Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e76e962d-5249-4aed-ae77-b2d6c2ef42d0/d7e5659e-3afd-31ea-8fe5-b8fac539b826.roa
File: d7e5659e-3afd-31ea-8fe5-b8fac539b826.roa (raw, json)
Hash identifier: 0dfoIgJtw3MXB9HXXQtXFTJhJAQOkReKpT5SlTWZNeI=
Subject key identifier: BF:49:70:BC:ED:B0:CE:61:53:E2:7D:DF:E4:8C:2C:A5:84:5B:A8:9B
Certificate issuer: /CN=e76e962d-5249-4aed-ae77-b2d6c2ef42d0
Certificate serial: 010D0C9F43285848424AC9050B6FCAE5E5533793
Authority key identifier: 10:86:A7:D2:EC:2F:54:91:40:CA:72:98:C8:E8:9F:03:57:52:8F:E1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e76e962d-5249-4aed-ae77-b2d6c2ef42d0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e76e962d-5249-4aed-ae77-b2d6c2ef42d0/d7e5659e-3afd-31ea-8fe5-b8fac539b826.roa
Signing time: Thu 19 Dec 2024 14:00:52 +0000
ROA not before: Thu 19 Dec 2024 14:00:52 +0000
ROA not after: Wed 19 Mar 2025 13:00:52 +0000
asID: 40895
IP address blocks: 23.247.192.0/22 maxlen: 24
163.123.168.0/22 maxlen: 24
209.209.32.0/22 maxlen: 24
2602:fd11::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:4a:c9:05:0b:6f:ca:e5:e5:53:37:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e76e962d-5249-4aed-ae77-b2d6c2ef42d0
Validity
Not Before: Dec 19 14:00:52 2024 GMT
Not After : Mar 19 13:00:52 2025 GMT
Subject: CN=10bfb449-b56b-400f-9572-faf3f320ec30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:1a:42:82:ef:e3:f4:ea:f2:7e:d7:5f:1c:b4:
25:bf:4c:7a:23:1a:81:00:40:6d:1b:15:d4:ef:cf:
65:bc:3e:ec:69:cc:54:b1:eb:a3:cf:79:98:a5:5d:
67:19:9e:72:ea:fe:dd:7a:09:7c:02:a6:4d:73:2a:
a8:b0:49:64:1f:38:16:13:ce:b6:f5:5b:3f:d8:ef:
79:b8:b5:d7:5f:34:41:94:3f:d3:48:9d:76:ec:95:
5b:b2:35:77:fb:8c:ae:3e:67:52:86:ee:6b:98:ab:
7b:db:37:df:b9:ad:75:d8:20:2e:7b:21:95:36:9f:
64:cf:eb:f0:be:c5:10:a2:05:62:ab:a0:70:1c:1b:
95:06:f6:a9:ba:3b:8b:0d:17:9e:9b:93:f9:ad:5d:
f8:42:78:9e:99:73:ff:30:ba:c8:13:05:30:38:ee:
b8:4f:a4:2a:03:22:ed:ec:d9:c7:63:26:20:86:72:
c4:bc:fb:f4:82:91:84:bb:ba:7b:c1:40:32:f1:db:
2f:13:f9:c6:89:fe:ca:a2:7e:bf:60:89:bc:d1:8a:
c8:03:c1:38:d2:e8:63:c2:ef:2f:6c:9a:f5:36:4b:
20:ec:58:b5:38:d0:26:2a:39:c8:ce:da:9a:44:69:
5f:3f:44:b3:2e:48:5d:ec:ee:2e:00:46:c3:fa:6a:
d1:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:49:70:BC:ED:B0:CE:61:53:E2:7D:DF:E4:8C:2C:A5:84:5B:A8:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e76e962d-5249-4aed-ae77-b2d6c2ef42d0/d7e5659e-3afd-31ea-8fe5-b8fac539b826.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e76e962d-5249-4aed-ae77-b2d6c2ef42d0/e76e962d-5249-4aed-ae77-b2d6c2ef42d0.crl
X509v3 Authority Key Identifier:
keyid:10:86:A7:D2:EC:2F:54:91:40:CA:72:98:C8:E8:9F:03:57:52:8F:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e76e962d-5249-4aed-ae77-b2d6c2ef42d0.cer
sbgp-ipAddrBlock: critical
IPv4:
23.247.192.0/22
163.123.168.0/22
209.209.32.0/22
IPv6:
2602:fd11::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:95:1a:62:42:50:47:d3:9e:df:05:f5:7a:c4:42:c7:f9:65:
27:0f:27:e6:d0:61:d7:4a:3d:46:ae:82:73:6e:79:cd:6e:a1:
d9:1f:89:66:e9:42:33:cc:3f:fc:c4:33:00:b1:e5:64:07:ca:
96:db:e2:84:a3:e2:d5:53:7b:99:ed:fe:00:6f:c6:cf:a6:6f:
52:0d:f9:f0:46:41:78:2e:fa:4b:a1:4f:3b:b3:42:68:b2:ae:
ed:e3:fe:bc:09:c9:fd:d8:44:58:62:9e:9a:0f:27:9c:25:5c:
26:ba:6c:22:05:91:5a:33:fa:07:ff:df:34:62:e0:6d:a3:3d:
7f:12:69:b4:ea:69:10:ad:9b:c1:81:e7:f8:c3:ad:cd:5b:40:
6e:3a:89:6b:af:e6:a3:bc:17:5b:1a:74:fc:79:9f:8f:7c:e6:
fa:b5:ea:45:22:b4:7b:26:e7:05:7d:2b:81:55:c0:05:f3:60:
d9:6e:e3:23:32:7c:1c:d0:aa:42:0a:92:50:63:a9:c5:39:b5:
b8:b3:55:c8:9b:17:79:20:13:de:fa:b3:38:d3:66:94:b0:05:
2d:bc:55:87:56:c4:d6:dc:5e:5a:53:4f:5c:9c:ac:f7:9a:94:
86:8c:2c:03:8f:71:91:49:39:e2:b3:5d:34:6e:02:cc:a9:6b:
57:87:0a:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:51:35 2025 by rpki-client