Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bf6d3f93-c0b9-383a-b50b-8df33b8a1878.roa
File: bf6d3f93-c0b9-383a-b50b-8df33b8a1878.roa (raw, json)
Hash identifier: i+hb2d2/lhEVIRf+yJNBFgl3YVj50oiihKTuZmRoH98=
Subject key identifier: 76:9A:9F:D2:6B:35:0D:CE:66:D3:38:C0:76:F3:55:4F:72:AB:27:F0
Certificate issuer: /CN=bad5af20-8385-44d4-815f-bb83497d4a0e
Certificate serial: 010D0C9F432858488AE09EF9A5B37D39DFB89A80
Authority key identifier: 11:AA:70:F3:04:50:A3:AC:82:39:73:14:B6:AD:D6:35:D1:DD:39:94
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bf6d3f93-c0b9-383a-b50b-8df33b8a1878.roa
Signing time: Tue 14 Jan 2025 14:00:51 +0000
ROA not before: Tue 14 Jan 2025 14:00:51 +0000
ROA not after: Mon 14 Apr 2025 13:00:51 +0000
asID: 25779
IP address blocks: 206.168.9.0/24 maxlen: 24
207.174.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8a:e0:9e:f9:a5:b3:7d:39:df:b8:9a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bad5af20-8385-44d4-815f-bb83497d4a0e
Validity
Not Before: Jan 14 14:00:51 2025 GMT
Not After : Apr 14 13:00:51 2025 GMT
Subject: CN=adf076ef-ba4a-4947-8edc-076c048dbb7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2a:0a:96:e1:ce:a3:ab:2a:a5:7d:98:e3:9e:
b1:4c:e8:70:43:45:8a:ba:bf:8a:58:92:3b:6d:41:
9c:d5:75:b1:cc:04:5f:c0:f5:4f:32:b7:10:93:30:
2d:58:f8:4c:a2:37:94:68:af:1e:84:05:d8:db:b2:
af:c4:eb:fb:0d:61:88:f3:4f:4d:bf:a4:ba:6d:c7:
25:c5:22:06:1b:e2:f2:32:a8:0b:d0:5c:78:17:86:
0c:a2:e1:e1:9c:83:11:41:12:9f:d6:78:f2:f3:24:
9f:14:f0:31:cc:3f:1f:6b:87:55:a7:1b:6d:c7:32:
d1:c4:3d:90:5d:2d:81:b2:53:a3:5d:9b:54:7b:53:
63:6e:51:6a:10:94:d7:ff:4d:f4:d1:a1:5e:cd:2c:
69:95:9d:43:6c:1e:39:2d:47:b9:9d:12:fe:8c:b4:
07:41:7f:39:9e:d2:08:70:17:80:5f:0a:d8:a5:ee:
f3:9b:c1:0b:8d:74:aa:9a:b1:a0:ab:aa:8e:3e:5f:
6e:a7:b9:09:71:a0:27:ac:a2:c4:ca:f2:a3:7c:07:
2e:31:d8:d7:bd:0d:c3:f2:c2:7b:fc:20:89:55:54:
cb:e4:1d:58:8f:0d:f8:e4:15:58:5b:26:c2:fb:d0:
3c:9d:53:ee:c7:cb:93:6d:00:b0:ab:fa:94:b7:25:
cb:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:9A:9F:D2:6B:35:0D:CE:66:D3:38:C0:76:F3:55:4F:72:AB:27:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bf6d3f93-c0b9-383a-b50b-8df33b8a1878.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bad5af20-8385-44d4-815f-bb83497d4a0e.crl
X509v3 Authority Key Identifier:
keyid:11:AA:70:F3:04:50:A3:AC:82:39:73:14:B6:AD:D6:35:D1:DD:39:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e.cer
sbgp-ipAddrBlock: critical
IPv4:
206.168.9.0/24
207.174.202.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:2a:39:f6:a1:6a:73:54:34:c0:3d:59:ed:9e:8b:30:0f:7c:
b3:3c:e3:3c:f4:7e:52:ab:e1:f3:09:7c:2e:f8:b9:a8:04:07:
4e:88:7b:61:00:c1:3d:4d:15:42:ae:73:3f:41:20:41:78:90:
dc:c3:7c:f8:86:c8:34:91:23:9a:c1:48:b6:b2:46:b6:82:9d:
a3:96:63:a6:e4:6c:f8:24:7f:d6:5c:62:36:65:c4:67:e8:24:
6b:97:58:4a:86:6b:40:37:07:13:4d:6b:22:92:53:13:75:73:
f2:1a:f7:39:c0:69:ba:f1:7d:17:61:68:47:fe:cd:b8:a9:f5:
57:1f:ba:96:14:a4:cd:9a:a2:bb:1d:1f:8b:50:49:4c:24:ae:
48:d7:6b:68:f3:f3:0a:07:db:ce:92:eb:e4:91:d3:62:bd:37:
76:7f:ab:d9:ac:a4:7a:25:d9:d7:2a:0c:ff:ad:06:33:f9:4d:
83:ec:49:e4:4b:97:d3:60:82:22:3d:5a:b8:42:03:ed:ec:52:
3f:de:d9:f0:d2:a6:8c:59:f6:ef:9e:81:37:3a:35:66:f0:b4:
76:57:d9:33:73:53:43:d5:3f:09:14:ba:51:ef:5f:93:37:b7:
e6:5a:a6:a1:c0:0a:68:fa:28:4d:fa:5e:a0:fc:31:e6:be:54:
7c:08:a9:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 15:37:23 2025 by rpki-client