Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/f16f516e-8c3f-3ace-9ab3-9b2b80788004.roa
File: f16f516e-8c3f-3ace-9ab3-9b2b80788004.roa (raw, json)
Hash identifier: 8jrZaNY+Ow+MLAXdyOGb7FKyAW6zWyOxZVHOz26gcAY=
Subject key identifier: 9E:EF:4A:CF:60:3D:C9:46:B7:A3:0D:E6:7A:59:22:27:E8:CA:43:56
Certificate issuer: /CN=86bcda68-15fd-4c7d-9887-d9d67f2ca969
Certificate serial: 010D0C9F432858480BDA71942EFC75F1A408A028
Authority key identifier: DD:A3:C4:F9:8B:14:A0:E9:BE:AA:4F:47:A9:DD:16:AE:3A:F7:FE:31
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/f16f516e-8c3f-3ace-9ab3-9b2b80788004.roa
Signing time: Sat 30 Nov 2024 02:00:39 +0000
ROA not before: Sat 30 Nov 2024 02:00:39 +0000
ROA not after: Fri 28 Feb 2025 02:00:39 +0000
asID: 14618
IP address blocks: 142.202.36.0/24 maxlen: 24
142.202.37.0/24 maxlen: 24
142.202.38.0/24 maxlen: 24
142.202.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0b:da:71:94:2e:fc:75:f1:a4:08:a0:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86bcda68-15fd-4c7d-9887-d9d67f2ca969
Validity
Not Before: Nov 30 02:00:39 2024 GMT
Not After : Feb 28 02:00:39 2025 GMT
Subject: CN=d58a6291-c5ba-468d-97df-21fe16173158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:85:54:72:8a:71:a6:9b:5f:00:3d:7b:06:1b:
a6:58:1b:72:ed:08:83:5c:cd:47:15:85:ee:f0:f9:
7d:a8:98:f3:59:c1:f7:09:2d:ac:f9:fc:34:6d:aa:
0a:2a:ed:23:13:3e:2b:3a:fb:06:2f:28:05:d6:e4:
5f:a7:0e:8d:da:f5:5e:e3:15:56:ba:1b:cd:ae:3c:
4e:5e:da:bd:aa:b4:fc:b1:b9:7d:43:8e:12:9e:b3:
7d:83:1e:00:d1:7a:e9:c2:4f:aa:09:f6:b8:5a:7f:
72:f8:b9:31:c1:85:74:59:ae:f3:7a:2b:f2:ef:73:
42:ef:ae:e0:60:ab:a2:9a:14:1c:e7:ac:4b:f9:d2:
2c:c9:ff:bb:a4:5c:2e:5a:c5:15:f5:bd:cc:dc:8b:
af:51:c7:f5:5d:02:1e:6c:74:26:fa:0d:7e:2d:ca:
ba:f0:61:64:39:14:2b:7a:f0:49:4c:a1:7a:aa:eb:
e5:43:60:ca:18:88:b5:0d:e1:a9:24:92:5e:33:c6:
c9:fb:ec:dd:d9:56:15:e8:c0:a3:41:55:2d:07:8c:
f0:c5:5b:f5:31:2b:0d:70:7e:d9:1f:12:fd:ca:2f:
0f:d8:e4:c9:61:dc:c7:af:c0:ac:05:3e:88:3d:10:
a5:bf:85:9a:19:b9:e4:21:3a:db:a0:b8:95:2a:d0:
e0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:EF:4A:CF:60:3D:C9:46:B7:A3:0D:E6:7A:59:22:27:E8:CA:43:56
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/f16f516e-8c3f-3ace-9ab3-9b2b80788004.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/86bcda68-15fd-4c7d-9887-d9d67f2ca969.crl
X509v3 Authority Key Identifier:
keyid:DD:A3:C4:F9:8B:14:A0:E9:BE:AA:4F:47:A9:DD:16:AE:3A:F7:FE:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969.cer
sbgp-ipAddrBlock: critical
IPv4:
142.202.36.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:0e:93:ae:bd:fe:d9:c1:87:22:2b:9b:8b:a8:5f:f7:b9:d7:
2f:d7:ef:d9:38:e5:75:f2:8f:fb:28:cb:30:b2:35:33:a0:f8:
6d:b7:a8:1a:e9:e2:53:b3:53:8e:4a:8c:b1:91:7a:c0:dc:c1:
f2:f8:19:cb:29:dd:88:01:37:33:67:f6:45:31:f0:50:17:56:
34:83:8c:f9:14:34:8e:4f:87:85:c1:51:2a:70:84:1f:52:bd:
fd:e1:e3:8b:4c:5d:06:24:37:7c:55:2a:47:4d:9a:61:17:c6:
e8:09:28:68:d6:0d:9f:df:a0:7e:d8:d6:d6:59:9b:68:78:0c:
e8:cb:78:c5:34:89:51:66:0f:1a:5a:e8:fc:69:3c:0f:75:c0:
38:55:72:62:e9:2e:53:22:9a:b9:c5:e6:e9:9f:7d:6f:3b:e8:
5f:4f:19:1f:f6:56:cc:3f:94:89:99:04:48:19:93:ad:cd:ab:
f7:e2:83:54:d0:8b:06:4b:ca:3a:93:35:3b:d5:c9:86:1a:00:
57:5a:fe:b9:05:95:83:59:f2:6b:2f:43:19:dd:3a:c2:a8:1c:
1f:76:ba:8b:f6:14:ed:64:a2:43:ac:2c:16:df:11:40:74:3c:
4a:a0:e5:2d:30:44:81:0a:19:db:cc:78:f2:48:d5:ca:f7:92:
c1:9e:6c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:45:07 2025 by rpki-client