Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d/cb3e573f-eb9d-31f7-a610-d2430a74fe0f.roa
File: cb3e573f-eb9d-31f7-a610-d2430a74fe0f.roa (raw, json)
Hash identifier: tNUfLf6HeaQGGx7PqDTZy06FOyFBU++L215Fdwv7uCs=
Subject key identifier: 30:E6:12:13:10:6E:7E:71:04:42:02:54:C2:1D:64:BA:74:B9:65:ED
Certificate issuer: /CN=bc6146e0-ac7c-49f0-a39f-f40759de0b5d
Certificate serial: 010D0C9F43285848A6CB65FC7804475B39A77D00
Authority key identifier: 6F:35:45:A6:31:FD:EC:B9:3A:FD:94:AD:E8:F5:F2:3E:EF:94:DA:DB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d/cb3e573f-eb9d-31f7-a610-d2430a74fe0f.roa
Signing time: Fri 24 Jan 2025 14:00:52 +0000
ROA not before: Fri 24 Jan 2025 14:00:52 +0000
ROA not after: Thu 24 Apr 2025 13:00:52 +0000
asID: 13952
IP address blocks: 162.249.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a6:cb:65:fc:78:04:47:5b:39:a7:7d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc6146e0-ac7c-49f0-a39f-f40759de0b5d
Validity
Not Before: Jan 24 14:00:52 2025 GMT
Not After : Apr 24 13:00:52 2025 GMT
Subject: CN=7b0ee709-3184-4dcb-bdf9-fe1159deb994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4f:ac:04:b1:61:4b:b9:61:1d:f0:59:91:e1:
63:d3:78:aa:3f:bf:14:2b:84:de:0e:b1:00:b0:5f:
9d:8f:9e:b6:46:cf:3f:5a:c8:81:cf:b7:b3:66:dd:
2e:d0:e8:6e:8e:e4:8c:db:48:4c:ac:39:07:06:b6:
ea:7d:01:24:30:5b:c8:10:00:16:b6:79:5e:08:24:
dd:41:a6:d2:af:6a:5d:ab:4f:5e:cd:1f:6b:ac:e0:
7b:9a:11:b5:3e:b5:65:57:86:6d:a1:a9:fc:a5:79:
dd:9e:95:2c:b8:aa:8d:1e:87:eb:99:77:30:ff:22:
4a:88:88:45:a5:37:f7:28:3c:9b:aa:6c:87:df:9f:
c7:2a:56:35:85:e5:57:f4:9c:8c:08:4a:3f:62:5c:
12:fd:43:26:17:74:7a:87:7d:77:53:de:d9:d0:5d:
a6:d7:c1:82:1e:bb:97:a7:61:ef:c3:ef:91:7e:a7:
3b:c6:34:da:13:28:51:1e:b5:b4:c9:4a:6d:76:7e:
02:de:de:a3:47:21:70:02:a1:f3:13:fe:99:72:e3:
fc:bb:32:65:cc:81:dd:98:c7:32:0d:36:e5:11:c5:
ba:39:a0:34:90:26:e8:79:11:71:3e:52:37:25:d0:
52:00:8e:c6:76:52:ad:67:5a:12:a6:80:c1:78:48:
0a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:E6:12:13:10:6E:7E:71:04:42:02:54:C2:1D:64:BA:74:B9:65:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d/cb3e573f-eb9d-31f7-a610-d2430a74fe0f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d.crl
X509v3 Authority Key Identifier:
keyid:6F:35:45:A6:31:FD:EC:B9:3A:FD:94:AD:E8:F5:F2:3E:EF:94:DA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d.cer
sbgp-ipAddrBlock: critical
IPv4:
162.249.86.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:0d:d4:0f:2a:ce:be:9b:67:25:0d:58:2b:45:ea:fa:82:c2:
11:ec:ec:2b:f1:87:02:31:e8:f9:bd:0e:b7:a3:bf:cc:ec:9c:
09:ba:8a:68:3b:41:10:18:48:d4:a5:b1:be:fc:e1:5a:7b:03:
8e:94:6c:6e:84:9e:5e:30:c5:0d:99:bc:30:11:5d:16:26:b1:
59:e3:34:61:17:f5:5b:f9:97:6f:1f:7c:88:82:2c:5f:76:11:
80:f2:62:08:69:0a:79:74:25:ce:a8:0a:c3:d7:db:9d:da:c9:
36:30:01:6c:a3:78:05:e6:8b:e7:b5:d7:ec:c2:d9:e0:de:f4:
96:fd:da:21:65:aa:57:5d:3b:68:7b:31:1b:44:88:77:48:03:
04:9b:2a:61:9e:c5:70:34:fe:8a:0b:0e:15:a4:f1:37:63:77:
0d:1c:3c:87:93:71:4e:71:1a:4c:35:2a:24:3b:18:14:60:b2:
79:70:4b:da:4d:33:8c:28:a4:46:09:e6:5b:22:ac:74:b3:65:
16:dd:1c:01:b9:37:c1:26:c0:d2:89:8b:d6:0e:30:11:7b:26:
91:e1:90:a4:10:5f:35:f7:bc:79:ec:4f:c9:ee:2d:6b:06:2d:
b6:5a:e9:e7:dd:89:76:a9:a8:f0:7f:e7:81:8e:6c:5f:08:d6:
89:d0:47:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 15:56:15 2025 by rpki-client