Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/20212cf5-9652-3db8-891b-2e568988220d.roa
File: 20212cf5-9652-3db8-891b-2e568988220d.roa (raw, json)
Hash identifier: FSCAb/0Aqvuz0X+sCk29yldoiKBFmJUc3tePF1VZ2XI=
Subject key identifier: 7A:B3:FE:D1:81:86:0A:54:74:47:D4:CC:3E:EA:FF:8F:77:37:F0:19
Certificate issuer: /CN=bebad29c-c2e4-447d-a29e-20f329219ea9
Certificate serial: 010D0C9F432858483F802C7B110DDBE825526B40
Authority key identifier: 07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/20212cf5-9652-3db8-891b-2e568988220d.roa
Signing time: Wed 18 Dec 2024 14:00:52 +0000
ROA not before: Wed 18 Dec 2024 14:00:52 +0000
ROA not after: Tue 18 Mar 2025 13:00:52 +0000
asID: 16509
IP address blocks: 172.82.211.0/24 maxlen: 24
172.82.213.0/24 maxlen: 24
172.82.225.0/24 maxlen: 24
172.82.237.0/24 maxlen: 24
192.243.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3f:80:2c:7b:11:0d:db:e8:25:52:6b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bebad29c-c2e4-447d-a29e-20f329219ea9
Validity
Not Before: Dec 18 14:00:52 2024 GMT
Not After : Mar 18 13:00:52 2025 GMT
Subject: CN=b72021d2-d141-4a74-a521-e5c92e8a762f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f5:16:ff:9b:6b:4a:d6:6a:0f:67:d9:67:ce:
2c:36:72:66:c6:8b:c3:9a:77:0d:7e:70:80:c0:40:
a9:5f:fc:95:56:68:11:11:86:c4:bd:8d:78:80:c1:
86:02:f8:24:9c:7a:cb:bc:9c:5b:6c:1d:6a:af:b1:
7e:b4:9f:2c:ac:24:86:f8:57:32:0a:f3:ed:38:55:
f8:66:cc:e4:82:57:b9:6a:fb:8b:02:b1:c5:36:77:
d2:d8:59:b4:a9:5f:e9:e4:78:77:a5:bb:b7:ee:b6:
8d:e5:fe:52:98:dd:f9:12:a2:67:b6:d2:c5:8b:f3:
c8:e9:ac:76:b0:77:b5:c9:ef:ef:19:dd:b8:30:bd:
3d:40:62:76:2e:23:90:3b:86:71:18:37:2e:4a:99:
94:b7:41:09:52:53:69:96:ee:3c:b1:ad:8f:f1:49:
07:6b:78:44:9f:d8:93:8e:35:a4:13:1e:a2:ff:a6:
ea:dc:f9:8e:25:9f:7f:99:f7:ce:24:63:04:59:8f:
e3:80:29:e0:f9:b5:b4:7c:dc:45:59:54:90:4b:d4:
5d:09:3a:d1:38:c0:49:3a:43:b7:6f:09:0e:5c:b8:
20:44:c6:45:58:7e:14:8c:ea:f0:20:42:90:79:bc:
75:1d:ef:70:9e:ee:cf:2b:bc:b4:c0:ce:39:7a:9f:
79:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:B3:FE:D1:81:86:0A:54:74:47:D4:CC:3E:EA:FF:8F:77:37:F0:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/20212cf5-9652-3db8-891b-2e568988220d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.crl
X509v3 Authority Key Identifier:
keyid:07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer
sbgp-ipAddrBlock: critical
IPv4:
172.82.211.0/24
172.82.213.0/24
172.82.225.0/24
172.82.237.0/24
192.243.245.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:d5:5c:f6:fe:2b:77:ba:1c:1f:26:42:c2:c3:11:16:e1:46:
69:60:e4:37:af:4d:e7:16:cb:e9:f9:e1:1c:02:f1:4b:06:8f:
78:60:19:db:65:40:dc:ab:b1:f1:90:2b:bd:89:53:12:b2:c8:
e2:94:89:cc:4f:1e:8f:d2:72:00:2a:22:5e:87:cf:47:93:54:
5c:f0:1b:29:37:ca:0f:18:59:9a:e3:e0:97:c9:74:75:44:5b:
20:74:51:29:b9:66:85:45:fd:28:73:0e:dc:04:15:81:0e:8b:
a9:66:c2:c9:3b:f7:b7:e3:bb:50:f4:a3:48:ae:7a:ef:2d:24:
c7:0c:94:1b:d7:a2:ff:1f:f2:41:49:b6:aa:d0:56:a0:b6:67:
ce:52:16:a7:a0:9b:70:99:fa:f6:44:1c:88:62:59:2a:b1:14:
4f:1e:49:9d:07:11:9c:46:bb:4d:51:91:50:0a:1a:97:fd:fe:
c9:63:56:37:18:3c:46:8a:54:8a:36:68:d4:3f:e7:27:7f:f5:
7b:14:1f:69:f6:fa:31:d0:e6:1f:96:32:b9:d7:4d:fc:27:f2:
ba:a8:ce:8c:8a:0b:17:0a:de:3e:b0:82:9d:17:6c:0d:bd:f7:
fd:0f:64:7b:f8:91:df:76:de:5a:44:49:fb:be:4c:5f:30:5f:
7c:1d:34:ff
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:36:23 2025 by rpki-client