Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/d1e734e2-ce89-3dd5-9697-dab100cd0408.roa
File: d1e734e2-ce89-3dd5-9697-dab100cd0408.roa (raw, json)
Hash identifier: rTLqF8U4uzNXJPX3a16K/Cns5/WA25jVYbJ0sxBd2uM=
Subject key identifier: 8F:E5:71:B2:BC:F0:93:F0:5F:FC:74:2B:00:1B:70:1B:BD:26:92:A5
Certificate issuer: /CN=86bcda68-15fd-4c7d-9887-d9d67f2ca969
Certificate serial: 010D0C9F4328584824FA81D29563982ADFC97080
Authority key identifier: DD:A3:C4:F9:8B:14:A0:E9:BE:AA:4F:47:A9:DD:16:AE:3A:F7:FE:31
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/d1e734e2-ce89-3dd5-9697-dab100cd0408.roa
Signing time: Mon 09 Dec 2024 02:00:40 +0000
ROA not before: Mon 09 Dec 2024 02:00:40 +0000
ROA not after: Sun 09 Mar 2025 02:00:40 +0000
asID: 14618
IP address blocks: 199.47.128.0/24 maxlen: 24
199.47.129.0/24 maxlen: 24
199.47.130.0/24 maxlen: 24
199.47.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:24:fa:81:d2:95:63:98:2a:df:c9:70:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86bcda68-15fd-4c7d-9887-d9d67f2ca969
Validity
Not Before: Dec 9 02:00:40 2024 GMT
Not After : Mar 9 02:00:40 2025 GMT
Subject: CN=04e1f82a-25f4-414c-80d8-4cb3c96c480f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2b:00:aa:b1:04:db:3c:49:ee:4f:88:58:b0:
9c:fd:a9:c9:0d:99:84:14:c0:0b:d5:ed:6d:51:bb:
b2:31:9d:75:a4:4d:ad:79:17:f2:eb:aa:5b:11:9b:
e2:46:49:4a:19:8e:05:72:0a:50:46:42:92:dd:29:
6a:3d:cb:40:a9:56:7e:11:40:67:89:ec:aa:b2:55:
aa:94:f7:ff:b3:63:e5:b5:c2:90:8a:b8:14:3b:82:
44:13:16:23:c0:31:e4:24:1a:1a:78:3f:83:cc:40:
13:d1:3e:a7:9e:84:92:18:21:94:7f:59:fd:12:9b:
09:23:9f:10:22:25:02:6b:e9:b3:c3:02:34:06:46:
c6:23:81:a0:95:28:80:f8:93:1f:92:2d:70:51:11:
08:23:51:63:e7:42:ec:34:30:7c:a8:ff:e7:1c:0d:
58:4a:c4:1a:e3:eb:d2:e5:5d:1b:f9:41:c7:b4:4b:
7d:ba:30:11:91:68:77:28:18:c1:0e:be:de:ce:0f:
b1:cc:69:f7:8e:2d:2e:57:35:38:e9:9d:c7:02:65:
ca:80:ca:57:32:1f:2c:07:cf:d0:78:6a:3c:d9:a0:
10:4a:81:ac:52:9f:b8:e1:e3:44:fb:18:c9:c9:46:
c5:9d:d0:f6:8f:42:6c:60:81:88:65:cc:fc:29:0b:
be:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:E5:71:B2:BC:F0:93:F0:5F:FC:74:2B:00:1B:70:1B:BD:26:92:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/d1e734e2-ce89-3dd5-9697-dab100cd0408.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/86bcda68-15fd-4c7d-9887-d9d67f2ca969.crl
X509v3 Authority Key Identifier:
keyid:DD:A3:C4:F9:8B:14:A0:E9:BE:AA:4F:47:A9:DD:16:AE:3A:F7:FE:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969.cer
sbgp-ipAddrBlock: critical
IPv4:
199.47.128.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:6c:f2:37:97:89:70:cd:06:d8:e2:77:80:09:06:3f:23:5e:
02:94:de:62:05:92:46:70:d4:23:04:64:74:7f:5a:b3:72:8d:
c6:c7:77:db:13:a9:fa:0c:37:9d:da:b7:2a:14:1f:e8:b5:53:
11:ce:e6:c4:a3:f2:79:d0:3a:c1:88:fc:03:3a:80:e0:ef:d9:
95:cd:df:b5:28:15:fa:74:1a:96:e0:77:e6:4d:ba:ba:4a:a3:
49:5d:9c:3c:ee:de:80:16:37:67:8a:8e:07:16:17:0a:9c:0a:
c0:97:66:e9:19:cc:a2:bd:9e:e6:20:cd:c9:e2:dc:85:e5:83:
e2:aa:51:9e:18:f4:6b:b3:d4:4b:d0:65:1f:ae:18:09:97:7a:
dd:db:80:a4:d5:26:48:94:ce:f1:a9:e5:20:fb:4a:27:d5:7e:
f7:ae:29:81:aa:61:58:46:2d:70:3b:f6:a1:d1:db:74:74:60:
d1:01:d8:1d:67:c0:f7:29:12:4b:9f:dc:d1:25:84:b8:ae:f7:
0f:ad:ae:e4:2d:e8:d7:9d:12:eb:2e:51:70:a9:2f:d8:59:8d:
de:37:c1:31:5a:e7:f5:62:05:50:a5:5e:58:b3:72:6f:24:6a:
2b:f7:f2:c2:08:a7:fe:71:84:e9:a7:39:b1:09:6b:64:a7:3b:
3d:93:4f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:06:46 2025 by rpki-client