Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a/bc7b5153-4728-3649-bc82-4499eb9a7abb.roa
File: bc7b5153-4728-3649-bc82-4499eb9a7abb.roa (raw, json)
Hash identifier: EnX4raBiBS8I5wpu3AtmETXV8FwzD0DE+C2J0jG2dK8=
Subject key identifier: 8C:46:64:AB:A2:25:74:F7:92:27:2A:31:03:7E:DB:4B:6F:0B:D4:E4
Certificate issuer: /CN=1a4a4def-a575-48e1-87d5-56942434422a
Certificate serial: 010D0C9F43285847FFE721145E5572FED0291E00
Authority key identifier: 05:6E:18:DE:54:9A:DE:FE:A9:3F:7C:8A:E8:72:D2:89:2F:26:2F:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a/bc7b5153-4728-3649-bc82-4499eb9a7abb.roa
Signing time: Mon 25 Nov 2024 19:16:47 +0000
ROA not before: Mon 25 Nov 2024 19:16:47 +0000
ROA not after: Sun 23 Feb 2025 19:16:47 +0000
asID: 14618
IP address blocks: 192.41.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:e7:21:14:5e:55:72:fe:d0:29:1e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a4a4def-a575-48e1-87d5-56942434422a
Validity
Not Before: Nov 25 19:16:47 2024 GMT
Not After : Feb 23 19:16:47 2025 GMT
Subject: CN=df3f7e6f-1f29-4723-a84f-1e23b25e7dcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:2f:f6:ca:64:a3:20:d6:ef:37:5d:83:ed:88:
a1:c9:5a:f0:b8:c8:5a:6c:01:f8:95:49:fd:e5:34:
17:b7:bf:ae:52:8c:6a:4b:e8:6f:c7:88:f4:67:6c:
19:3a:0d:11:06:51:11:b8:f0:63:0d:75:4e:ef:7d:
92:c7:b6:3a:6f:94:e6:02:81:21:3e:19:83:b5:16:
ef:7d:99:10:6a:b7:78:bd:30:48:79:18:b8:0d:29:
a8:b8:62:89:c3:d3:ce:bc:ef:4a:fa:44:36:c1:c1:
ea:e3:b9:21:c9:8a:9d:90:c7:fd:6e:85:2a:18:45:
bd:d7:0d:31:aa:29:f1:6e:40:0e:91:c7:80:62:6c:
32:e2:eb:35:c0:53:89:00:2a:75:7c:a2:fe:4f:b2:
1d:88:60:03:ea:f2:a7:51:59:7b:6e:71:87:a6:8a:
dc:9d:7b:3c:1c:8f:f7:8b:23:bb:72:ae:12:7c:e5:
bd:fa:fd:e0:5c:db:56:dc:ee:7e:3a:34:e3:b4:50:
2d:3b:25:6c:12:89:d0:c3:78:60:55:31:91:00:96:
53:15:3c:39:c7:e4:60:e8:dc:5a:47:2f:73:f6:dc:
78:e0:f0:a1:d8:95:66:29:5e:d7:a2:f1:8d:50:87:
0b:c4:46:81:fd:17:cb:57:23:db:43:fd:5f:3f:59:
1d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:46:64:AB:A2:25:74:F7:92:27:2A:31:03:7E:DB:4B:6F:0B:D4:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a/bc7b5153-4728-3649-bc82-4499eb9a7abb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a/1a4a4def-a575-48e1-87d5-56942434422a.crl
X509v3 Authority Key Identifier:
keyid:05:6E:18:DE:54:9A:DE:FE:A9:3F:7C:8A:E8:72:D2:89:2F:26:2F:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a.cer
sbgp-ipAddrBlock: critical
IPv4:
192.41.223.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:35:9a:82:6d:23:c6:0c:d6:e0:ff:3f:fa:38:3f:6c:f8:d0:
a6:3d:a1:26:9a:51:fc:0b:47:b3:c5:ad:17:1a:1c:60:2f:b1:
68:c8:8a:d6:51:a0:4c:d4:76:97:27:11:29:b2:ad:54:f4:a3:
8b:9d:b8:ca:7c:96:a9:c4:75:02:c8:b7:6a:31:f9:d8:ba:4c:
82:ef:17:03:58:df:b2:8c:74:45:57:5c:e9:99:ee:b4:8c:a6:
09:7e:89:df:3f:b6:5c:46:e2:2e:a2:2f:0d:02:4a:49:c9:0b:
04:9f:3b:1b:e1:47:2d:b0:35:ce:88:2d:bc:5d:12:d8:71:22:
84:38:47:0a:27:65:18:00:3a:49:0c:2e:b4:0b:0a:22:d7:fb:
3f:0f:6a:d5:cc:7b:e3:8f:03:1e:19:29:a2:e1:f4:8f:9a:37:
20:41:10:d3:b3:8c:8d:d5:57:db:d1:b5:6c:f8:7e:64:6d:2d:
ac:71:3a:7f:ba:d6:0d:74:c7:63:12:52:e7:b5:2e:1f:41:0a:
2a:d2:c5:b0:5f:f8:94:96:21:94:bc:0a:df:30:ca:dd:23:be:
09:6b:a2:2c:98:96:ac:9f:df:2d:a3:00:17:09:95:0f:02:eb:
0b:a1:2a:25:76:6f:36:ea:63:74:96:a2:a9:d9:6a:42:5d:3a:
5b:96:5f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:37:18 2025 by rpki-client