Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/ffbc32ea-31a9-38f5-8150-ad7c8a044ac7.roa
File: ffbc32ea-31a9-38f5-8150-ad7c8a044ac7.roa (raw, json)
Hash identifier: oBO22XAkNxjdYVu0kLNgei/L/qaVWEJYVHcy1GCWOVo=
Subject key identifier: C3:49:FE:0C:44:5B:5E:71:D5:9B:C1:25:FE:18:53:20:13:7C:B5:7B
Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial: 010D0C9F432858481C9A7117D41E3BB435DD4680
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/ffbc32ea-31a9-38f5-8150-ad7c8a044ac7.roa
Signing time: Fri 06 Dec 2024 02:00:39 +0000
ROA not before: Fri 06 Dec 2024 02:00:39 +0000
ROA not after: Thu 06 Mar 2025 02:00:39 +0000
asID: 53508
IP address blocks: 24.89.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1c:9a:71:17:d4:1e:3b:b4:35:dd:46:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Validity
Not Before: Dec 6 02:00:39 2024 GMT
Not After : Mar 6 02:00:39 2025 GMT
Subject: CN=9b442cc1-22a3-4e1b-b161-22adf7cd2917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:62:c5:20:25:41:52:4f:c3:74:c5:08:f3:52:
1d:5d:ea:b6:11:cb:02:1a:42:75:08:5f:66:f8:58:
cd:7e:08:c0:0e:9a:9a:47:94:5c:53:a1:b2:6f:c4:
19:1b:a4:6a:3a:29:29:d5:40:ba:51:7f:08:d8:5b:
62:04:27:ce:cd:bb:2e:cf:e7:97:09:01:29:7b:1d:
a9:71:b2:ee:f5:e2:d0:1b:0f:58:16:2f:e1:d0:58:
81:20:e7:44:ba:be:97:1d:3d:e4:84:ec:85:ae:ff:
81:22:a2:c2:a5:e9:16:8d:f5:2c:98:b3:85:62:6c:
41:af:0d:55:92:4c:af:99:11:65:4d:12:7d:7c:d8:
30:89:62:89:a7:60:97:d7:4e:97:73:5b:9a:db:a1:
2a:7c:ca:a4:32:e5:3f:0f:04:02:5b:e5:32:99:3a:
e7:f3:a8:b8:c3:51:c8:26:c0:6a:88:0e:58:19:08:
88:8b:4c:53:8f:fd:33:29:cd:2c:bd:5d:ca:8b:b3:
33:a8:20:21:26:48:fe:30:0b:fa:e4:e2:df:82:ee:
ec:02:ad:aa:c6:83:0e:b9:86:23:1c:16:e8:d7:5a:
88:36:4d:88:3d:ab:ff:d8:75:23:be:5c:54:60:68:
0e:d3:28:22:f3:69:de:43:53:8b:6b:45:d5:45:f9:
9a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:49:FE:0C:44:5B:5E:71:D5:9B:C1:25:FE:18:53:20:13:7C:B5:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/ffbc32ea-31a9-38f5-8150-ad7c8a044ac7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
X509v3 Authority Key Identifier:
keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
sbgp-ipAddrBlock: critical
IPv4:
24.89.49.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:58:fc:23:c7:a3:05:b6:db:e1:e4:47:ff:00:34:99:92:40:
f7:ad:25:ea:ce:75:45:1b:86:ca:94:f5:eb:3c:12:f2:5d:d5:
34:45:9d:c3:62:69:bf:ea:c2:6b:b2:df:b9:0d:25:5e:0a:15:
e9:d2:20:20:a1:e4:3a:6f:6e:16:88:53:98:66:32:68:71:0d:
ee:87:72:f5:fa:52:74:a1:7a:2c:7e:0a:cd:f8:7a:1a:6d:46:
c1:c4:78:d7:fc:b0:b2:c9:8b:dc:48:cc:cf:97:d3:5e:12:ec:
d3:1c:15:91:2b:60:d4:03:8a:4e:ae:20:2e:5d:23:f8:87:5a:
25:dc:1c:aa:5e:1d:d0:1c:cf:38:bc:8a:25:60:c0:8d:db:b1:
e1:17:41:b7:d5:d0:ae:13:7f:e1:cc:e7:23:1b:41:7e:e5:f2:
23:6c:99:a3:66:bd:d7:3b:79:00:91:d8:f0:a0:ad:cd:66:9e:
de:2f:bb:f0:05:61:31:e2:f3:9e:59:fb:82:f0:0d:86:da:79:
20:75:20:c4:c2:3b:85:a1:ad:aa:9d:47:b5:20:77:09:09:20:
64:27:14:03:04:e0:14:0d:15:56:53:25:05:2e:53:4d:ff:fd:
01:af:ac:0f:bf:1e:3c:63:f7:76:a9:34:3c:1a:51:3e:30:59:
11:79:f8:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:15:50 2025 by rpki-client