Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/7f1ad145-2f41-341d-8595-a8d6dba4792b.roa
File: 7f1ad145-2f41-341d-8595-a8d6dba4792b.roa (raw, json)
Hash identifier: kF/hXxVgInxEFcb71v9Emw/GBjtirttdiEHEgb5BlFo=
Subject key identifier: 12:8E:62:61:D8:56:EF:AC:19:2B:67:DA:DE:D6:E4:6A:E1:C0:8B:61
Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial: 010D0C9F432858481C9A716BDDC937E860DC0E00
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/7f1ad145-2f41-341d-8595-a8d6dba4792b.roa
Signing time: Fri 06 Dec 2024 02:00:39 +0000
ROA not before: Fri 06 Dec 2024 02:00:39 +0000
ROA not after: Thu 06 Mar 2025 02:00:39 +0000
asID: 53508
IP address blocks: 24.244.102.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1c:9a:71:6b:dd:c9:37:e8:60:dc:0e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Validity
Not Before: Dec 6 02:00:39 2024 GMT
Not After : Mar 6 02:00:39 2025 GMT
Subject: CN=3ae674b2-42e6-4c11-8ed1-36105d65344d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a7:ef:c7:30:1f:75:b0:bb:14:5c:f1:8f:81:
1c:6e:1f:d4:13:e0:0c:c3:ab:83:27:31:5e:82:0b:
bc:01:33:0c:63:ab:e6:e4:ee:27:ec:48:84:b9:7f:
1a:7b:18:1f:90:6b:c6:e3:62:82:89:43:9d:20:17:
8c:94:3b:39:3b:17:36:2e:aa:bb:e4:5b:39:cc:ee:
62:51:6e:26:da:00:aa:5a:bc:c3:80:4f:d4:0e:10:
6e:c2:ff:ca:24:b0:8f:87:7e:08:7f:2d:9e:6a:03:
1f:7e:af:48:5d:47:67:ef:d8:60:54:fa:db:b5:43:
78:88:bc:a5:28:b9:50:b6:94:5f:30:28:6c:53:bf:
c5:78:50:c4:e3:cf:53:01:5e:29:a0:c6:21:0b:be:
3a:5b:ea:2b:06:c6:9b:ff:fe:3b:97:f6:5e:41:ca:
1a:35:f8:4f:3e:e7:b4:76:49:1e:b2:dd:70:cc:95:
a1:4d:d1:1f:03:35:9e:20:3e:f4:af:68:73:dd:cc:
d0:7f:fc:2c:cd:ed:29:0b:ae:46:75:e8:79:e8:59:
db:bb:3f:41:17:05:d5:4e:24:ec:ce:be:b0:6a:9b:
e8:c4:1f:3d:bd:f5:55:72:90:03:2a:29:46:dc:e6:
36:1f:f8:ba:63:d5:45:83:d0:2b:4a:2a:b5:45:5a:
db:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:8E:62:61:D8:56:EF:AC:19:2B:67:DA:DE:D6:E4:6A:E1:C0:8B:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/7f1ad145-2f41-341d-8595-a8d6dba4792b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
X509v3 Authority Key Identifier:
keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
sbgp-ipAddrBlock: critical
IPv4:
24.244.102.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:f1:cb:56:9a:da:c2:a7:01:30:13:cb:ef:81:7e:19:9c:71:
aa:e5:fe:6f:c3:c3:15:3e:78:90:86:f6:81:b4:cf:68:b8:a6:
0b:f3:47:6f:5d:ed:e4:bb:5b:3b:76:31:a4:d2:ca:70:b4:06:
9f:a8:9f:16:d1:b0:33:bb:32:c9:02:43:23:6a:ae:4a:e4:33:
91:3b:70:6a:8b:5b:08:1e:28:9d:66:b1:e5:44:3b:73:f3:bc:
dd:d6:67:85:02:ab:0b:5a:5d:47:2d:1c:3a:9c:18:ca:11:4e:
e3:0c:31:50:00:8e:59:3a:22:6b:54:fd:29:96:98:eb:c6:1a:
52:d3:24:0e:df:19:6d:8c:ab:34:02:e0:e0:ea:45:85:0f:72:
95:5b:19:82:5a:7b:e5:66:71:a2:e2:7f:b9:a4:3e:b6:17:88:
3b:fc:69:07:6d:5a:04:94:0e:44:82:4a:10:bb:c9:02:b5:a9:
9d:84:65:b0:20:f8:72:c8:54:2c:35:86:5c:ad:98:a1:aa:a2:
a2:ef:bb:f8:f0:1c:ef:f2:21:21:d6:ef:8a:76:6d:8b:fe:43:
67:d9:10:69:91:4f:59:62:ca:4e:c1:5d:39:0a:57:ff:4f:96:
48:e4:87:48:43:8c:09:63:77:8e:58:5d:4d:94:e1:14:fc:44:
b2:dc:30:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:03:26 2025 by rpki-client