Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/aeee4343-ddef-38a5-aa66-df3d38cd2cb5.roa
File: aeee4343-ddef-38a5-aa66-df3d38cd2cb5.roa (raw, json)
Hash identifier: 5HQ8ZOzxU3svy9k9eLNas7m/WYxEuE1wfj8WA3qMd18=
Subject key identifier: BA:F9:CD:7B:6A:7F:B7:A8:A6:FD:13:A7:E2:75:D3:BA:5D:E4:7C:ED
Certificate issuer: /CN=7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd
Certificate serial: 010D0C9F432858484C10249D627C0D7FA0953F80
Authority key identifier: D9:C1:0D:6D:EC:FA:E9:C4:55:81:D6:35:01:1E:C0:6D:D6:70:4A:AA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/aeee4343-ddef-38a5-aa66-df3d38cd2cb5.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 2013
IP address blocks: 192.80.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:24:9d:62:7c:0d:7f:a0:95:3f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=c652833c-9ae6-43e0-a852-75331adce96e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c1:83:22:d7:5c:1c:a7:bb:0a:d7:aa:97:52:
da:0d:02:a1:91:43:5d:b3:78:cf:06:07:9b:c2:de:
18:0e:51:eb:c9:57:3a:55:e9:e7:7f:a2:ac:40:ec:
7b:e5:ed:4a:ad:ac:e1:18:73:b4:8d:8f:ca:6a:40:
11:d6:29:a1:10:fb:bb:12:5a:8e:53:98:98:ad:1c:
5e:38:d4:ff:f5:dd:0d:a2:64:08:6a:c7:f9:ac:87:
3f:8a:6d:4c:bf:13:3e:26:ac:5d:10:8e:77:7a:b0:
9b:78:18:cb:02:c4:bb:1c:78:ee:ad:d9:7b:7a:56:
b5:56:77:9e:f8:40:30:6d:07:f0:9e:f2:59:9f:ac:
ae:1f:0b:3c:90:09:bd:1d:64:2b:d0:e1:28:06:f9:
aa:02:56:33:b9:b5:10:21:2f:28:f9:c5:36:b4:c9:
01:5a:bc:65:20:e7:de:96:83:64:de:51:4c:d8:86:
2e:05:ff:24:85:56:19:22:ac:e9:f3:cd:8c:78:d4:
d5:f9:12:16:e7:0d:b4:d3:2f:0f:35:82:58:0a:b7:
73:d9:bf:67:25:e1:59:d5:ff:92:91:b2:9f:15:76:
6f:ba:55:77:79:2f:66:2f:89:80:0f:34:e6:a9:de:
45:f6:6e:cc:fe:fd:5a:5b:df:46:7e:a9:f4:5d:2c:
f0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:F9:CD:7B:6A:7F:B7:A8:A6:FD:13:A7:E2:75:D3:BA:5D:E4:7C:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/aeee4343-ddef-38a5-aa66-df3d38cd2cb5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.crl
X509v3 Authority Key Identifier:
keyid:D9:C1:0D:6D:EC:FA:E9:C4:55:81:D6:35:01:1E:C0:6D:D6:70:4A:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.cer
sbgp-ipAddrBlock: critical
IPv4:
192.80.241.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:03:3a:65:1e:64:63:54:76:b6:53:1f:11:83:8e:9b:2a:e9:
54:08:a0:19:fa:38:d5:50:83:03:8e:d4:26:e2:02:0c:fd:08:
fc:39:cb:6f:18:32:92:dd:e9:1e:7c:ed:06:af:25:62:0d:52:
30:94:bd:e3:0e:23:03:16:dd:98:ea:ab:97:a3:b8:3c:b0:45:
75:17:ce:86:07:53:53:2a:45:14:4a:77:9b:c3:37:fb:a1:43:
7d:69:4d:ee:58:a2:ee:50:6e:ec:06:67:63:30:6e:c8:ed:9d:
b7:37:67:d4:e1:e8:c3:61:64:1a:5c:af:58:84:62:cb:0b:46:
56:69:cb:85:26:fe:a4:c9:a6:78:80:0c:55:7c:39:f9:95:46:
56:75:07:22:1a:29:8f:52:da:fc:a7:71:97:1e:06:f4:37:94:
96:a9:dc:df:0b:74:28:19:a7:95:09:ae:f9:4e:4c:b2:59:37:
5e:ba:49:d9:cb:d0:86:b2:6d:a1:66:bb:43:2a:e3:67:a2:70:
78:72:32:0b:d5:e6:db:b7:17:52:d2:d0:83:e8:ec:6f:7d:35:
09:c7:80:ae:f8:b2:90:6e:b6:bb:fc:c7:67:01:38:20:12:c6:
8d:e1:19:4f:80:c6:84:35:f2:bd:6d:35:b6:48:f4:d3:e8:c2:
35:22:64:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:59:38 2025 by rpki-client