Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/26f87379-b07b-41fb-8976-6fd9e7149fda/bc0f6436-155b-39e3-b8bd-6a94ee986acf.roa
File: bc0f6436-155b-39e3-b8bd-6a94ee986acf.roa (raw, json)
Hash identifier: /TOWFmgwOjKBZQaIsOptV70H9r/N02b0Ww+joDHyqm8=
Subject key identifier: 90:CA:FE:02:D4:C6:0E:37:50:EC:66:71:16:95:5C:9A:50:CA:9E:84
Certificate issuer: /CN=26f87379-b07b-41fb-8976-6fd9e7149fda
Certificate serial: 010D0C9F432858480EA50C17F42176B41D1A8D40
Authority key identifier: B3:E3:8B:C0:B5:ED:73:06:2C:85:6C:E9:D3:69:C8:9E:A9:E3:DB:DF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/26f87379-b07b-41fb-8976-6fd9e7149fda.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/26f87379-b07b-41fb-8976-6fd9e7149fda/bc0f6436-155b-39e3-b8bd-6a94ee986acf.roa
Signing time: Sun 01 Dec 2024 02:00:39 +0000
ROA not before: Sun 01 Dec 2024 02:00:39 +0000
ROA not after: Sat 01 Mar 2025 02:00:39 +0000
asID: 19016
IP address blocks: 161.129.128.0/21 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0e:a5:0c:17:f4:21:76:b4:1d:1a:8d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26f87379-b07b-41fb-8976-6fd9e7149fda
Validity
Not Before: Dec 1 02:00:39 2024 GMT
Not After : Mar 1 02:00:39 2025 GMT
Subject: CN=9b46fd1d-5eb7-40cf-95a1-199ab1338ae3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:27:91:fb:dc:03:7c:c9:a2:37:95:39:ca:8a:
d3:a5:4d:11:d5:eb:fe:78:dc:36:1f:9a:3c:52:d6:
8e:a0:56:32:34:79:d1:56:58:a7:5a:f6:1b:4e:96:
c6:3a:24:71:6f:0d:69:ea:59:21:ba:67:81:e4:80:
ff:bd:e3:91:7a:ab:fa:82:9f:01:eb:58:44:b0:42:
0d:17:7e:4a:ef:a7:4d:aa:07:cd:28:1c:73:cb:e2:
76:17:05:39:c3:3a:9d:a7:0b:43:9a:cc:c3:6a:54:
a1:5b:86:ca:49:a7:1b:20:e5:fc:e7:95:c2:80:00:
01:30:78:f3:ca:f3:9b:c4:3d:d0:66:53:cf:92:be:
6e:c1:87:36:ca:79:2d:32:10:70:43:57:62:71:04:
ff:c1:e3:83:2c:33:aa:ee:d5:ed:50:0f:95:e6:0b:
39:d6:56:bc:9e:78:a4:45:74:08:23:b4:e9:4a:2b:
e7:00:e7:1c:3a:f4:50:27:b5:cd:2b:ec:3c:33:22:
40:44:49:7c:71:89:72:72:2e:47:58:8f:43:88:73:
8c:dd:d8:90:66:3b:2c:3b:78:a0:34:0a:bc:75:08:
37:55:ec:4e:22:be:db:00:73:06:04:f5:1d:e4:8d:
30:fe:59:ba:78:dd:b5:6a:e5:f0:67:d1:aa:90:f0:
f1:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:CA:FE:02:D4:C6:0E:37:50:EC:66:71:16:95:5C:9A:50:CA:9E:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/26f87379-b07b-41fb-8976-6fd9e7149fda/bc0f6436-155b-39e3-b8bd-6a94ee986acf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/26f87379-b07b-41fb-8976-6fd9e7149fda/26f87379-b07b-41fb-8976-6fd9e7149fda.crl
X509v3 Authority Key Identifier:
keyid:B3:E3:8B:C0:B5:ED:73:06:2C:85:6C:E9:D3:69:C8:9E:A9:E3:DB:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/26f87379-b07b-41fb-8976-6fd9e7149fda.cer
sbgp-ipAddrBlock: critical
IPv4:
161.129.128.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bc:e7:be:47:90:7a:f2:2f:fa:70:7b:5a:95:6d:10:db:a7:e0:
16:83:05:8a:26:79:b9:66:6a:75:49:a1:b3:1b:f3:24:ef:87:
f6:75:40:2e:4d:0a:30:b7:6d:3c:fd:80:23:24:23:14:fa:90:
8b:a4:36:b2:49:e4:05:77:94:7a:8d:eb:ec:2f:ea:4a:e0:fd:
04:13:cc:47:20:69:a2:60:b5:c3:eb:37:ad:7c:ba:3d:76:a1:
0e:dc:a6:36:09:4e:cf:a5:95:d8:55:cf:9a:6c:94:19:18:9a:
f7:2e:9c:2b:75:4c:fc:58:4c:9d:54:34:a7:fd:eb:90:6d:4c:
80:fb:d9:54:5c:34:d9:7f:e4:7a:11:72:00:cc:21:be:41:73:
47:79:0b:0c:3b:24:10:42:a4:40:a9:9a:e2:5f:18:7f:b0:9c:
14:94:27:4b:15:36:62:17:ae:d9:f3:5b:21:2e:3c:5a:a9:f9:
b0:01:bb:5a:e3:6a:03:65:3e:c1:4a:ac:71:c9:59:f7:75:ad:
07:41:12:fe:a8:77:3d:41:f6:9f:6e:c6:4f:f9:29:01:27:63:
bc:4e:36:79:0b:ba:54:6f:97:35:62:c5:21:4c:06:3c:b6:19:
55:73:0c:88:e5:b6:47:f3:a1:26:74:42:4a:54:89:a9:c2:b0:
38:a4:aa:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:23:13 2025 by rpki-client