Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/a800aba6-6a2f-3481-a67f-727d82c58667.roa
File: a800aba6-6a2f-3481-a67f-727d82c58667.roa (raw, json)
Hash identifier: ZIGonSNLSf//BkUtDehZozF/TbGVKM16iXifY2xwCoc=
Subject key identifier: 28:33:69:43:CE:4F:85:B5:B9:9A:F6:56:1D:9C:98:75:60:BF:46:08
Certificate issuer: /CN=da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4
Certificate serial: 010D0C9F4328584813F3F5DA5A6966D5D11F8D00
Authority key identifier: B1:AB:4F:F6:34:69:7B:5B:ED:E2:5D:45:30:00:14:37:65:25:14:8A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/a800aba6-6a2f-3481-a67f-727d82c58667.roa
Signing time: Mon 02 Dec 2024 23:38:48 +0000
ROA not before: Mon 02 Dec 2024 23:38:48 +0000
ROA not after: Sun 02 Mar 2025 23:38:48 +0000
asID: 401395
IP address blocks: 192.157.36.0/23 maxlen: 24
2602:f7db::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:13:f3:f5:da:5a:69:66:d5:d1:1f:8d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4
Validity
Not Before: Dec 2 23:38:48 2024 GMT
Not After : Mar 2 23:38:48 2025 GMT
Subject: CN=5820ea4b-ad16-4c2b-90e6-94103def064f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0d:f0:da:a1:ba:a9:2b:7b:e6:eb:0b:de:99:
21:cd:9c:74:c8:1b:7a:f6:34:5d:2e:f8:f5:b9:f5:
43:0e:3f:95:1e:e1:98:85:eb:2a:e8:19:f0:db:e8:
75:41:3a:c5:5b:1b:24:35:c1:6f:18:da:90:59:93:
f8:bd:64:fa:19:31:9e:b4:67:df:08:c7:f1:7e:f5:
c6:71:30:3e:c0:d2:55:a0:69:67:17:34:df:e9:2b:
b6:f8:15:6f:c1:1a:79:78:63:f1:3b:44:bf:33:9c:
64:b1:67:91:76:52:1f:db:d7:f0:67:38:f9:56:d0:
d8:f9:f5:77:5c:1e:1e:53:c5:72:c8:1c:be:03:f7:
48:24:24:3a:f5:8d:41:e2:c7:0c:16:78:6c:40:63:
04:5d:e4:19:27:e0:fa:ec:2b:87:ff:57:67:ab:57:
ba:25:5e:82:cb:a4:d2:7a:ba:90:58:3e:ed:a8:12:
d0:47:de:56:8f:cb:01:69:0f:fe:be:e8:7a:cb:1f:
a2:ed:d3:35:3c:8a:c4:e9:ff:3e:9d:78:8b:e8:7c:
c0:17:57:2e:5d:da:5a:de:99:17:c9:3b:93:3f:b8:
e4:17:1e:2b:3c:ae:00:0f:db:9a:0d:5f:bf:89:f5:
1d:73:dc:bd:05:4a:94:21:e3:f7:1c:b5:8b:69:f0:
46:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:33:69:43:CE:4F:85:B5:B9:9A:F6:56:1D:9C:98:75:60:BF:46:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/a800aba6-6a2f-3481-a67f-727d82c58667.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.crl
X509v3 Authority Key Identifier:
keyid:B1:AB:4F:F6:34:69:7B:5B:ED:E2:5D:45:30:00:14:37:65:25:14:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.cer
sbgp-ipAddrBlock: critical
IPv4:
192.157.36.0/23
IPv6:
2602:f7db::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:cb:8c:5b:50:f0:61:4d:ea:8a:08:a0:c8:90:7e:a1:cb:41:
71:40:89:f7:73:03:d3:21:02:e8:c1:ef:f0:90:78:1d:00:18:
4c:8c:fb:aa:7c:2b:c9:e5:51:bd:18:1d:93:d9:63:94:e6:c8:
3f:d8:74:a4:45:88:00:46:0b:f5:3f:6d:22:87:b1:ed:33:3c:
35:0b:b8:7a:91:16:94:73:29:8a:ca:e1:0c:a1:7c:92:63:04:
d2:32:86:8d:ed:f0:c6:f0:e8:60:8a:9d:b2:bf:6a:16:bc:59:
cd:0a:75:66:2d:31:36:a8:f2:9c:9b:d5:13:11:e2:42:e1:78:
67:f6:84:fd:3d:12:3b:92:91:d3:a9:e4:ec:72:7a:48:ff:b4:
1f:63:57:59:04:7a:07:ed:1b:5e:53:30:f6:7d:f5:79:0c:54:
17:65:a1:5c:56:5f:5b:53:95:08:a7:88:49:4a:76:88:0c:19:
15:80:37:5f:80:43:07:d8:8c:79:b3:87:b2:69:a1:26:a9:e8:
8f:85:b1:a6:a3:a4:9b:d9:9c:af:d9:30:09:af:a5:c4:e4:22:
2e:0e:24:80:6b:47:43:48:50:76:dd:cf:da:b1:38:0f:50:13:
65:63:36:b9:d2:cf:45:82:38:5f:6c:44:3c:bc:2e:f0:fd:b2:
04:c7:04:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:59:14 2025 by rpki-client