Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/879a586a-5dbd-3989-ac66-822d1f92f8f6.roa
File: 879a586a-5dbd-3989-ac66-822d1f92f8f6.roa (raw, json)
Hash identifier: R6eeZO2lBWsVxb4eiLbNcEgHyXmp1k0J1QsUJeWxh8Q=
Subject key identifier: C7:A1:9C:90:B6:AD:E1:D9:88:68:40:B2:F4:91:23:37:C5:1B:B8:98
Certificate issuer: /CN=86bcda68-15fd-4c7d-9887-d9d67f2ca969
Certificate serial: 010D0C9F432858480BDA71850C32AA736CD9AF80
Authority key identifier: DD:A3:C4:F9:8B:14:A0:E9:BE:AA:4F:47:A9:DD:16:AE:3A:F7:FE:31
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/879a586a-5dbd-3989-ac66-822d1f92f8f6.roa
Signing time: Sat 30 Nov 2024 02:00:39 +0000
ROA not before: Sat 30 Nov 2024 02:00:39 +0000
ROA not after: Fri 28 Feb 2025 02:00:39 +0000
asID: 16509
IP address blocks: 142.202.36.0/24 maxlen: 24
142.202.37.0/24 maxlen: 24
142.202.38.0/24 maxlen: 24
142.202.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0b:da:71:85:0c:32:aa:73:6c:d9:af:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86bcda68-15fd-4c7d-9887-d9d67f2ca969
Validity
Not Before: Nov 30 02:00:39 2024 GMT
Not After : Feb 28 02:00:39 2025 GMT
Subject: CN=901fab44-19df-4469-bd3e-ae07d6edc146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:c0:6c:49:2a:6b:45:ab:7e:76:4f:e3:57:1b:
95:19:c8:f4:d9:69:b2:07:a0:ba:0b:26:24:f9:22:
96:05:42:d8:29:da:c0:45:50:3b:1f:f4:7d:74:30:
91:2d:66:90:0b:4b:8c:4b:70:ba:47:cf:a5:ef:96:
1a:82:46:b4:71:32:67:77:57:f0:d8:ee:a1:ca:54:
82:e6:78:aa:c3:20:d6:45:3f:78:85:35:2b:67:1a:
e4:76:39:f9:c5:c1:bd:44:26:ca:6b:41:c7:76:0f:
a8:3a:e1:b1:0b:8f:3f:a6:21:6b:07:6f:1c:67:84:
5d:a1:8c:84:78:c0:8f:09:88:f1:2c:f1:4d:09:98:
1a:32:90:7a:12:dc:79:47:6c:30:57:3b:49:d5:52:
e7:70:48:9e:49:e2:80:ea:6a:dd:92:db:c8:9e:d2:
2b:59:c3:bc:32:36:6f:09:a8:d2:ed:4e:4b:c9:77:
ba:78:67:35:9e:7b:0f:32:a0:5c:9c:98:30:d6:4f:
39:42:f7:2b:1a:48:dc:55:88:16:f2:4d:56:41:4e:
1c:e4:94:c7:09:c1:3f:2d:79:b6:a0:84:09:48:87:
54:3e:99:33:d8:81:99:37:ad:69:cb:c7:54:d2:06:
98:4e:86:59:57:29:09:91:1c:01:3e:95:c3:48:8d:
49:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:A1:9C:90:B6:AD:E1:D9:88:68:40:B2:F4:91:23:37:C5:1B:B8:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/879a586a-5dbd-3989-ac66-822d1f92f8f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/86bcda68-15fd-4c7d-9887-d9d67f2ca969.crl
X509v3 Authority Key Identifier:
keyid:DD:A3:C4:F9:8B:14:A0:E9:BE:AA:4F:47:A9:DD:16:AE:3A:F7:FE:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969.cer
sbgp-ipAddrBlock: critical
IPv4:
142.202.36.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:ed:d5:c7:fb:91:0a:7b:60:77:8c:48:4a:66:0a:27:12:fe:
74:2d:bc:0f:05:09:53:8f:6e:db:b5:3b:e8:16:7a:e3:5d:be:
01:8d:59:07:9f:44:32:01:69:cf:65:5d:e4:77:8c:7d:b3:04:
b9:36:1c:c7:b3:c5:8b:bc:73:27:35:d4:70:cd:a7:3c:81:54:
7b:f0:5d:f4:bc:0c:c5:52:55:3c:d1:ad:17:1c:91:d2:f2:7d:
46:bf:08:82:88:1b:87:5c:42:2b:61:92:3d:88:a4:e7:4f:93:
71:1e:08:25:5c:32:0a:8b:d3:af:38:34:1e:e0:07:b3:61:09:
f7:fc:65:3d:7f:df:df:01:f0:a2:6b:a1:78:ad:32:ce:ce:fa:
0e:bb:c5:ad:a1:8a:57:d8:8d:03:d5:48:78:b2:52:34:75:23:
da:5b:e8:bd:1b:65:78:e0:c7:79:3d:bb:18:fa:4c:22:7a:6d:
7a:0e:54:a0:9c:a3:01:1c:19:b0:e1:c2:6e:24:1d:22:85:b1:
46:c9:34:bd:86:c5:55:00:a3:9a:54:85:2c:db:33:f4:54:59:
6a:6c:88:56:28:94:94:ba:25:9c:4a:be:e0:b5:a1:b5:f4:0b:
d2:4e:e2:11:63:c7:ba:57:a4:c4:4f:b5:47:42:60:4b:ee:52:
e9:91:81:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:57:10 2025 by rpki-client