:cc:79:
1e:47:d1:df:af:4e:53:63:41:34:f9:c2:53:ea:e8:22:40:a8:
2d:6c:97:64:5e:51:f9:a4:24:de:10:3c:e9:e4:c0:3c:22:e8:
fc:7a:1d:c3:c0:a8:f9:7e:35:d9:bc:ca:f0:56:bb:36:4e:93:
cb:e0:82:6c:97:44:e3:e7:5b:33:60:26:51:b9:0b:0e:f5:cb:
a2:c7:cf:52:be:f5:3e:01:0c:e8:c5:6d:90:53:0a:02:83:21:
ea:7e:06:8c:33:6c:e0:b7:5c:38:3a:c4:b9:9f:2f:3d:99:74:
4a:0e:15:b4:cc:9d:3a:83:f7:63:13:8b:0c:29:8f:d3:8b:97:
de:75:c8:69:62:ff:e9:b1:d0:80:1a:ae:9d:58:3e:28:f3:8e:
71:60:02:c5:ce:be:18:c1:00:8e:f8:ed:27:59:e2:e0:b6:38:
d0:32:45:a0:8d:19:09:60:6c:46:8b:d4:c3:7c:d9:84:73:b0:
a4:23:e9:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 21:07:27 2025 by rpki-client