Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba1b0f8d-fc54-4a41-b18f-c2b9f3a621c3/65ef8342-b723-3039-bf3a-76454925c193.roa
File: 65ef8342-b723-3039-bf3a-76454925c193.roa (raw, json)
Hash identifier: OghIkJltDUHO8QmCXYWavkGvkibcniD4tgnICSjbyjA=
Subject key identifier: 53:23:CD:5F:94:97:63:6B:49:53:A4:88:10:69:8C:41:58:F5:68:D4
Certificate issuer: /CN=ba1b0f8d-fc54-4a41-b18f-c2b9f3a621c3
Certificate serial: 010D0C9F432858477BF6678AB8BE502BD250EF40
Authority key identifier: C6:72:8D:C2:72:CA:A1:C7:79:B7:1F:DB:F4:40:95:29:B0:C3:87:46
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba1b0f8d-fc54-4a41-b18f-c2b9f3a621c3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba1b0f8d-fc54-4a41-b18f-c2b9f3a621c3/65ef8342-b723-3039-bf3a-76454925c193.roa
Signing time: Wed 09 Oct 2024 13:00:42 +0000
ROA not before: Wed 09 Oct 2024 13:00:42 +0000
ROA not after: Tue 07 Jan 2025 14:00:42 +0000
asID: 54641
IP address blocks: 23.154.248.0/24 maxlen: 24
2602:2e8::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:7b:f6:67:8a:b8:be:50:2b:d2:50:ef:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba1b0f8d-fc54-4a41-b18f-c2b9f3a621c3
Validity
Not Before: Oct 9 13:00:42 2024 GMT
Not After : Jan 7 14:00:42 2025 GMT
Subject: CN=43bd6a53-304c-469c-9cb7-bc758a71e22a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:b6:1a:9b:42:8a:54:c7:b9:d3:cf:8b:e8:13:
4c:2f:bf:30:c5:d3:63:33:71:da:93:5a:d5:bd:fd:
0e:b0:02:b5:68:74:f2:17:58:41:64:19:17:55:dc:
a5:23:d9:27:f2:6d:1b:0c:83:98:b1:8a:ea:cf:04:
ba:b1:3a:55:b8:69:47:f6:fd:52:63:32:8a:f4:66:
5a:ff:74:e1:6f:ea:7d:06:9c:44:65:e5:2d:cc:70:
f4:82:0e:3b:1f:13:14:80:b9:60:16:a4:63:f5:23:
c0:71:2a:00:97:ed:4c:f7:df:4c:7d:2c:1b:6a:8e:
40:df:01:ec:cf:0d:2d:60:f8:d6:90:3f:57:92:3e:
99:ce:d1:94:54:48:c5:53:10:d8:e8:d7:39:75:a7:
5a:c5:fc:55:ee:dd:2e:00:bd:e6:58:04:a2:9f:d3:
be:31:d8:6c:7d:d9:d4:bc:f5:93:ef:19:2e:20:97:
4a:2f:41:c9:11:4d:68:86:80:5b:95:5a:05:6d:d3:
21:f8:bb:76:45:25:99:1e:a8:13:35:bd:13:53:af:
0c:b5:fc:5e:4b:42:78:78:9c:74:2b:5a:b6:b8:ef:
d5:f1:22:63:77:7e:e7:22:d0:f3:05:e3:87:50:79:
1c:35:bb:cc:61:6d:47:6d:6b:8b:f0:e2:6f:3e:c6:
65:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:23:CD:5F:94:97:63:6B:49:53:A4:88:10:69:8C:41:58:F5:68:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba1b0f8d-fc54-4a41-b18f-c2b9f3a621c3/65ef8342-b723-3039-bf3a-76454925c193.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba1b0f8d-fc54-4a41-b18f-c2b9f3a621c3/ba1b0f8d-fc54-4a41-b18f-c2b9f3a621c3.crl
X509v3 Authority Key Identifier:
keyid:C6:72:8D:C2:72:CA:A1:C7:79:B7:1F:DB:F4:40:95:29:B0:C3:87:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba1b0f8d-fc54-4a41-b18f-c2b9f3a621c3.cer
sbgp-ipAddrBlock: critical
IPv4:
23.154.248.0/24
IPv6:
2602:2e8::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:6f:9e:c2:9c:24:25:d0:b4:98:78:52:d0:a6:35:44:52:8c:
90:fb:eb:48:85:de:b6:cf:86:6d:6c:9a:6a:15:c9:e8:30:9a:
c1:36:3d:6a:8a:1b:0d:b5:90:4c:12:37:e2:c9:06:ce:38:a5:
6f:c8:ff:87:48:5c:14:ce:e8:7d:e2:d3:8f:cd:42:70:c8:88:
81:54:ea:ff:52:be:17:64:05:66:79:f3:05:46:82:a5:b6:e1:
d0:56:1f:78:14:5a:08:ef:d0:f0:47:9c:2f:c1:d4:2c:bf:1b:
c9:3e:8c:12:08:30:a9:b4:c8:c4:8e:01:eb:bc:25:a3:2f:a0:
7d:31:7a:c0:a1:96:d9:7f:2d:48:99:33:02:aa:de:2e:a2:99:
3f:48:fd:12:26:dd:9d:60:f1:cb:6a:7a:8d:7e:b5:f7:7c:f2:
be:89:fd:4d:50:7b:79:e9:09:0e:c0:54:7b:b7:60:f5:96:99:
3b:85:0c:19:90:e4:45:bc:08:95:d5:3e:9e:a8:31:4d:d1:22:
9e:e4:e1:14:2d:ef:31:51:df:dc:19:d1:20:93:0e:93:9a:14:
84:82:08:13:20:1b:fa:0e:86:34:f2:41:fb:ea:91:b3:b7:41:
e0:4e:76:1f:18:16:81:a0:55:d4:6f:1e:95:ca:c3:da:ec:94:
df:50:8e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 12 16:12:37 2024 by rpki-client on console-fra.rpki-client.org