Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bcaa2509-b5d2-3eae-8d81-54d650e5ce1d.roa
File: bcaa2509-b5d2-3eae-8d81-54d650e5ce1d.roa (raw, json)
Hash identifier: JVSmLad5o9EE1QlF3ijpIKPpJjSbi8WwpFZLWt+rOwY=
Subject key identifier: 2D:8B:02:7F:1E:07:F3:E2:4A:15:4C:D0:55:88:D5:EC:84:60:85:53
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848387E0E47A1BED7569F808AA0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bcaa2509-b5d2-3eae-8d81-54d650e5ce1d.roa
Signing time: Mon 16 Dec 2024 01:46:08 +0000
ROA not before: Mon 16 Dec 2024 01:46:08 +0000
ROA not after: Sun 16 Mar 2025 00:46:08 +0000
asID: 395747
IP address blocks: 198.41.136.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:38:7e:0e:47:a1:be:d7:56:9f:80:8a:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 16 01:46:08 2024 GMT
Not After : Mar 16 00:46:08 2025 GMT
Subject: CN=d8c15dd2-b783-43bc-abac-a748a71ca661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:d8:7a:41:34:a0:b3:a2:6d:d4:1c:ec:e9:ac:
7c:09:ce:7c:db:47:20:f9:5c:7f:c2:81:b0:be:c6:
02:8d:8d:f0:26:c7:bc:c0:23:3b:e8:77:f9:76:f0:
27:1f:4d:3c:cd:aa:65:98:3e:6b:fd:72:97:d7:4b:
12:aa:ea:5b:e4:bc:94:33:00:10:72:57:6e:84:2c:
2a:68:0b:74:3e:b1:c1:07:6c:b6:11:ff:15:62:8b:
11:31:d7:07:09:1f:52:ce:5c:3e:39:f5:b7:1e:de:
28:a1:13:79:a9:c7:19:d5:67:f4:40:5c:c8:07:76:
b4:d7:84:2d:8c:39:9d:6e:14:2b:81:9c:2f:07:98:
79:5e:9e:1e:bb:f3:bf:7c:86:1c:d9:97:5e:23:ef:
b9:b8:bb:bc:2c:00:8e:0b:a5:ae:3a:f6:f2:3c:50:
2e:59:d7:62:2f:42:69:01:fa:31:9b:40:fa:cc:66:
1b:c0:e5:c1:b3:65:cf:20:7b:3c:5c:6d:42:11:5a:
47:0f:b7:bd:cd:79:db:79:c9:3c:1e:aa:a2:cf:30:
08:d5:54:cf:6c:c1:12:0b:19:56:76:45:70:eb:ad:
c2:c9:1f:57:e3:bd:0f:de:5a:a2:78:11:c7:1b:0b:
ed:bc:b6:f1:d8:ff:84:2f:f7:de:75:b7:34:1a:de:
fe:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:8B:02:7F:1E:07:F3:E2:4A:15:4C:D0:55:88:D5:EC:84:60:85:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bcaa2509-b5d2-3eae-8d81-54d650e5ce1d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
198.41.136.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:9e:5d:b3:64:35:fd:03:3d:21:c8:93:a3:cf:9f:28:0d:db:
2f:42:eb:ab:6b:84:a9:40:c0:f0:f0:86:d3:92:59:c7:6e:0a:
4e:a9:e8:78:23:cf:a8:c1:5a:ef:5e:4d:b5:d5:7e:a6:68:fc:
2a:53:cc:a1:0f:04:60:e1:e7:91:4d:f4:58:c8:1e:81:61:75:
41:48:8a:95:b5:cd:f4:69:f5:75:3a:81:74:da:6c:56:b0:9a:
16:92:d7:5f:29:73:60:ab:46:0a:71:7b:05:9f:28:11:fb:98:
7e:90:63:e7:cf:0c:33:9c:2b:19:d7:b6:42:1a:a1:25:81:60:
77:85:5a:2d:27:f9:c9:83:a9:84:43:a9:da:aa:47:53:5b:95:
91:82:4c:b8:30:3c:ea:42:e7:58:53:0c:ba:8e:0a:fe:27:5c:
20:96:32:8c:78:ca:e8:e2:6a:07:5e:a1:53:bc:46:63:ff:82:
e9:f6:c1:db:c5:bc:f9:ba:3d:57:1a:eb:9a:c3:e1:e8:71:5e:
a4:a1:fb:a9:70:df:de:60:90:ae:f8:1f:32:94:83:17:a8:e2:
44:29:77:b1:bd:ef:83:56:8a:65:75:c6:61:7f:27:0f:17:da:
c1:34:97:d2:aa:1c:6b:76:ce:7e:76:d9:d9:b1:76:56:33:e6:
94:5a:62:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:06:58 2025 by rpki-client