Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/a3f85181-11c0-326a-830f-14c1fb40c85f.roa
File: a3f85181-11c0-326a-830f-14c1fb40c85f.roa (raw, json)
Hash identifier: NckQALnpUm30r4HeumQPf9++gzrbRgSRhaBSJscaABQ=
Subject key identifier: 80:EA:67:45:16:FC:59:C8:F8:CC:DC:E3:34:DD:54:7C:6F:40:36:79
Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b
Certificate serial: 010D0C9F432858485CD031A5C618565E10FD5200
Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/a3f85181-11c0-326a-830f-14c1fb40c85f.roa
Signing time: Sun 29 Dec 2024 02:00:39 +0000
ROA not before: Sun 29 Dec 2024 02:00:39 +0000
ROA not after: Sat 29 Mar 2025 01:00:39 +0000
asID: 21949
IP address blocks: 96.45.192.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5c:d0:31:a5:c6:18:56:5e:10:fd:52:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b
Validity
Not Before: Dec 29 02:00:39 2024 GMT
Not After : Mar 29 01:00:39 2025 GMT
Subject: CN=b1bc1d93-9fbd-41e6-9793-83a1ec1146cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0e:20:76:7b:42:21:40:31:c2:d6:cf:e2:dc:
73:3f:de:9c:e3:d0:f2:f6:68:12:db:ba:d1:a3:df:
9c:61:ca:73:e5:39:61:94:07:ab:9c:69:13:fb:52:
67:d2:53:30:27:57:5e:6b:6d:fd:83:65:e5:b5:6c:
c0:75:21:cb:18:38:35:f2:54:b8:57:6b:13:56:fc:
4a:9d:67:98:27:a9:68:03:eb:14:99:a8:74:a7:3a:
29:27:09:b5:22:6c:f7:5c:cb:c9:37:ad:ce:b9:06:
e6:4f:90:11:43:e1:5b:de:4b:9d:59:45:70:45:31:
4f:ff:04:f8:58:1a:b3:24:eb:53:13:6e:16:4b:16:
27:17:ad:34:85:ff:1b:4a:3b:59:36:d7:84:b7:eb:
d9:9f:7b:0c:96:eb:e7:7d:99:d0:9a:67:b8:93:e3:
ac:9d:b8:88:8e:72:b2:21:00:65:7a:ac:7d:66:cf:
fa:73:99:22:29:89:28:a7:ff:1f:b3:1f:49:04:a8:
09:d5:3e:5f:6c:89:a6:ea:15:91:4d:db:2f:2c:84:
e3:21:3f:56:c6:e0:09:26:bf:70:c2:4c:8b:0d:a3:
45:04:6d:3d:08:31:86:f5:58:06:96:42:04:31:01:
96:47:67:a4:7c:4f:5d:f1:3d:1a:20:cd:69:f5:d1:
2d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:EA:67:45:16:FC:59:C8:F8:CC:DC:E3:34:DD:54:7C:6F:40:36:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/a3f85181-11c0-326a-830f-14c1fb40c85f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl
X509v3 Authority Key Identifier:
keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
sbgp-ipAddrBlock: critical
IPv4:
96.45.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:70:20:8b:f6:9d:7d:db:72:4c:80:ae:b9:36:53:3f:48:8d:
ee:56:ea:7e:52:51:48:67:cb:ec:b4:50:a7:8d:6b:0d:74:b2:
0e:08:7b:a7:71:0d:d6:52:ec:cb:39:5b:39:9b:02:32:e3:f3:
ff:7a:f0:d9:9c:89:e4:0d:fc:6a:ac:c1:3d:2b:1e:c0:0b:5a:
b5:d5:27:e3:03:92:5c:d3:7a:c9:8a:e8:a0:e4:60:05:e7:0e:
a9:6b:2c:18:a3:d0:ed:ab:19:aa:df:90:8e:8c:66:16:39:c1:
46:63:66:69:5a:5a:4c:fc:98:3e:48:9b:b1:61:97:e2:e5:2e:
91:20:aa:6e:77:ad:4f:f6:85:77:c5:49:21:18:42:25:17:0b:
db:da:6c:fd:83:75:be:f1:82:f1:ec:8d:5b:7d:61:f2:28:d5:
50:42:94:f2:36:e8:27:dd:57:09:bf:de:67:c8:db:6a:2a:bf:
a2:81:d2:91:82:d5:eb:37:30:cc:51:c8:95:7e:b4:6e:92:bb:
63:db:fd:03:76:1c:d2:a4:d2:b8:5f:de:94:69:5c:f1:d4:f0:
1e:79:5c:a0:b5:62:49:0b:a3:76:02:01:9f:f4:0e:bc:f0:0c:
50:e8:a3:00:55:e9:f4:bb:03:a9:ef:40:b2:b3:fc:d5:8b:e0:
1f:38:b1:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:57:24 2025 by rpki-client