Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/32bae387-9a90-39b8-b5de-920b138b534b.roa
File: 32bae387-9a90-39b8-b5de-920b138b534b.roa (raw, json)
Hash identifier: HIRiAsMDBWjLlmfs+WYo+63rtCQFYEx0QmNZG9DpbXM=
Subject key identifier: 82:47:73:19:72:8F:03:5D:56:1D:AA:AC:27:7B:AF:C9:0A:C0:CC:1E
Certificate issuer: /CN=dd638a66-157d-4b37-b487-c2b5f4dbe940
Certificate serial: 010D0C9F432858484515859066360D91FBDF2C80
Authority key identifier: F1:23:25:81:49:02:B4:C7:2A:9C:90:6D:26:C5:90:12:7C:96:B6:52
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/32bae387-9a90-39b8-b5de-920b138b534b.roa
Signing time: Fri 20 Dec 2024 14:00:51 +0000
ROA not before: Fri 20 Dec 2024 14:00:51 +0000
ROA not after: Thu 20 Mar 2025 13:00:51 +0000
asID: 46192
IP address blocks: 144.86.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:45:15:85:90:66:36:0d:91:fb:df:2c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd638a66-157d-4b37-b487-c2b5f4dbe940
Validity
Not Before: Dec 20 14:00:51 2024 GMT
Not After : Mar 20 13:00:51 2025 GMT
Subject: CN=7094c404-26a8-4335-8351-9ab691f3f020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:63:17:fb:19:77:e9:dd:ca:0d:58:56:23:bb:
c2:c3:91:09:f3:f4:1c:0d:27:63:61:f4:5d:98:2b:
b7:64:4f:f6:b6:6b:2d:15:48:41:98:31:0a:0f:87:
d6:c7:3d:10:02:eb:da:b3:fa:dc:40:d1:c1:35:3b:
74:c0:1a:d3:7f:82:b5:c1:e0:65:9a:25:0b:36:d1:
08:17:4a:1c:62:9a:e7:9e:94:47:d4:27:c8:03:70:
1c:35:65:16:d4:3d:97:7b:aa:92:41:78:7f:e8:b5:
aa:d0:e7:2a:60:00:32:bd:a7:f4:d9:fd:d2:75:83:
53:49:63:e6:c4:d8:9a:52:56:8c:e1:48:c6:48:45:
6e:1d:e7:06:85:5f:b2:a7:d8:34:85:1b:7b:99:8d:
b7:a0:19:7e:2e:20:7d:7e:5d:47:fa:98:00:af:69:
87:9d:f2:cd:cd:9b:f3:b1:15:76:fa:2c:38:0e:80:
38:7c:b2:6b:4c:db:f6:06:90:ed:ed:53:ba:a2:2a:
35:80:c2:bd:12:86:32:b7:46:a8:9d:4d:29:87:f9:
48:02:9a:71:7a:42:7c:ae:bc:5f:e7:4b:82:5e:ba:
be:b1:11:d7:47:16:0e:96:8c:c2:da:f3:7b:6d:e5:
e4:a7:92:51:bd:1d:86:6f:4a:1e:99:5c:6f:2c:21:
26:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:47:73:19:72:8F:03:5D:56:1D:AA:AC:27:7B:AF:C9:0A:C0:CC:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/32bae387-9a90-39b8-b5de-920b138b534b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/dd638a66-157d-4b37-b487-c2b5f4dbe940.crl
X509v3 Authority Key Identifier:
keyid:F1:23:25:81:49:02:B4:C7:2A:9C:90:6D:26:C5:90:12:7C:96:B6:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940.cer
sbgp-ipAddrBlock: critical
IPv4:
144.86.202.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a6:b9:23:02:4b:86:8f:23:f9:e1:b5:ca:ea:eb:5b:78:d0:47:
b3:bf:10:bf:f5:52:88:7b:21:29:65:28:4f:fb:7e:89:f2:09:
c4:2c:f9:21:e6:d8:d1:4a:e2:39:b0:40:57:24:9d:c5:32:9e:
5b:dc:62:99:c4:66:b5:13:0b:ca:0c:1b:86:3a:e7:e0:94:58:
07:d4:2e:7c:a3:03:f0:25:5d:95:76:87:97:62:2b:7d:e9:e8:
7a:e4:e1:ad:ba:56:4d:98:50:97:34:f2:04:63:0b:9a:36:d3:
08:b9:a9:c0:c6:97:3d:30:cf:28:9a:51:30:74:95:41:42:96:
5b:21:9f:33:10:26:5c:c6:35:c3:be:28:c1:93:13:0f:78:3b:
be:41:52:1f:5c:17:0a:df:6d:0b:69:a6:1c:31:48:6c:ad:55:
a1:79:a3:f5:f1:12:0f:d7:a0:ad:44:b5:77:b8:b5:1d:bb:93:
a5:de:8d:b6:e4:e5:a5:c2:14:6e:80:5e:29:a1:cb:9c:35:c2:
8d:64:60:82:f5:fa:a5:53:01:8e:8d:c7:30:82:ef:48:c5:86:
b3:15:d4:e8:f3:92:be:de:a4:53:e6:56:1a:6f:5b:56:79:c0:
e1:c6:38:2e:77:78:3f:68:f3:7e:df:65:04:45:69:ba:78:a2:
60:fd:6c:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:10:36 2025 by rpki-client