Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/9e2e267d-e461-34e3-95c1-8dfb6824798a.roa
File: 9e2e267d-e461-34e3-95c1-8dfb6824798a.roa (raw, json)
Hash identifier: lrjSiI6r6b6zQ93hX2UCPJe3cGpRIFlppGmZouOnyJE=
Subject key identifier: F5:3E:C6:67:27:3F:E5:45:E2:6E:FC:8E:7C:77:26:71:99:29:00:A0
Certificate issuer: /CN=bebad29c-c2e4-447d-a29e-20f329219ea9
Certificate serial: 010D0C9F43285848547026C9340DEE766F0BA800
Authority key identifier: 07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/9e2e267d-e461-34e3-95c1-8dfb6824798a.roa
Signing time: Thu 26 Dec 2024 02:00:40 +0000
ROA not before: Thu 26 Dec 2024 02:00:40 +0000
ROA not after: Wed 26 Mar 2025 01:00:40 +0000
asID: 16509
IP address blocks: 172.82.212.0/24 maxlen: 24
172.82.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:54:70:26:c9:34:0d:ee:76:6f:0b:a8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bebad29c-c2e4-447d-a29e-20f329219ea9
Validity
Not Before: Dec 26 02:00:40 2024 GMT
Not After : Mar 26 01:00:40 2025 GMT
Subject: CN=50c172ed-ce6d-4b9c-b128-65fd92b4b72c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:87:6d:cd:50:28:9e:cb:a9:c4:16:9d:ca:ea:
14:c7:61:f1:72:f4:35:54:7d:4f:d8:b8:a4:89:60:
79:d0:e6:f8:2c:fd:fb:2e:a3:36:a0:81:f7:d6:b8:
6c:e6:6f:57:b7:cb:69:85:0d:b4:76:29:11:eb:a2:
c5:e6:b0:1b:f9:3b:df:71:c5:c1:30:3d:fd:21:69:
eb:6c:99:bb:9e:4e:33:5d:c8:71:fc:7d:fc:df:97:
c9:60:52:f3:a7:7a:12:72:ab:03:cf:3c:44:43:57:
c8:cb:44:84:59:01:1a:e6:4a:a7:3f:1d:45:7a:73:
c3:79:c1:e9:72:c7:3b:48:15:96:8c:b1:49:9d:e6:
c9:e2:21:ce:f2:6b:4c:d2:bb:9f:b3:40:bd:30:51:
50:87:15:00:78:32:0e:3d:00:df:cf:e3:37:fc:30:
b2:9b:c8:54:ad:ba:64:0b:db:56:3d:5d:b4:32:b4:
90:d6:e7:d4:29:f7:56:bb:ec:ac:23:d4:1d:8c:82:
d1:3a:32:ff:fb:d6:5f:53:51:f1:e0:96:3e:b4:fe:
87:db:dc:07:3b:0b:77:bf:d6:32:3b:09:5a:59:4b:
4f:e9:f9:9b:83:d7:2a:43:e9:29:9d:10:a9:09:81:
c4:db:43:06:48:38:d4:2d:de:2b:ef:5e:59:50:32:
77:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:3E:C6:67:27:3F:E5:45:E2:6E:FC:8E:7C:77:26:71:99:29:00:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/9e2e267d-e461-34e3-95c1-8dfb6824798a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.crl
X509v3 Authority Key Identifier:
keyid:07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer
sbgp-ipAddrBlock: critical
IPv4:
172.82.212.0/24
172.82.215.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:b2:b0:66:32:d1:29:b3:41:52:31:98:e6:c7:84:4e:f0:e7:
a7:8c:c7:c6:75:f7:5b:0b:aa:86:ad:c7:78:94:44:b1:d1:a1:
ff:ed:68:19:34:46:cd:ad:18:2a:da:7f:e3:ed:e4:7a:67:13:
03:b6:0f:ca:07:4f:4c:9a:9d:ab:1f:91:ad:c6:35:5a:8a:5c:
b3:20:80:47:c1:28:1b:b0:8c:ca:bf:64:c8:2f:f0:50:2e:4c:
93:4d:e5:ff:dc:1a:a5:c7:94:37:42:82:f1:7d:dc:ee:88:69:
67:38:29:3b:ef:e6:3c:cd:78:12:9f:b6:d7:ba:82:57:ce:ca:
a2:95:79:8b:ca:21:15:2f:ff:bb:18:33:43:32:56:13:1d:de:
c7:6c:96:f3:e7:0e:ed:ce:bd:18:7b:28:c5:ee:f5:53:6a:c8:
47:83:f2:35:f6:71:41:9f:10:2e:38:23:b9:1d:fb:6f:4e:ad:
28:61:98:4f:e4:6c:35:ee:22:34:ae:a9:69:a1:5e:71:59:ed:
7a:a1:91:0e:67:71:a1:0d:0f:e7:97:24:94:52:ed:93:49:9b:
4e:28:bb:80:bd:4a:16:f1:e6:9e:d6:f3:21:9c:6f:a6:cc:91:
35:2c:e2:cb:d4:a7:a9:a2:36:67:d6:1b:65:f1:26:0e:af:9c:
9b:f2:03:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:38:34 2025 by rpki-client