Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bad79acc-a971-4c08-8e88-3594dae2715a/9e56f5a3-e24b-359e-be4b-ae75c0ce7cbd.roa
File: 9e56f5a3-e24b-359e-be4b-ae75c0ce7cbd.roa (raw, json)
Hash identifier: YcQgS0yBTEWfG5w0nOtdFB7NuE0E9xjsOxZ9IeioEg8=
Subject key identifier: D7:EF:54:05:89:72:AD:B5:EC:20:C8:0A:A1:DE:B1:63:BF:7F:32:C1
Certificate issuer: /CN=bad79acc-a971-4c08-8e88-3594dae2715a
Certificate serial: 010D0C9F432858489A3B4C1CDC7327D565D7B8C0
Authority key identifier: 3D:58:09:D6:0C:EB:72:3D:A4:60:C6:A7:3B:FB:E6:F6:81:08:D5:D7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bad79acc-a971-4c08-8e88-3594dae2715a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bad79acc-a971-4c08-8e88-3594dae2715a/9e56f5a3-e24b-359e-be4b-ae75c0ce7cbd.roa
Signing time: Mon 20 Jan 2025 02:00:40 +0000
ROA not before: Mon 20 Jan 2025 02:00:40 +0000
ROA not after: Sun 20 Apr 2025 01:00:40 +0000
asID: 8075
IP address blocks: 141.193.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9a:3b:4c:1c:dc:73:27:d5:65:d7:b8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bad79acc-a971-4c08-8e88-3594dae2715a
Validity
Not Before: Jan 20 02:00:40 2025 GMT
Not After : Apr 20 01:00:40 2025 GMT
Subject: CN=95d7a576-61fe-4250-b908-f056bd5d972d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:0c:05:0f:a6:66:73:04:4b:03:87:35:29:72:
69:55:07:e5:f2:ba:81:1f:22:78:4b:18:c4:21:5b:
8d:dd:5d:37:75:43:54:7a:80:78:c0:ce:08:1f:95:
34:87:fb:33:f6:be:e4:e5:24:50:31:bf:69:77:c4:
a6:dd:bc:fe:3e:81:52:9c:57:2b:0f:a4:15:e8:22:
20:8b:c0:f4:8b:76:92:84:4a:b6:ff:6c:d2:75:dd:
3e:9c:1a:e3:56:a3:56:ca:bb:b9:d8:02:84:63:04:
ab:9c:0a:c0:6c:36:03:9b:99:30:21:42:28:71:c2:
cf:97:f3:ea:91:89:4b:6b:a5:d1:82:10:2c:9f:b2:
8b:ca:6a:82:70:7a:64:c2:28:16:dd:1f:51:91:7b:
d2:85:53:a4:5a:07:51:91:cd:6d:15:5f:12:f6:b6:
33:7c:8b:8a:19:f9:b7:6a:95:20:c9:55:9b:bb:ee:
22:f0:6b:c8:e2:f7:e9:ee:1a:d9:a4:82:9b:15:c2:
34:59:3d:a4:81:7c:eb:6e:8b:bb:23:97:8f:b1:00:
1e:31:3c:04:a3:ac:c0:99:63:b3:a8:a4:37:df:c8:
62:f4:0b:b2:8e:55:27:16:d0:d0:75:36:81:a3:80:
d8:b4:31:10:0e:29:57:4d:27:62:12:95:c7:3d:08:
bd:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:EF:54:05:89:72:AD:B5:EC:20:C8:0A:A1:DE:B1:63:BF:7F:32:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bad79acc-a971-4c08-8e88-3594dae2715a/9e56f5a3-e24b-359e-be4b-ae75c0ce7cbd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bad79acc-a971-4c08-8e88-3594dae2715a/bad79acc-a971-4c08-8e88-3594dae2715a.crl
X509v3 Authority Key Identifier:
keyid:3D:58:09:D6:0C:EB:72:3D:A4:60:C6:A7:3B:FB:E6:F6:81:08:D5:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bad79acc-a971-4c08-8e88-3594dae2715a.cer
sbgp-ipAddrBlock: critical
IPv4:
141.193.248.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:53:96:69:eb:d7:29:99:1c:a8:03:dc:67:25:68:46:eb:61:
66:30:46:44:b8:26:b6:a4:16:b7:84:78:ea:c6:e3:80:09:f9:
da:5b:0a:10:9d:34:c7:d7:c7:e0:a0:6a:18:7c:ed:e3:fa:54:
6a:83:2c:80:32:87:09:cb:68:85:61:d7:27:75:e8:74:0f:8a:
98:ee:8e:c5:b0:1f:63:3e:a5:ae:85:19:7a:8f:f2:8f:ea:d9:
74:67:22:e3:d7:8c:43:7e:97:c8:94:9e:87:ac:65:c9:0a:d2:
26:00:ab:0e:f3:5b:88:5d:bb:19:e6:ec:57:d7:82:bf:00:d2:
61:ef:e1:c9:30:f7:ca:0d:6a:ee:0a:ed:4a:6d:8d:fe:52:ee:
67:ff:3f:a1:a6:0d:8e:94:1a:d7:6b:70:ee:7d:fc:8d:82:69:
91:53:4d:05:23:c5:55:5d:7e:f0:85:93:d4:f0:a4:06:5f:bc:
03:cd:89:f3:64:4c:aa:46:fa:dc:43:84:80:e0:54:9d:95:7e:
af:08:fd:53:0e:2f:9d:91:31:b7:4f:d2:4a:b2:19:be:f2:4f:
e4:cc:f3:e1:35:44:f4:2b:5f:cd:6e:61:bf:14:ce:f2:28:e9:
0f:20:7f:87:54:d2:b1:57:49:27:7e:80:9b:16:9f:4e:c6:b3:
1f:70:32:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:22:21 2025 by rpki-client