Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/d2b52252-d5a5-31a3-b33f-9ee44d111942.roa
File: d2b52252-d5a5-31a3-b33f-9ee44d111942.roa (raw, json)
Hash identifier: j7mk1zh4MjOr/HaFkxy4WYC+BOxOBv9oGZI52EGhK9Q=
Subject key identifier: 2A:EF:C0:F6:05:1F:1A:E5:19:E4:89:6E:DF:A3:50:83:52:CF:4B:F6
Certificate issuer: /CN=bf65551a-76c3-44b0-b183-7019ab1cdb35
Certificate serial: 010D0C9F43285848451583D8C3FFBA63737CB600
Authority key identifier: 77:8D:50:53:D5:E8:EA:48:31:11:BF:78:82:62:32:7C:19:8B:9E:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/d2b52252-d5a5-31a3-b33f-9ee44d111942.roa
Signing time: Fri 20 Dec 2024 14:00:51 +0000
ROA not before: Fri 20 Dec 2024 14:00:51 +0000
ROA not after: Thu 20 Mar 2025 13:00:51 +0000
asID: 16509
IP address blocks: 162.33.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:45:15:83:d8:c3:ff:ba:63:73:7c:b6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf65551a-76c3-44b0-b183-7019ab1cdb35
Validity
Not Before: Dec 20 14:00:51 2024 GMT
Not After : Mar 20 13:00:51 2025 GMT
Subject: CN=b5d92da5-8d92-4134-ac77-6c496f12dab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ac:1e:93:c0:3c:fe:18:dd:34:18:7e:02:02:
e6:e9:80:c7:58:9c:ef:b6:da:78:91:e6:27:6c:ba:
2f:d5:d7:de:82:8f:f9:45:2f:03:9a:ea:42:f7:45:
da:fd:5b:b8:93:6b:95:26:90:38:52:5a:8d:91:ee:
65:42:5b:1e:b5:24:16:89:28:55:88:4d:1b:86:c9:
95:63:91:6a:a3:17:6d:36:b2:d1:6c:31:ef:d5:35:
5b:bc:79:64:f3:78:82:d1:06:05:e2:e9:49:c1:f7:
79:3e:ca:63:a7:c8:71:f7:b5:90:97:83:2b:14:6a:
a4:a0:ed:c2:70:df:90:c5:ef:cc:3d:1e:cb:c5:87:
f4:2f:80:82:fb:d6:2a:44:70:c7:95:e1:7c:96:44:
4e:e2:a9:f7:c2:02:d2:91:a2:7a:79:f8:43:59:ab:
f1:ce:46:03:d0:99:3f:6e:6f:f3:03:ac:d9:da:7d:
c0:5c:79:55:74:e9:89:b3:7c:99:c1:d5:4c:d3:45:
7f:6b:56:b4:0e:5f:41:f5:1f:a3:6e:66:1c:b3:fc:
c3:7c:7c:ef:11:8d:dd:51:b7:34:14:e1:2a:47:14:
98:78:b1:0b:c3:0a:17:b1:c8:d8:e5:ad:27:93:4f:
d1:07:b8:33:7a:5d:6f:8f:b9:3d:9a:92:95:b8:d0:
fe:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:EF:C0:F6:05:1F:1A:E5:19:E4:89:6E:DF:A3:50:83:52:CF:4B:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/d2b52252-d5a5-31a3-b33f-9ee44d111942.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/bf65551a-76c3-44b0-b183-7019ab1cdb35.crl
X509v3 Authority Key Identifier:
keyid:77:8D:50:53:D5:E8:EA:48:31:11:BF:78:82:62:32:7C:19:8B:9E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35.cer
sbgp-ipAddrBlock: critical
IPv4:
162.33.126.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:8d:9e:c8:5d:2b:c8:91:2a:af:35:2d:af:d4:8d:69:6d:6e:
ec:21:20:02:ff:44:6a:7b:47:bb:23:d6:64:ec:75:12:2c:21:
7e:21:da:8e:9e:68:73:09:aa:ec:cf:f6:2b:e5:19:17:c7:dc:
86:6c:9b:59:f6:9b:36:9c:86:fc:5b:d5:4d:72:22:5d:86:49:
31:21:24:12:78:71:f1:94:68:7e:46:d8:2d:f1:49:dd:3e:e6:
2c:69:21:44:5f:36:4a:44:bb:0a:39:b5:2d:51:51:74:1f:3f:
75:ac:a1:15:9d:11:9b:27:6c:91:82:06:d9:95:c8:95:6b:14:
f5:ef:93:a2:74:a2:62:8a:a1:05:92:a3:5f:d8:08:ad:ce:27:
8a:1a:95:60:e8:55:65:b4:ba:b6:e8:b7:af:f7:c3:9d:06:f2:
cd:b5:58:ed:df:98:63:24:2f:6f:62:90:26:ff:66:0a:38:62:
24:4b:23:12:39:09:d9:8c:ed:e0:1e:bd:dd:ad:66:db:c8:a0:
93:e3:32:eb:35:cc:cb:ff:e5:d5:b6:b1:af:34:a8:15:01:e8:
98:08:c8:3c:1e:2c:a4:a3:ef:a8:79:66:c2:6d:0e:f3:b6:ff:
a5:d3:38:7f:a0:53:61:4b:8a:67:5d:92:c3:5a:14:20:99:f7:
85:a8:fd:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:29:04 2025 by rpki-client