Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/33d4d00a-952d-3bbc-9d17-2eaf22032eee.roa
File: 33d4d00a-952d-3bbc-9d17-2eaf22032eee.roa (raw, json)
Hash identifier: MIwLkHYm6wcecxSwyB89GgTO+XilvymF5/mOcGjTjb0=
Subject key identifier: 1A:71:70:3F:DF:D6:D1:DF:E1:B8:AD:F4:C9:BE:6B:43:FE:CB:51:1C
Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial: 010D0C9F432858481C9A71EE7B229A1D94577000
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/33d4d00a-952d-3bbc-9d17-2eaf22032eee.roa
Signing time: Fri 06 Dec 2024 02:00:39 +0000
ROA not before: Fri 06 Dec 2024 02:00:39 +0000
ROA not after: Thu 06 Mar 2025 02:00:39 +0000
asID: 53508
IP address blocks: 142.79.124.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1c:9a:71:ee:7b:22:9a:1d:94:57:70:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Validity
Not Before: Dec 6 02:00:39 2024 GMT
Not After : Mar 6 02:00:39 2025 GMT
Subject: CN=b33cbe8b-e0e7-4f35-8bce-217d1e2896b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:19:d2:98:34:00:f7:7f:52:60:29:4a:1a:d5:
bf:ae:5a:f5:4c:7f:2c:c7:d1:bb:37:92:58:67:1f:
eb:15:f8:64:89:26:8a:d4:54:58:c2:1c:ac:5f:5b:
bf:d3:a8:7e:75:df:7f:b7:5b:66:87:02:fa:91:b9:
13:17:5e:a6:65:7e:33:09:b3:78:00:02:1b:3c:03:
d5:3f:e6:2d:0e:35:0e:10:f1:0f:cc:ff:ee:e6:ba:
1a:c0:8f:6d:9b:b9:ba:9c:c8:5b:f2:8b:a7:e9:41:
00:b1:1f:3c:9d:96:3f:dd:f4:56:a9:fa:d4:8e:3c:
02:63:b5:5a:9a:13:b6:8d:61:66:33:75:11:7f:e7:
37:9d:3d:71:c0:e7:cc:fd:f5:ec:e2:78:36:ac:0c:
91:d6:ac:0a:f1:e1:ca:58:ff:2f:1d:5d:63:47:36:
e6:96:84:63:86:d2:b6:15:78:e8:7f:a0:4a:4e:90:
3d:0d:3d:33:21:74:e0:b9:2e:49:09:1c:4a:45:85:
48:53:0a:1d:8f:2e:80:8f:96:6f:03:4c:e9:f2:20:
d4:b0:1c:73:f0:fa:f6:2f:6d:4f:da:7c:38:eb:c0:
0c:f3:d8:70:9e:37:2d:ea:6d:b7:af:8a:68:2a:c2:
77:65:d0:43:6a:3f:29:b9:e4:44:f0:8a:4d:2a:32:
73:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:71:70:3F:DF:D6:D1:DF:E1:B8:AD:F4:C9:BE:6B:43:FE:CB:51:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/33d4d00a-952d-3bbc-9d17-2eaf22032eee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
X509v3 Authority Key Identifier:
keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
sbgp-ipAddrBlock: critical
IPv4:
142.79.124.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:22:1d:47:cd:8c:d2:10:f3:c5:b7:16:b2:e7:1c:43:52:b5:
1e:2b:ee:a8:37:5f:da:03:2b:78:c6:7f:93:09:8c:74:14:a4:
5a:da:19:01:94:40:30:8e:d2:6c:84:2c:11:10:74:15:4e:5d:
46:15:87:a3:c3:7f:0c:95:ed:c8:65:fe:c1:57:c6:97:f5:ad:
bd:3e:be:64:5b:91:cc:a4:d7:bc:17:7f:87:7c:bd:63:d3:f7:
bb:9f:d7:5e:85:75:8b:b3:bb:78:c0:c9:38:d3:e3:ad:93:6f:
5d:49:ad:5d:0f:06:f5:04:81:d3:58:cb:47:5c:51:59:1d:d0:
d4:98:fc:76:cc:6a:9e:a7:a8:b7:1f:e7:bd:6f:24:e6:4e:8d:
61:0a:95:ed:6b:6e:9c:20:7b:1e:f7:1d:0d:87:a5:4d:19:a6:
1b:57:ae:93:db:25:85:5a:ec:71:ad:18:02:15:a1:57:7c:b0:
59:6e:f1:a7:27:c1:2b:d9:f6:f8:7a:6c:e8:42:30:fc:39:93:
e6:22:4b:0e:a0:25:0b:7f:34:54:bc:5f:93:91:18:27:33:8c:
85:6d:7e:21:3f:8a:09:ff:9c:1c:26:28:49:8d:0e:96:ac:3a:
65:5f:8e:a5:19:a4:5f:1a:b8:55:aa:70:df:20:54:f2:52:28:
ae:fb:ea:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:53:23 2025 by rpki-client