Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/397dc0ec-3da7-3245-b34a-fd0c48fd3756.roa
File: 397dc0ec-3da7-3245-b34a-fd0c48fd3756.roa (raw, json)
Hash identifier: 7LuForaP8VQglkvLa8QVHIjAfXxN+R0Mq6uCcmbQ+mc=
Subject key identifier: A0:3C:29:3C:BF:54:03:8F:43:1D:08:85:52:63:FD:56:F6:76:2E:AF
Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial: 010D0C9F432858481C9A7489CFD7E0529CD807C0
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/397dc0ec-3da7-3245-b34a-fd0c48fd3756.roa
Signing time: Fri 06 Dec 2024 02:00:39 +0000
ROA not before: Fri 06 Dec 2024 02:00:39 +0000
ROA not after: Thu 06 Mar 2025 02:00:39 +0000
asID: 53508
IP address blocks: 209.127.160.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1c:9a:74:89:cf:d7:e0:52:9c:d8:07:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Validity
Not Before: Dec 6 02:00:39 2024 GMT
Not After : Mar 6 02:00:39 2025 GMT
Subject: CN=303d9fa1-257c-433d-b79a-efb5a28ca791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:92:de:de:83:01:43:d2:6a:b4:6d:4d:62:bb:
a7:bb:55:ac:54:30:73:84:00:01:ba:8e:ea:e8:f6:
d0:2c:5f:9a:82:13:99:53:1c:0b:2f:26:e3:e2:b0:
15:bc:13:24:9f:ad:77:3d:c9:00:af:fd:ed:64:d0:
b1:cb:77:37:e8:35:db:8a:d0:6a:08:8b:72:60:99:
33:8a:40:a3:84:7f:fa:de:1f:ab:c2:6d:6a:17:17:
80:bd:80:5d:52:79:aa:d9:55:b9:53:d4:f8:f7:84:
6b:9d:36:e0:f7:25:97:2e:ca:56:b6:6f:8e:72:8b:
0b:77:4b:88:87:9d:b6:35:81:65:48:38:74:8c:6f:
fe:8b:47:49:db:6f:8b:c6:fb:bd:04:d8:5a:5a:f9:
e0:75:32:28:b7:7c:c2:93:00:21:cd:02:73:4a:4f:
7c:49:33:8d:44:21:df:1c:22:a0:a2:1a:b3:a2:f6:
7c:f7:dd:09:4e:4b:cd:99:aa:3f:58:85:e7:98:73:
56:4a:3a:1d:ee:e0:fa:61:67:e1:fa:c7:e1:82:65:
23:6b:6f:ae:bc:96:5a:1e:b7:d4:7b:9f:41:70:f4:
fa:35:78:1d:9d:f3:35:98:6b:c7:d3:57:aa:f6:34:
ec:a0:fe:63:c8:29:1d:2b:f7:0c:e7:e7:fb:f5:09:
f6:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:3C:29:3C:BF:54:03:8F:43:1D:08:85:52:63:FD:56:F6:76:2E:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/397dc0ec-3da7-3245-b34a-fd0c48fd3756.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
X509v3 Authority Key Identifier:
keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
sbgp-ipAddrBlock: critical
IPv4:
209.127.160.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:2d:83:31:c4:26:d4:24:b0:f7:4f:9b:52:76:17:e1:4d:6f:
ee:81:30:fa:5f:72:38:4f:93:2a:63:d6:1a:d7:6e:0b:f5:3e:
ec:ce:e6:fe:cf:54:3d:6b:bc:8f:32:f1:5e:98:e0:62:1e:ce:
3f:28:34:0a:29:ae:b4:f3:6d:fa:b6:37:64:95:3c:73:53:9f:
90:4d:a0:80:22:7a:c1:20:0b:ec:a1:5f:7b:c0:d2:36:f6:5d:
a6:1c:52:d6:d4:11:ab:c3:22:44:7c:7c:63:cc:4d:2e:e9:66:
32:98:60:10:f2:54:c5:3c:bc:57:07:ff:81:3f:7e:8d:25:52:
d0:b6:5b:2b:3a:3d:dd:9b:ca:d0:0e:c6:ba:6d:72:15:71:05:
50:a6:dc:8d:5f:a1:db:5e:4b:b7:60:62:78:a0:99:3b:2c:a7:
a8:f2:1c:7b:f2:df:59:2f:5e:05:47:d6:e6:cc:3e:74:e3:a1:
84:02:93:cb:a4:d4:64:67:ab:17:83:db:50:ec:43:bf:19:49:
4a:76:fd:30:f9:58:bb:23:ae:4c:8e:67:4b:3b:f4:f9:61:17:
25:7a:11:1b:84:3b:56:41:71:1e:fe:0e:ae:ec:cf:a8:69:a1:
2a:5d:c8:72:12:34:e1:4b:13:b3:c0:13:9f:38:9f:77:76:16:
43:51:00:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:15:47 2025 by rpki-client