Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/5384f320-755f-39d6-bdac-b69645a25ee8.roa
File: 5384f320-755f-39d6-bdac-b69645a25ee8.roa (raw, json)
Hash identifier: ddI2an5GeOznbmKQKsAHXu+VHkw7bx2xLCJtDuuwSpo=
Subject key identifier: 35:09:FC:BF:BA:CE:05:59:DC:F7:EF:5B:A9:EA:2B:F3:87:E4:73:53
Certificate issuer: /CN=86b35f71-51ac-43ff-b604-cba3552c4c8c
Certificate serial: 010D0C9F432858482A8FD665C0932A360F0F75C0
Authority key identifier: 64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/5384f320-755f-39d6-bdac-b69645a25ee8.roa
Signing time: Wed 11 Dec 2024 02:00:38 +0000
ROA not before: Wed 11 Dec 2024 02:00:38 +0000
ROA not after: Tue 11 Mar 2025 01:00:38 +0000
asID: 26241
IP address blocks: 100.42.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2a:8f:d6:65:c0:93:2a:36:0f:0f:75:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86b35f71-51ac-43ff-b604-cba3552c4c8c
Validity
Not Before: Dec 11 02:00:38 2024 GMT
Not After : Mar 11 01:00:38 2025 GMT
Subject: CN=26b83d4d-c702-4d51-94af-a97080121ef8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d7:5b:6d:5b:68:15:39:5f:3e:69:dd:82:4a:
90:00:2f:f4:a1:82:d5:a9:3f:70:2d:78:65:7f:95:
a7:57:b8:4f:cb:d8:90:b1:e6:fa:ce:7a:d6:1b:00:
6b:75:d4:8b:24:09:9f:a6:9f:79:d3:73:64:be:7d:
5a:a9:16:cd:a7:09:46:fc:b3:26:7c:e9:a9:5a:0f:
65:7e:47:18:d0:f8:84:8d:2a:01:bc:ab:3f:96:ea:
98:21:e9:51:96:48:bf:be:07:f7:18:3c:eb:87:31:
40:8c:4f:d8:33:4c:db:1c:9e:33:57:49:30:d8:11:
96:c0:d5:f5:a4:a9:3b:d8:2f:66:14:3d:45:43:86:
21:ea:03:08:16:c3:dd:12:93:83:1e:dd:60:85:97:
04:33:c0:f4:ef:f1:7b:3b:34:cb:dc:68:aa:ce:21:
c0:2a:1a:6f:12:6c:06:cb:0f:9a:cf:28:db:e4:06:
6a:80:9c:92:85:b1:fe:e2:5d:23:68:7a:77:01:82:
97:8c:a3:03:77:5c:fd:52:f1:1c:59:d7:51:5b:77:
2d:f9:d1:c3:2f:74:56:18:30:ae:2d:05:b5:8f:de:
08:85:0a:19:02:d5:71:d1:dd:ae:93:d0:51:4a:80:
fc:2d:a2:4b:9c:3c:8b:8b:73:93:60:75:ba:bc:73:
94:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:09:FC:BF:BA:CE:05:59:DC:F7:EF:5B:A9:EA:2B:F3:87:E4:73:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/5384f320-755f-39d6-bdac-b69645a25ee8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl
X509v3 Authority Key Identifier:
keyid:64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer
sbgp-ipAddrBlock: critical
IPv4:
100.42.17.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:c4:bc:1c:30:ab:a8:2a:04:02:0c:36:36:6b:f5:77:d0:7f:
2a:e4:27:7f:a9:e1:1a:ff:1c:cb:24:ad:58:57:f0:35:e5:a8:
2d:29:af:c0:d6:fb:c1:a9:c3:35:3a:1c:d0:6b:f4:37:64:53:
d6:1c:96:b8:99:dc:d3:70:5d:4a:3b:d9:7c:91:53:c3:c6:45:
71:f9:63:de:d6:74:9e:de:84:4a:0c:95:86:9e:0b:a3:6d:90:
e7:87:97:bb:5f:66:81:cb:84:43:dc:9f:d1:a2:49:05:e2:ad:
59:0a:b1:27:8c:5f:30:45:55:fe:e3:96:6b:90:34:87:6f:6d:
35:80:00:09:4b:59:71:35:cc:74:7a:85:b7:2e:8c:85:94:2f:
02:b3:47:cd:5c:55:94:69:aa:88:1e:aa:72:38:96:21:53:9f:
f3:ee:3b:21:21:57:26:66:8c:d4:6f:5b:a4:62:52:6f:a7:84:
83:ef:f1:65:53:80:0c:ac:b7:b2:1b:f9:05:65:65:b4:2b:c8:
34:99:2d:11:d0:33:61:f9:e8:5f:b0:b7:d0:a7:83:d4:42:68:
49:af:1e:16:6f:df:64:71:75:5a:7f:7f:02:eb:e0:77:55:b0:
46:6f:5f:17:f8:16:a5:b1:ed:fa:ed:01:60:e7:ef:58:dd:1f:
09:a4:38:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:12:06 2025 by rpki-client