Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd381626-0b70-4bbc-b2f1-0eac4f0801f6/bca776cf-9d86-36a6-a59d-18187fd4bd84.roa
File: bca776cf-9d86-36a6-a59d-18187fd4bd84.roa (raw, json)
Hash identifier: 8btlt74F0jid9L8NGdUMsEnNOZRAhjMX8wQK6uNKrAg=
Subject key identifier: BF:8E:17:14:6A:49:40:1F:60:FE:21:7A:08:10:78:B8:7F:8A:D0:03
Certificate issuer: /CN=cd381626-0b70-4bbc-b2f1-0eac4f0801f6
Certificate serial: 010D0C9F4328584819CFC94C87D5590C7BEBA264
Authority key identifier: 95:E0:D3:C0:AA:AA:D8:F5:A6:F2:E1:82:C9:59:72:16:F0:62:51:F7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd381626-0b70-4bbc-b2f1-0eac4f0801f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd381626-0b70-4bbc-b2f1-0eac4f0801f6/bca776cf-9d86-36a6-a59d-18187fd4bd84.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 14585
IP address blocks: 208.76.168.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:cf:c9:4c:87:d5:59:0c:7b:eb:a2:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd381626-0b70-4bbc-b2f1-0eac4f0801f6
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=2f06288e-8702-40a1-af75-1ffa81cd868c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d3:e7:bd:53:e2:a1:90:c7:31:86:56:7d:db:
05:53:2c:ac:d2:47:e1:40:bc:31:bf:f2:a7:70:e1:
28:4e:bd:5a:08:c5:81:80:b0:2a:b1:6c:7e:c5:2e:
fa:b4:41:7d:3e:e2:93:b7:67:6e:75:df:96:66:fb:
d5:79:d8:f3:09:6f:76:42:ca:95:79:e7:ff:60:b6:
4f:c6:7e:aa:6c:5b:2c:38:d1:da:73:89:cd:69:81:
f5:cf:b8:0f:89:90:09:a0:23:3e:71:d7:be:7e:db:
4f:fb:75:3e:ad:c8:be:bb:95:94:b3:44:a4:3e:ed:
ca:43:48:5c:3b:3e:8f:a3:b7:22:d0:68:84:92:3e:
fe:a9:4c:b7:d1:7d:56:a2:99:70:d1:c5:a1:f4:ec:
08:87:59:88:86:16:28:ab:5f:4f:54:85:0b:e8:ce:
ff:f7:50:fb:48:f6:16:d0:54:76:0c:9d:68:2b:74:
c9:f2:f3:70:eb:50:78:c2:7f:de:01:2f:92:36:0e:
0f:82:ce:08:10:52:53:b0:bf:d3:61:c9:37:2e:02:
b3:4b:4e:b0:9f:ec:1b:9c:db:fa:85:e5:ab:73:0a:
7c:16:36:f2:90:64:2e:f3:35:15:35:1d:78:70:c6:
ae:66:ca:c5:18:30:bc:29:70:83:8f:9a:76:4a:17:
4f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:8E:17:14:6A:49:40:1F:60:FE:21:7A:08:10:78:B8:7F:8A:D0:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd381626-0b70-4bbc-b2f1-0eac4f0801f6/bca776cf-9d86-36a6-a59d-18187fd4bd84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd381626-0b70-4bbc-b2f1-0eac4f0801f6/cd381626-0b70-4bbc-b2f1-0eac4f0801f6.crl
X509v3 Authority Key Identifier:
keyid:95:E0:D3:C0:AA:AA:D8:F5:A6:F2:E1:82:C9:59:72:16:F0:62:51:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd381626-0b70-4bbc-b2f1-0eac4f0801f6.cer
sbgp-ipAddrBlock: critical
IPv4:
208.76.168.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:66:5b:a6:b8:08:2a:26:c5:28:e3:a5:e8:a0:2d:5b:7e:ca:
62:d8:65:75:9a:39:a9:2b:59:79:21:96:20:90:e8:09:09:26:
59:f0:61:5e:3d:98:a6:d6:27:8c:e0:43:1e:b0:c2:60:a0:74:
21:af:ad:9f:cd:e5:61:98:3d:f5:49:f0:3d:67:70:6e:77:50:
f9:21:68:a0:39:1a:f3:5b:7c:13:9a:bd:d3:4d:6a:5e:75:41:
8b:c8:27:13:19:13:4a:cb:e0:bd:bb:2a:51:19:db:44:46:b5:
94:7b:cd:3a:96:a2:fe:11:5f:c6:7e:b7:dc:26:2c:99:90:67:
a2:4d:e6:15:01:8b:f8:f3:d4:c1:20:c2:ee:9c:76:21:d9:7a:
77:2d:00:62:d3:43:32:1e:56:1d:67:c9:e6:dd:b4:da:69:90:
de:06:d9:32:11:f8:2b:11:cc:f4:15:51:93:68:f4:de:af:af:
6e:e7:bb:2c:6b:4d:65:c4:5b:08:00:4d:9f:a7:91:b3:a6:a3:
97:06:63:89:7e:da:25:95:d5:ff:e0:5b:93:0d:57:fa:d7:1e:
93:3f:3f:38:34:eb:5d:6f:61:e5:86:a5:80:59:56:68:83:ea:
1b:db:d2:51:23:00:57:eb:de:c6:5f:28:fb:18:97:c6:75:12:
88:a4:f8:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:52:14 2025 by rpki-client