Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/752ad5a3-549a-31eb-8ee9-e86a007198da.roa
File: 752ad5a3-549a-31eb-8ee9-e86a007198da.roa (raw, json)
Hash identifier: EUqdmwoh1vCL1n3zrlHec7QGC/yNZ7AnvmjCEiE/zEs=
Subject key identifier: BC:AF:0C:CF:32:1A:10:C9:63:B4:CC:BC:6A:59:08:A6:32:3F:EA:EB
Certificate issuer: /CN=e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09
Certificate serial: 010D0C9F4328584827C547619DE7972C74B3AA00
Authority key identifier: 34:87:E5:A9:A8:7B:D5:7B:A5:76:B4:1D:BF:21:E0:8B:47:28:B9:11
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/752ad5a3-549a-31eb-8ee9-e86a007198da.roa
Signing time: Tue 10 Dec 2024 02:00:40 +0000
ROA not before: Tue 10 Dec 2024 02:00:40 +0000
ROA not after: Mon 10 Mar 2025 01:00:40 +0000
asID: 11659
IP address blocks: 169.147.252.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:c5:47:61:9d:e7:97:2c:74:b3:aa:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09
Validity
Not Before: Dec 10 02:00:40 2024 GMT
Not After : Mar 10 01:00:40 2025 GMT
Subject: CN=5901536b-86e7-40f2-ac46-d5aa5e82b9b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b0:3a:49:49:9a:46:eb:6b:a9:a0:5b:7b:1b:
00:00:bd:b8:1d:00:13:18:ac:ce:e8:e3:fe:e9:b6:
6a:62:01:d1:2c:ab:c5:58:a5:6e:07:0e:01:ef:e4:
5b:4e:85:10:6d:f3:0a:eb:a2:b6:62:aa:6a:64:ac:
e8:ca:5e:0a:b9:71:49:cf:59:8e:04:12:15:16:c7:
d8:3f:a0:d6:48:22:72:1f:5d:3b:4c:59:46:d2:52:
5d:0d:9d:38:d3:e5:8f:63:1b:97:4a:d0:db:52:e0:
08:cd:16:f3:5f:d4:5a:dd:b2:5a:59:2e:92:51:f5:
39:0c:16:37:fa:52:e8:a6:9e:d4:49:49:a0:35:93:
38:41:87:6c:21:fe:40:be:13:9c:ac:c8:ff:23:b3:
1c:cc:4d:c3:9a:e9:8f:b3:8b:db:c0:68:ab:ee:aa:
77:2c:af:2c:c7:42:65:22:9f:6d:16:4e:12:b2:0a:
18:4f:3f:36:3e:dd:0e:a6:d2:a8:d3:24:98:6e:75:
73:ca:7c:1d:85:0f:76:0c:b5:bb:93:ac:f6:55:06:
f1:5d:ac:40:ab:74:02:ee:c3:61:57:77:dc:96:ac:
c2:5b:91:15:08:08:06:44:1d:ed:51:c3:20:08:1e:
f6:41:9f:c2:4d:6c:f1:c8:28:98:7e:45:19:f0:44:
be:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:AF:0C:CF:32:1A:10:C9:63:B4:CC:BC:6A:59:08:A6:32:3F:EA:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/752ad5a3-549a-31eb-8ee9-e86a007198da.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09.crl
X509v3 Authority Key Identifier:
keyid:34:87:E5:A9:A8:7B:D5:7B:A5:76:B4:1D:BF:21:E0:8B:47:28:B9:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09.cer
sbgp-ipAddrBlock: critical
IPv4:
169.147.252.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:89:02:b8:0d:c0:87:35:e9:74:e6:80:4b:b5:67:84:72:8f:
a5:85:7a:e4:61:be:87:1e:e1:eb:76:4d:05:f0:3c:a6:b5:2d:
84:66:03:e5:48:e1:8a:cf:7a:e0:71:1c:c1:e6:b6:70:54:d7:
8f:42:0e:5f:ff:02:de:c6:30:ae:f2:b6:87:d5:c2:2d:be:48:
92:8a:4f:47:0e:78:82:fd:e2:6e:e7:27:e0:cb:b0:9a:4f:b5:
0f:b6:69:4f:36:16:f8:55:6c:87:60:03:5c:ab:55:8f:ad:55:
84:62:f0:05:9f:59:2d:bc:40:51:6c:ea:d1:17:83:6a:bc:75:
46:b4:1d:d2:d8:e1:22:d2:fb:3f:64:cd:03:41:dc:00:aa:9c:
8e:d3:82:d9:f5:11:c5:3f:ae:84:a9:07:bf:55:f4:f2:8b:76:
0e:25:b2:15:9f:81:1c:1a:24:cc:e8:c2:10:d0:ba:09:cf:6c:
a8:58:81:38:93:47:9e:91:e8:1d:b7:a6:a6:4a:5b:b9:ac:45:
9d:9e:2d:a3:cf:f9:b9:78:e7:2b:1a:cb:3a:3d:48:8d:57:26:
c1:18:d2:45:68:a6:dd:2b:42:d9:11:3f:2b:5e:cb:66:d6:80:
16:bd:2f:94:cb:fc:75:62:c3:16:ae:3e:4f:e3:32:90:58:e3:
d3:ae:e8:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:39:19 2025 by rpki-client