Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3e7bf1ea-9808-4ea0-9e27-aa60b6545bea/b8c8b027-6913-3522-8a9a-416844c643d7.roa
File: b8c8b027-6913-3522-8a9a-416844c643d7.roa (raw, json)
Hash identifier: DAYvZQucEzBkLGYuNjVYz9REAKYIcrD7DZLoA5nXh9s=
Subject key identifier: DF:6E:E0:97:A4:CA:DC:36:FB:05:91:3D:E1:AE:5F:B5:A5:C6:98:91
Certificate issuer: /CN=3e7bf1ea-9808-4ea0-9e27-aa60b6545bea
Certificate serial: 010D0C9F43285848424ACC7D92251268C6F87C80
Authority key identifier: B7:53:D8:EA:D2:4D:2F:27:FD:E8:77:9F:29:E3:5D:F9:3C:3A:AC:EE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3e7bf1ea-9808-4ea0-9e27-aa60b6545bea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3e7bf1ea-9808-4ea0-9e27-aa60b6545bea/b8c8b027-6913-3522-8a9a-416844c643d7.roa
Signing time: Thu 19 Dec 2024 14:00:52 +0000
ROA not before: Thu 19 Dec 2024 14:00:52 +0000
ROA not after: Wed 19 Mar 2025 13:00:52 +0000
asID: 400274
IP address blocks: 192.101.47.0/24 maxlen: 24
2602:80d:2001::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:4a:cc:7d:92:25:12:68:c6:f8:7c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e7bf1ea-9808-4ea0-9e27-aa60b6545bea
Validity
Not Before: Dec 19 14:00:52 2024 GMT
Not After : Mar 19 13:00:52 2025 GMT
Subject: CN=8057ee15-ccb5-4f1f-bf91-96e193b7ad5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:17:f5:47:b6:86:ab:a1:2d:d0:3c:41:8a:c1:
69:4e:95:ad:74:bb:3f:96:db:9f:50:d4:9d:53:d0:
15:57:0e:4d:14:f6:00:06:2b:68:f5:d1:77:84:e3:
a3:77:a5:1e:ff:a5:b5:1b:5b:80:30:4a:92:9e:f1:
a8:63:94:b3:c2:7f:8b:f6:a7:b9:08:47:f0:39:97:
16:6f:ba:54:dc:0e:05:20:02:04:ad:2d:40:5f:0c:
0d:01:48:f7:c2:5f:c4:31:9e:3d:d5:00:85:31:26:
4b:fd:5a:06:d5:2f:7d:fe:e3:41:5e:bb:af:f5:72:
d1:01:a6:2a:5e:6a:f7:19:a2:99:69:5b:5b:d0:0e:
42:7d:eb:f0:3a:4f:f2:26:89:44:b7:bb:60:0e:02:
a7:f1:05:4e:77:64:54:91:44:f9:0b:42:3d:7b:20:
aa:91:d8:29:c9:47:1d:9a:31:af:d6:70:be:06:56:
a4:6b:7f:53:3f:ac:20:aa:f0:d1:73:1c:fd:14:4d:
2b:c2:74:73:64:89:f0:58:6f:de:54:58:a7:37:3a:
a3:64:31:5b:aa:67:4f:6b:f2:b9:da:87:8f:51:ec:
b1:02:0a:29:19:8e:3d:82:d9:dd:4b:54:9c:20:4f:
ac:10:9c:37:a0:dd:e6:a5:a2:27:89:59:e2:a1:c8:
15:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:6E:E0:97:A4:CA:DC:36:FB:05:91:3D:E1:AE:5F:B5:A5:C6:98:91
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3e7bf1ea-9808-4ea0-9e27-aa60b6545bea/b8c8b027-6913-3522-8a9a-416844c643d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3e7bf1ea-9808-4ea0-9e27-aa60b6545bea/3e7bf1ea-9808-4ea0-9e27-aa60b6545bea.crl
X509v3 Authority Key Identifier:
keyid:B7:53:D8:EA:D2:4D:2F:27:FD:E8:77:9F:29:E3:5D:F9:3C:3A:AC:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3e7bf1ea-9808-4ea0-9e27-aa60b6545bea.cer
sbgp-ipAddrBlock: critical
IPv4:
192.101.47.0/24
IPv6:
2602:80d:2001::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:a8:f1:34:1b:be:13:cb:17:a3:76:b6:25:95:1d:54:a0:4b:
82:7a:fb:54:89:e9:61:89:bf:b9:99:10:db:86:6b:b5:ec:a1:
58:e3:6d:d8:de:32:8d:8e:77:c4:5d:bf:5f:63:03:b4:8e:ba:
66:54:86:e2:b8:eb:da:1f:5e:c8:d6:f7:28:d7:30:67:33:14:
bd:47:ad:64:a8:d6:47:b8:ad:a0:4f:2d:da:41:c7:cc:e0:4d:
aa:7e:6d:0b:10:44:9f:8a:49:60:71:ed:6b:31:f0:35:8c:e1:
31:78:98:b4:a9:a1:b5:eb:98:5a:26:d9:02:27:94:d1:cf:69:
89:73:99:c7:e7:f0:9b:40:99:11:b6:12:11:56:af:4a:87:aa:
64:9d:22:19:cc:06:57:5f:63:b0:b4:9b:48:c5:6f:2d:4a:c7:
8b:6e:4e:0d:c8:72:59:ca:d1:e2:56:ec:dd:18:83:12:05:5e:
88:74:87:3f:5b:7c:e5:f9:92:89:4d:be:a6:27:86:b6:9c:f8:
63:80:46:2c:69:06:4b:b1:6d:10:eb:88:23:d9:ec:0c:2b:61:
4c:4c:16:44:e2:fc:09:11:71:57:16:82:f7:ac:04:40:b3:6c:
31:d6:f0:ac:79:0d:af:ef:89:77:2c:52:50:f4:39:ee:c0:98:
f0:df:d1:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:07:42 2025 by rpki-client