Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/40dfec9f-fb35-3c7d-b7c0-9951b5e5a13d.roa
File: 40dfec9f-fb35-3c7d-b7c0-9951b5e5a13d.roa (raw, json)
Hash identifier: MGfUDgYKcUqF14bN1Nql6b2kgJtYneGSpEd084isGaw=
Subject key identifier: C4:8C:3F:21:D8:19:79:69:23:7C:61:ED:10:82:36:A9:C6:9A:75:F2
Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial: 010D0C9F432858481C9A6E21730FD290FCE9EE00
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/40dfec9f-fb35-3c7d-b7c0-9951b5e5a13d.roa
Signing time: Fri 06 Dec 2024 02:00:39 +0000
ROA not before: Fri 06 Dec 2024 02:00:39 +0000
ROA not after: Thu 06 Mar 2025 02:00:39 +0000
asID: 53508
IP address blocks: 24.244.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1c:9a:6e:21:73:0f:d2:90:fc:e9:ee:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Validity
Not Before: Dec 6 02:00:39 2024 GMT
Not After : Mar 6 02:00:39 2025 GMT
Subject: CN=35139530-60c8-4919-b94f-9232fa626652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a3:7f:c4:20:e1:82:b6:94:8c:75:a6:a7:f1:
b4:8a:1a:05:1b:76:96:5a:f6:f3:c1:cd:7f:4e:22:
9e:d5:ee:c5:82:db:b8:2d:f3:1f:d7:94:ae:04:1f:
4a:5a:2f:d2:ff:c5:f9:43:03:e2:bb:c9:99:1c:fc:
f0:ee:37:00:d0:e0:c0:3b:67:dc:a6:61:2c:7f:7d:
02:b4:b3:c9:30:e9:c0:e3:37:17:88:23:34:e0:f2:
99:c1:24:74:7b:78:cf:a1:8c:b6:47:2b:0f:44:9f:
f6:90:b1:e9:92:67:bb:64:1a:fe:96:03:2d:56:67:
4d:8f:77:b9:89:e1:c6:b5:e8:e9:ef:fe:ed:bb:2c:
8b:88:4c:6f:77:41:10:f5:fa:56:34:8a:ae:e3:49:
11:80:24:c0:32:54:c6:b0:99:91:2f:83:50:04:45:
37:50:5b:67:9a:2b:a1:0e:d4:d3:c5:64:ee:47:55:
92:e8:e1:66:4c:99:4e:af:b9:12:ac:cb:02:32:34:
1f:8d:0b:f8:35:d0:c4:84:51:98:90:71:f0:93:41:
52:31:2a:ac:25:fe:87:f3:48:1b:e7:fd:c6:d5:2f:
01:82:cd:c0:a5:21:ef:66:8f:ce:29:40:e3:73:de:
5f:f7:5d:f1:55:5a:63:b2:73:85:dc:6d:d1:e8:61:
79:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:8C:3F:21:D8:19:79:69:23:7C:61:ED:10:82:36:A9:C6:9A:75:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/40dfec9f-fb35-3c7d-b7c0-9951b5e5a13d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
X509v3 Authority Key Identifier:
keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
sbgp-ipAddrBlock: critical
IPv4:
24.244.96.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:e3:da:78:93:14:cf:d5:37:bc:c7:0e:f6:b3:58:3a:ae:71:
1a:d1:82:d1:f8:82:93:c3:8c:c2:cc:22:1d:cb:99:ab:17:2c:
11:97:b4:d1:ff:a6:eb:db:1b:db:6d:d8:7a:40:a6:ae:b1:07:
a8:73:81:c2:1d:18:9c:54:e4:65:c9:8c:ac:e7:12:57:e4:51:
07:b7:45:68:6c:7d:98:74:9b:ec:f4:7d:04:fd:f9:7b:9b:68:
35:ff:c2:55:1d:ef:39:a7:4a:4d:2a:8a:d7:3a:3a:fa:ce:f5:
eb:2b:c8:f5:40:18:09:a8:8b:75:4c:c9:47:f4:9b:e8:eb:a7:
9f:6c:81:a5:a6:4f:97:91:50:e0:32:4a:1d:26:1c:ab:d9:5f:
3f:c2:c0:23:ba:f0:b9:eb:8a:c7:1f:b5:51:99:cf:3f:64:3d:
6b:17:6f:16:03:5b:8b:7b:0c:3c:ef:06:b4:e9:27:64:da:63:
ed:03:4c:15:5c:48:4d:3e:a6:06:c9:07:0b:f8:0e:ab:11:9e:
a1:cb:47:9e:98:2e:ef:00:39:11:f1:3b:69:0e:a6:be:49:41:
5f:60:bf:b8:0d:be:c2:f5:86:75:1c:f5:9a:18:f9:d7:50:c2:
fc:bd:39:f3:21:f9:2d:27:b7:62:45:76:d2:a2:56:9b:15:e4:
a4:8a:ee:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 17:47:07 2025 by rpki-client