Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/e68d7bd5-9d30-30b1-a76b-98ef9aeaf8f6.roa
File: e68d7bd5-9d30-30b1-a76b-98ef9aeaf8f6.roa (raw, json)
Hash identifier: 5fYp9muT5X7szafs64IpusXNajweB82Km/fKW4xurqI=
Subject key identifier: 85:B4:84:C4:48:46:39:D8:84:8C:27:8C:59:8D:5F:CD:6F:AE:32:67
Certificate issuer: /CN=bad5af20-8385-44d4-815f-bb83497d4a0e
Certificate serial: 010D0C9F432858488AE09EEB892A135ACEE51440
Authority key identifier: 11:AA:70:F3:04:50:A3:AC:82:39:73:14:B6:AD:D6:35:D1:DD:39:94
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/e68d7bd5-9d30-30b1-a76b-98ef9aeaf8f6.roa
Signing time: Tue 14 Jan 2025 14:00:51 +0000
ROA not before: Tue 14 Jan 2025 14:00:51 +0000
ROA not after: Mon 14 Apr 2025 13:00:51 +0000
asID: 21777
IP address blocks: 206.168.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8a:e0:9e:eb:89:2a:13:5a:ce:e5:14:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bad5af20-8385-44d4-815f-bb83497d4a0e
Validity
Not Before: Jan 14 14:00:51 2025 GMT
Not After : Apr 14 13:00:51 2025 GMT
Subject: CN=d8e455c3-ba72-43eb-aab6-13e72cc7af88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4a:37:2b:71:af:a0:0c:b9:02:81:6b:ee:7d:
8a:e1:d4:5b:81:98:79:29:f8:f7:e9:21:ab:0f:42:
9a:2d:e9:e8:bb:94:c0:a4:15:46:4c:56:d2:5b:c4:
7f:35:7a:8e:5a:57:30:40:cd:a5:7c:3e:f5:d0:0b:
94:af:1b:e9:26:8f:97:34:4f:83:f8:d4:ad:20:57:
01:86:8f:43:9b:c2:f6:60:8e:7b:ce:20:0d:a8:6d:
c0:e6:4c:66:7f:fc:d6:26:74:ca:10:f4:88:97:c5:
90:86:6a:98:bf:1d:03:4f:2b:11:da:cd:a3:d2:0e:
3f:67:92:b5:81:3f:ba:f0:f1:ec:4e:ee:69:4f:9e:
e3:6a:cd:fe:65:13:ed:fe:74:48:85:91:67:09:ec:
08:27:14:a3:99:25:f5:a3:67:ab:d5:e8:f0:09:ff:
1c:70:ef:e7:a8:c3:bd:c9:5c:62:90:e5:ea:ff:0d:
4e:df:0a:e0:5a:12:bf:f9:90:88:7b:07:ca:d4:77:
33:8f:84:7d:d4:44:ee:05:13:6b:21:e5:f2:9e:e1:
98:de:9d:4b:8e:5e:e3:32:c1:08:78:9c:b7:63:0d:
20:e3:67:66:83:64:e8:07:0a:c4:22:03:04:13:60:
43:de:d1:13:ca:56:9b:9d:ef:3d:6b:54:5f:9b:08:
6c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:B4:84:C4:48:46:39:D8:84:8C:27:8C:59:8D:5F:CD:6F:AE:32:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/e68d7bd5-9d30-30b1-a76b-98ef9aeaf8f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bad5af20-8385-44d4-815f-bb83497d4a0e.crl
X509v3 Authority Key Identifier:
keyid:11:AA:70:F3:04:50:A3:AC:82:39:73:14:B6:AD:D6:35:D1:DD:39:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e.cer
sbgp-ipAddrBlock: critical
IPv4:
206.168.97.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:d4:a8:64:a4:11:20:04:9d:96:2b:bf:41:7e:a5:35:9c:7c:
2e:cd:8e:ce:fc:7f:95:f8:1d:37:f3:c5:ce:dc:9a:ac:1e:4d:
31:7e:bf:f8:b5:63:13:ee:69:2a:f1:4c:fa:b9:bd:f4:07:6e:
12:24:b0:da:3e:e7:37:9f:bb:a1:32:37:dd:4d:be:d9:49:26:
af:73:5b:18:d6:65:75:42:58:c3:73:34:0a:cb:d7:34:00:aa:
9c:8d:ce:49:09:50:6d:fa:e3:ab:c0:ee:34:ae:3d:3e:b5:36:
e5:ed:f2:8d:c8:f2:44:50:41:c2:13:e2:41:38:3c:0f:28:48:
b9:43:6f:8d:df:6b:e1:58:fc:b7:89:ac:2d:85:3c:4c:92:c8:
4b:b9:ca:9b:40:e1:76:5b:55:18:dc:3e:3e:3a:c1:6c:39:ae:
38:38:11:9d:36:21:d3:16:be:c5:17:66:d9:8a:7f:a4:17:e9:
6a:7b:31:e5:75:01:e3:26:00:4d:09:a1:b6:50:75:71:03:6e:
ea:51:2b:58:b1:83:61:1f:11:41:75:18:fc:f0:e3:b3:ea:8a:
00:7a:32:0e:df:97:21:8a:5f:05:cb:23:0d:f8:5f:2e:7b:64:
0a:68:6c:46:b2:9d:fa:f3:84:c3:c8:65:bc:8f:3e:ef:26:e2:
d2:26:d2:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 02:34:00 2025 by rpki-client