Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/bfc668e6-2f3e-30a4-a410-a3e745688f64.roa
File: bfc668e6-2f3e-30a4-a410-a3e745688f64.roa (raw, json)
Hash identifier: cRjnPmSKIDeS1ADk8D1AMv1Aq6MGrBGbWSLWluVdCng=
Subject key identifier: A2:EE:16:09:3A:E8:1B:FD:22:CF:83:A6:97:2A:21:BB:4B:E2:72:48
Certificate issuer: /CN=946cb195-9b9a-4836-9152-b97e9e831144
Certificate serial: 010D0C9F432858480645011BEA738CC55B8FCA40
Authority key identifier: D5:60:F3:5E:86:F4:DA:77:6D:B8:C5:DA:CD:F1:D1:63:9B:E5:34:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/bfc668e6-2f3e-30a4-a410-a3e745688f64.roa
Signing time: Thu 28 Nov 2024 02:00:38 +0000
ROA not before: Thu 28 Nov 2024 02:00:38 +0000
ROA not after: Wed 26 Feb 2025 02:00:38 +0000
asID: 16509
IP address blocks: 142.54.41.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:06:45:01:1b:ea:73:8c:c5:5b:8f:ca:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=946cb195-9b9a-4836-9152-b97e9e831144
Validity
Not Before: Nov 28 02:00:38 2024 GMT
Not After : Feb 26 02:00:38 2025 GMT
Subject: CN=afee6ac2-8cde-48fd-ad2b-a56ae05d7cfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:f0:0b:78:9d:32:cf:83:56:c3:51:c2:dd:52:
fa:f8:6a:e1:e5:3a:36:30:e7:6e:0b:0f:ac:72:26:
bf:8f:f6:99:84:73:1b:90:5c:73:91:58:5a:b7:9d:
8f:a4:4a:ec:56:10:cf:d0:88:a8:de:e5:22:7f:80:
ac:6b:8e:4f:68:e1:b9:23:39:43:fa:7f:0c:fc:53:
15:62:16:1b:a8:91:4b:ab:24:c8:f9:f3:54:20:c9:
92:e8:3f:06:73:4d:4e:67:41:f7:21:4c:6d:a7:f0:
6f:c4:1f:b1:70:dc:03:e3:67:90:be:70:36:4d:6f:
ab:d5:6e:50:49:f8:0d:a1:18:a7:6e:f7:cf:ce:f8:
84:db:6a:4c:77:b6:4f:d8:a6:fa:a2:4c:a8:14:e7:
f7:e0:0f:ab:fd:cf:d9:14:5d:df:c7:8e:b6:2f:3f:
40:17:16:d7:fa:1d:24:36:d2:68:4b:01:8b:86:ef:
89:4c:39:db:f1:bc:ce:49:fc:ac:12:4c:16:dc:45:
27:e7:d0:42:c0:5a:bc:c5:e2:cd:3d:03:f2:1e:ad:
a2:8e:c6:1d:56:54:37:a3:0d:86:e7:25:c5:34:9e:
6e:22:6d:69:a3:5f:e1:6b:89:67:f8:56:f1:f3:1b:
fe:96:6c:ed:89:e4:4f:47:13:5a:69:0f:ca:33:54:
be:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:EE:16:09:3A:E8:1B:FD:22:CF:83:A6:97:2A:21:BB:4B:E2:72:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/bfc668e6-2f3e-30a4-a410-a3e745688f64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/946cb195-9b9a-4836-9152-b97e9e831144.crl
X509v3 Authority Key Identifier:
keyid:D5:60:F3:5E:86:F4:DA:77:6D:B8:C5:DA:CD:F1:D1:63:9B:E5:34:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144.cer
sbgp-ipAddrBlock: critical
IPv4:
142.54.41.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:29:11:f1:15:3e:2e:b3:42:92:23:28:18:2c:4c:c4:8a:fb:
bf:1f:66:68:30:60:49:9d:26:e1:4f:52:52:e9:07:82:c8:cf:
40:4e:52:78:36:b9:a5:88:27:9e:b3:3e:f4:c9:31:42:e6:a8:
f0:76:61:43:77:6d:97:3e:fa:3b:98:29:9f:e3:bb:d2:7a:0c:
db:c6:4f:91:5e:74:f6:97:6a:de:7e:0a:23:0c:8b:b7:0e:30:
6a:aa:60:0e:44:05:fc:dc:6a:c3:5a:a7:5b:f4:16:af:d6:6a:
5a:a0:84:8e:6b:c1:a3:b8:1f:56:ac:4d:a5:af:aa:a2:ec:53:
58:69:5e:09:a6:3e:ed:fc:88:c8:07:ee:7d:55:3e:d3:2c:67:
03:f6:8e:ef:73:d2:81:6b:cd:f1:85:92:a8:6e:63:e7:95:25:
53:2e:db:67:af:63:8b:03:ca:1f:f2:b5:e4:5c:81:79:36:10:
db:3c:77:85:61:3e:6e:b0:c3:51:84:7b:c3:20:99:22:2a:87:
43:89:0b:3e:1b:4e:88:a2:02:7d:56:31:ca:2f:3a:70:6f:8b:
73:ea:61:21:de:f9:3f:66:b6:6e:1a:fe:cc:34:f6:45:e0:e6:
f9:5a:9d:85:9c:76:92:53:80:bc:32:b1:3c:73:04:43:ab:af:
95:2a:6e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:48:45 2025 by rpki-client