Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/ba492d21-6b85-320f-9c84-d6dfc0f7cd3f.roa
File: ba492d21-6b85-320f-9c84-d6dfc0f7cd3f.roa (raw, json)
Hash identifier: 2qNpQRbbOxwWK2l35dZbCmpJhIH1VBxvbPjgQEBQPdA=
Subject key identifier: 08:29:D9:B9:48:DB:C2:50:B1:37:39:3C:71:E7:F1:2C:3F:66:86:89
Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial: 010D0C9F432858486C2B3244CD61CA59F6ECBA80
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/ba492d21-6b85-320f-9c84-d6dfc0f7cd3f.roa
Signing time: Fri 03 Jan 2025 14:00:51 +0000
ROA not before: Fri 03 Jan 2025 14:00:51 +0000
ROA not after: Thu 03 Apr 2025 13:00:51 +0000
asID: 54858
IP address blocks: 24.113.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6c:2b:32:44:cd:61:ca:59:f6:ec:ba:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Validity
Not Before: Jan 3 14:00:51 2025 GMT
Not After : Apr 3 13:00:51 2025 GMT
Subject: CN=ed4fa7cd-11c8-4952-bcb2-5b17fecb1a25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ae:ab:b3:29:14:44:62:2c:9c:45:61:3c:d7:
1f:6d:19:90:61:ed:71:3f:1a:ed:2d:13:7d:30:1b:
85:ae:89:df:e9:52:87:1f:2e:be:cb:ea:63:7a:78:
00:9f:2c:56:44:b5:cd:4e:67:f5:ea:b0:fd:39:f1:
af:b0:ff:91:b9:f2:fb:5d:0d:63:0d:33:12:ae:cf:
ba:8c:7f:c4:c3:9a:a9:8f:18:3a:25:58:d8:79:54:
59:35:2c:1c:c6:0f:eb:33:21:4e:ba:3e:b5:a1:6b:
43:e4:09:61:32:70:6c:ad:42:50:45:f6:f8:79:d3:
28:92:e8:9e:0d:40:36:c4:c2:10:1e:51:79:02:b7:
f2:63:02:99:e5:cd:75:d1:c0:a9:83:3d:c9:d0:09:
e6:e3:93:3b:bb:31:d8:96:73:37:54:ea:5f:74:b4:
f6:35:29:df:af:41:3f:45:5d:a3:e8:fb:91:31:c5:
f1:e3:73:80:c7:c9:52:72:bb:72:23:8f:75:96:71:
f0:52:91:56:e6:73:ef:87:b3:cf:96:98:da:6e:5f:
55:07:7f:ff:3e:3a:2f:8e:1b:4d:1f:6a:42:d8:45:
ee:7a:e4:a2:cb:cf:73:6e:98:c4:f5:ee:72:3b:50:
76:d5:01:37:f1:bd:ac:c3:b6:e1:94:7e:cc:4f:e7:
56:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:29:D9:B9:48:DB:C2:50:B1:37:39:3C:71:E7:F1:2C:3F:66:86:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/ba492d21-6b85-320f-9c84-d6dfc0f7cd3f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
X509v3 Authority Key Identifier:
keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
sbgp-ipAddrBlock: critical
IPv4:
24.113.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:78:ad:1c:67:4b:89:6b:89:a9:7a:a5:a6:fd:fe:20:3a:69:
e9:c2:e9:97:16:8b:3a:ca:12:2b:82:09:2d:2e:84:8a:a2:3f:
8d:23:14:36:c7:d2:4b:04:14:02:28:ed:a0:88:a5:7b:29:fe:
95:d1:b4:ac:1a:01:7d:ef:b4:61:1f:ef:8e:38:47:66:bd:4f:
01:76:3b:f1:a0:3d:48:6b:8a:5d:c9:3b:27:84:05:d6:91:23:
0b:0c:a8:c7:1b:10:a0:45:e5:01:40:3f:64:cb:28:c9:a7:c5:
f0:9a:65:52:f1:99:22:e4:3b:b3:7f:16:2a:07:4d:23:08:50:
a1:c2:39:62:55:14:ef:99:46:6e:bf:ea:11:06:b5:0d:b1:32:
45:33:6c:13:b1:12:72:85:43:a1:55:5a:0f:79:e3:4f:8f:26:
cf:da:e8:30:6f:a1:4e:f2:75:f0:51:12:a3:b7:f9:4c:1e:14:
ff:ed:f3:e6:8f:de:92:b1:4c:23:2d:23:ea:70:22:a6:e2:69:
1a:e0:cd:a6:f5:1b:3c:1e:b5:0c:c0:cd:c0:59:52:5d:35:bf:
27:cf:53:b5:71:02:70:f8:43:91:23:bb:1c:d3:14:2d:ac:b9:
7e:49:ef:b0:6e:38:7e:31:59:19:e5:9b:57:e7:5c:53:15:50:
7c:11:ac:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:13:46 2025 by rpki-client