Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/bdc3244e-4ea8-3a24-8894-2a79f0924702.roa
File: bdc3244e-4ea8-3a24-8894-2a79f0924702.roa (raw, json)
Hash identifier: GhY6TuezitMNGk+5057S91eKbDnkfSpBCdQXQONELvQ=
Subject key identifier: 9E:9C:6E:44:B3:E3:60:C9:B6:99:10:6F:5F:5C:5D:64:DB:47:61:8B
Certificate issuer: /CN=d44d6f8c-85e9-4a47-97c9-dbc11c12210c
Certificate serial: 010D0C9F43285848222FE720BC7838AAF9522CC0
Authority key identifier: D2:B9:24:B1:BD:21:D1:D9:FF:F2:C7:5E:A3:7A:8C:48:9D:90:B9:16
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/bdc3244e-4ea8-3a24-8894-2a79f0924702.roa
Signing time: Sun 08 Dec 2024 02:00:39 +0000
ROA not before: Sun 08 Dec 2024 02:00:39 +0000
ROA not after: Sat 08 Mar 2025 02:00:39 +0000
asID: 32181
IP address blocks: 69.65.0.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:22:2f:e7:20:bc:78:38:aa:f9:52:2c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d44d6f8c-85e9-4a47-97c9-dbc11c12210c
Validity
Not Before: Dec 8 02:00:39 2024 GMT
Not After : Mar 8 02:00:39 2025 GMT
Subject: CN=1cbc80ff-25ad-451b-8bf3-bbcde393f532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:37:71:a6:a2:6b:14:14:87:e6:3b:64:23:29:
4d:0f:70:bd:ef:65:61:d8:52:a8:6e:c9:82:6d:c0:
a7:fb:6b:4d:89:b1:29:12:e7:42:73:7e:f5:18:40:
5d:8b:9c:65:26:79:ab:04:52:cf:15:75:05:ca:5d:
34:9a:90:9c:84:e9:f4:b6:6e:78:ec:d5:69:2e:23:
4f:21:26:04:58:f8:d0:4f:ce:47:8c:40:3e:00:92:
34:cb:58:0b:5a:36:62:2d:19:77:ca:dd:69:c0:b7:
83:2b:9c:08:30:d0:5f:42:99:36:29:02:3e:b6:e5:
30:e4:8b:73:71:10:1f:b8:4c:57:24:f0:ef:2e:44:
84:99:52:a2:c8:ce:b0:4b:4c:48:32:60:67:b0:ed:
c7:44:f5:bb:a7:02:85:0d:94:15:55:9d:21:a6:17:
76:64:99:66:a0:65:9e:56:ab:ad:4b:6b:40:33:50:
a6:2b:a5:89:36:0c:05:38:a5:aa:36:a8:5a:19:42:
a0:cf:a3:18:ce:7e:24:9c:f9:cd:f1:73:df:1c:22:
ec:e5:3d:de:bb:5a:a8:71:5c:e2:e7:e1:9e:74:44:
91:51:e1:3b:b2:a1:77:55:af:05:df:4b:aa:d3:b9:
95:d6:c8:96:0c:7d:d9:ad:5c:bd:15:88:8d:32:04:
c7:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:9C:6E:44:B3:E3:60:C9:B6:99:10:6F:5F:5C:5D:64:DB:47:61:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/bdc3244e-4ea8-3a24-8894-2a79f0924702.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.crl
X509v3 Authority Key Identifier:
keyid:D2:B9:24:B1:BD:21:D1:D9:FF:F2:C7:5E:A3:7A:8C:48:9D:90:B9:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer
sbgp-ipAddrBlock: critical
IPv4:
69.65.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:9c:87:51:d9:a8:ef:31:af:b3:b7:39:36:3a:58:74:f1:3b:
2f:7b:67:e6:c9:24:22:c6:58:44:be:f5:d3:7a:6b:dc:3d:40:
40:89:8e:5b:1f:67:2a:52:04:11:14:8a:b9:15:50:13:9f:61:
1e:63:a3:44:45:ec:45:ed:27:18:57:5e:4e:14:a3:cc:42:65:
10:64:0c:2a:d0:53:5e:ab:f1:87:e7:cb:0e:2a:2c:d0:98:b3:
74:5e:ef:b4:1a:ae:e2:14:e5:c1:20:ea:c3:63:66:10:4d:4c:
99:6c:96:76:4d:80:16:c6:8f:1f:19:db:15:2c:fd:61:2c:eb:
8b:34:7a:01:64:b0:84:da:5a:63:54:16:cd:ed:95:31:3e:ca:
07:75:b6:46:bb:42:a1:49:23:5a:ea:78:79:0d:b1:f5:45:d7:
80:1a:43:9a:cf:11:39:f1:85:10:d0:e8:16:e1:f5:f1:23:55:
d2:86:fa:ea:92:15:f0:30:4d:a5:8a:1f:a1:47:2a:2b:b4:64:
26:1f:98:88:b1:68:93:3a:75:5c:3d:21:e1:96:4f:6b:3b:c2:
91:cf:58:93:0f:85:87:ba:35:4a:20:bb:f2:5b:42:46:98:38:
5d:8f:99:ca:ef:00:18:c6:a9:5a:e4:b2:41:40:95:6b:e0:83:
ae:bb:63:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:05:57 2025 by rpki-client