Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/3f7ade2c-2b0c-397f-8ad1-a6d09b774e0e.roa
File: 3f7ade2c-2b0c-397f-8ad1-a6d09b774e0e.roa (raw, json)
Hash identifier: j1ovfDJUpOOJt0rwbNZysWL7CQI7raKk0FT7mWDqPGg=
Subject key identifier: D6:6F:3F:EE:64:06:04:A8:7B:FF:41:60:9E:97:F8:EB:F5:BF:6E:B3
Certificate issuer: /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Certificate serial: 010D0C9F43285848828090626E44105A4EEE2300
Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/3f7ade2c-2b0c-397f-8ad1-a6d09b774e0e.roa
Signing time: Sat 11 Jan 2025 14:00:52 +0000
ROA not before: Sat 11 Jan 2025 14:00:52 +0000
ROA not after: Fri 11 Apr 2025 13:00:52 +0000
asID: 12083
IP address blocks: 24.214.0.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:82:80:90:62:6e:44:10:5a:4e:ee:23:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Validity
Not Before: Jan 11 14:00:52 2025 GMT
Not After : Apr 11 13:00:52 2025 GMT
Subject: CN=ba46eb8c-40d2-47a1-b953-0c4be7782b6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:bf:a3:63:a2:61:c9:af:19:8f:1b:97:bd:6f:
fb:99:13:c3:82:b6:39:c9:10:47:50:a6:09:13:90:
9a:cf:44:96:1f:33:33:97:f6:5a:e2:56:7b:80:68:
29:d5:99:e4:2d:c4:dc:cf:fe:e2:57:5c:e2:35:a6:
14:81:d9:2b:07:e3:4e:bb:b3:84:03:40:8e:39:40:
14:30:d2:04:66:2e:15:12:da:77:7d:b2:95:63:92:
67:10:37:d1:cf:e2:e5:f0:f3:cd:4b:c5:1a:38:73:
69:7a:02:82:dd:2f:88:d7:c1:ba:e2:12:39:79:84:
6a:a0:b7:4f:b1:17:54:31:3b:c7:3a:2b:ad:62:e0:
a8:38:dd:e3:cb:5c:23:a0:51:84:9b:4e:d4:71:f7:
34:82:60:92:ac:94:09:8e:dd:e0:84:59:40:b2:34:
b7:9d:13:ed:be:8c:3b:9f:41:4b:7a:c6:64:4b:6a:
c2:2c:9d:36:ad:7b:29:12:18:cc:ef:ac:de:37:ee:
fe:29:78:e1:f9:dc:47:89:76:1c:a0:6b:9a:18:18:
41:2a:93:f4:ae:18:6e:c2:69:dd:85:5f:4d:cf:58:
46:75:dc:77:57:88:b5:bd:1c:47:f8:b9:f7:84:69:
46:7f:41:5a:86:6a:b2:11:53:ed:c6:9d:4b:3b:a4:
45:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:6F:3F:EE:64:06:04:A8:7B:FF:41:60:9E:97:F8:EB:F5:BF:6E:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/3f7ade2c-2b0c-397f-8ad1-a6d09b774e0e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl
X509v3 Authority Key Identifier:
keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
sbgp-ipAddrBlock: critical
IPv4:
24.214.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:62:26:44:45:3b:54:74:9f:cf:bc:6f:84:36:55:b7:8a:f1:
b2:27:fa:e1:5f:a5:35:3f:2c:d1:b7:0d:95:01:aa:d4:66:7b:
0d:53:70:9a:1e:df:12:e5:16:4e:fa:dc:99:45:29:06:94:79:
86:28:3c:8c:c3:b1:88:fd:64:81:b1:01:69:f9:09:46:b9:45:
58:df:24:b6:f8:55:85:d3:f0:89:c7:84:14:44:f5:93:3f:9c:
da:cd:5b:86:ff:01:9d:57:3c:ae:a4:6d:ae:d3:56:86:42:53:
9a:e2:50:23:0b:8c:2e:e5:72:5d:04:e3:84:7f:da:0f:e0:74:
1c:c2:69:ce:f5:d2:67:bf:62:c6:ab:d1:43:93:40:18:30:91:
cd:98:ee:6e:66:dd:62:84:a6:35:fc:c7:fb:a3:38:87:c6:44:
ba:53:0e:04:f2:a9:21:6c:b0:0f:90:b6:c8:9e:3f:4b:1c:e5:
e5:7a:80:39:74:21:2c:55:75:ec:a7:1a:2b:fc:7e:d6:d2:93:
99:05:d7:0e:41:af:63:25:4d:70:a1:90:4e:25:5f:2f:b1:1d:
6d:72:40:13:66:31:28:9b:a4:b9:32:c9:89:ec:2d:10:d8:b9:
ba:71:70:6e:e3:e8:7d:58:f3:ae:80:6d:c8:97:f0:58:5a:a3:
cd:c8:17:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:51:08 2025 by rpki-client