Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/bd9ca006-1d08-3b42-98a7-cb3b9728ae87.roa
File: bd9ca006-1d08-3b42-98a7-cb3b9728ae87.roa (raw, json)
Hash identifier: HMN8+ezmUs+e0uTW4Pa699DSObJDpyUoLMVPu0TB2zQ=
Subject key identifier: 0F:4C:00:55:93:76:5F:AB:84:B1:FB:B5:3A:53:09:FA:4A:D1:EF:ED
Certificate issuer: /CN=b84ab52d-915e-4d8a-b37b-496ea49c6798
Certificate serial: 010D0C9F43285848037B660B6FDA9F850952E690
Authority key identifier: DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/bd9ca006-1d08-3b42-98a7-cb3b9728ae87.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 1403
IP address blocks: 67.221.48.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7b:66:0b:6f:da:9f:85:09:52:e6:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b84ab52d-915e-4d8a-b37b-496ea49c6798
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=bd103c5d-1005-4d27-9191-2d1f94c6dcaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:cb:e7:cd:ef:86:a4:7a:ec:5a:cb:17:c9:a1:
c7:6f:5c:20:3c:f5:e1:e7:03:0b:e4:78:21:b3:cf:
7c:d5:68:4e:fd:d7:82:74:86:64:ef:36:ab:30:90:
ec:88:69:1e:5a:37:e1:3d:61:0d:3c:dc:b1:38:c7:
3b:1c:ee:54:bd:ef:32:35:9a:cc:72:5e:0d:24:d9:
c4:0b:9b:01:40:e5:9e:bd:69:8c:78:ed:5e:70:d4:
2b:de:43:2d:57:1e:28:c1:c6:c2:d7:be:f3:c2:08:
e2:81:60:3d:b7:2b:43:b7:ba:07:80:74:23:57:36:
fe:f8:f1:e3:4c:f9:95:f6:62:f2:df:0f:9a:9f:a6:
cb:c5:8d:f9:56:b7:86:55:47:57:d8:38:80:ae:d2:
b1:ed:a9:7a:e7:a4:d1:6d:9d:9d:0f:cf:e4:47:f8:
8e:91:54:69:95:40:bc:a5:09:72:a0:bc:6c:30:78:
01:82:97:70:e5:6d:f2:e1:50:1c:7b:aa:96:90:60:
04:36:5d:be:59:4f:58:d9:d4:73:03:ca:78:22:1e:
b2:4b:ec:eb:dc:d2:35:77:53:29:f1:57:d4:42:4b:
3c:7d:af:37:96:9b:7f:3c:43:7d:d0:b9:37:f8:48:
ca:2a:52:97:47:7b:21:39:17:de:fd:6b:35:34:82:
07:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:4C:00:55:93:76:5F:AB:84:B1:FB:B5:3A:53:09:FA:4A:D1:EF:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/bd9ca006-1d08-3b42-98a7-cb3b9728ae87.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.crl
X509v3 Authority Key Identifier:
keyid:DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer
sbgp-ipAddrBlock: critical
IPv4:
67.221.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:9b:57:d9:67:5d:f2:3d:be:4d:b4:39:f3:7f:8d:99:51:8e:
3b:10:9c:33:0c:49:f7:90:4a:c9:34:61:79:05:36:8f:8d:00:
84:be:45:b9:a6:6c:6b:12:d5:6e:0d:ad:c7:56:38:67:8a:f9:
68:ec:14:f4:b6:6a:61:ef:bd:53:d3:52:4d:78:69:93:d6:2c:
58:ad:e0:9b:d6:fc:d9:0a:f4:96:25:1a:c8:62:32:61:42:22:
99:f3:5f:55:2f:71:e3:03:0b:3a:42:65:66:65:ea:f9:12:54:
aa:39:d2:b5:8c:8f:a0:5d:b1:04:f8:59:c9:17:8d:08:d7:42:
87:19:50:9f:10:ae:28:b6:05:e5:25:4c:0b:d7:4c:7b:8c:4e:
ff:d7:6f:e7:e4:e5:b3:a3:67:e8:9d:b6:f4:1b:f1:ea:31:74:
f5:bf:b3:51:52:c8:cc:7b:25:fd:d1:c5:e1:4d:b5:5a:42:4f:
9f:84:54:e3:d1:fc:15:05:40:bb:f1:e2:32:f9:9a:e0:4c:a3:
4c:90:d3:e5:31:81:00:98:e7:af:25:f2:6c:06:2e:b5:d4:dc:
38:92:09:b2:7a:05:20:e8:6d:92:50:66:58:cc:87:1b:d3:a0:
e8:aa:46:59:e8:64:96:81:23:c3:39:0b:7d:10:12:72:ff:ec:
26:e1:b1:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:16:48 2025 by rpki-client