Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/28541db6-1f82-3e14-8a7c-c8eeeeac631e.roa
File: 28541db6-1f82-3e14-8a7c-c8eeeeac631e.roa (raw, json)
Hash identifier: 6ag4E/smjh4VNm4fn4DaDffOfLZt33SorsCJuPjxmz0=
Subject key identifier: 82:60:6E:BC:D8:DE:AC:7C:03:6E:2B:4C:54:5F:37:AA:0D:C9:39:0A
Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial: 010D0C9F43285848143A6C384D3BBDB66365A7C0
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/28541db6-1f82-3e14-8a7c-c8eeeeac631e.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 53508
IP address blocks: 142.79.106.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:6c:38:4d:3b:bd:b6:63:65:a7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=49ffab2e-e353-4701-aa9b-cf7df43e04e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:96:b6:98:a1:70:1f:0d:c0:ed:c8:1c:0b:16:
1b:77:ee:44:88:43:73:39:c9:68:9a:37:49:3b:a6:
93:4e:f5:3f:1f:4d:d2:c9:4b:53:75:17:65:ba:3c:
09:56:ad:27:4e:e1:09:9c:6c:a6:ea:39:60:10:72:
be:bf:09:0d:55:aa:4c:8f:c8:4c:3d:c1:92:d3:a6:
f9:19:bc:a4:23:60:45:48:74:76:e3:f3:e9:a7:1f:
72:30:33:36:95:c0:ed:6f:8e:33:cf:24:5d:70:a9:
da:f2:f1:93:07:52:df:2e:bc:69:d2:8b:2f:00:bd:
14:c8:c3:05:5a:37:57:34:33:de:c0:91:ab:b2:35:
e3:f2:0e:0f:22:a0:fe:ee:b6:17:76:a7:eb:3f:8e:
2f:e6:a4:fa:9f:18:4f:5a:dd:78:30:1a:da:9d:6f:
ed:1b:79:0c:67:e0:ec:6f:5d:45:07:c2:73:3d:f4:
2e:24:1b:f8:c6:2a:be:d1:36:60:6b:9a:db:e1:66:
52:d8:8f:56:39:fc:7d:64:fa:b2:ee:d1:cb:e1:ef:
e5:95:7d:66:90:e4:02:25:49:46:fe:10:9d:fb:d3:
3b:e6:91:03:bc:34:e3:b4:ff:66:75:ac:d2:77:fd:
1e:8f:43:5d:00:cb:95:37:3a:06:f8:a1:b7:fa:8d:
5c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:60:6E:BC:D8:DE:AC:7C:03:6E:2B:4C:54:5F:37:AA:0D:C9:39:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/28541db6-1f82-3e14-8a7c-c8eeeeac631e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
X509v3 Authority Key Identifier:
keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
sbgp-ipAddrBlock: critical
IPv4:
142.79.106.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a7:5e:38:2f:42:61:34:88:70:4b:1c:ac:b3:53:b5:d8:2a:c0:
e5:66:72:d4:52:7b:f8:44:30:d6:a0:cb:d3:d1:f8:cb:97:0d:
5f:33:bb:61:33:30:1f:42:05:e0:18:0e:15:3e:7c:30:ec:73:
ec:82:c5:61:6e:9a:31:b2:03:ef:d7:df:12:40:89:99:f1:11:
a2:83:91:39:6b:2b:ef:d1:6d:17:27:f9:f2:e4:99:3c:f3:f7:
b8:12:dc:f4:ae:89:27:93:73:9e:3b:9f:58:88:d4:cf:ad:7c:
4c:c0:15:30:92:5a:1a:e1:45:05:3a:7e:c1:a3:5a:16:87:e8:
c3:63:1b:50:af:31:2d:a0:2e:ec:bd:c1:fd:59:8a:cb:95:0e:
f1:ed:f0:d7:99:b2:87:3c:e7:cd:af:a2:e6:8c:15:5f:e3:31:
1d:d8:84:75:c3:c3:f4:1e:db:27:2f:6a:7c:30:72:7b:65:9d:
6c:2d:78:88:82:14:6e:5d:36:6f:ad:86:3b:68:de:fe:0f:93:
fc:16:e4:6c:10:23:97:32:3b:b1:89:22:80:34:06:fa:1e:90:
e3:17:8a:ab:e0:c0:b8:6d:48:c0:ac:2a:b3:bc:39:18:63:ba:
da:89:ae:4c:08:86:2d:a3:59:f4:a2:1d:07:27:f9:df:4e:47:
a6:0d:78:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:53:24 2025 by rpki-client