Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71/41f9aae5-6871-3e7a-9d20-457a9775f125.roa
File: 41f9aae5-6871-3e7a-9d20-457a9775f125.roa (raw, json)
Hash identifier: YSib2Jc2S6cNo5GD/WU7Jvrkz/KeChHVx4yR17/oSlk=
Subject key identifier: 46:57:73:E6:B0:0E:98:1F:50:B0:CC:6E:20:C0:D2:AE:AF:E3:FB:EB
Certificate issuer: /CN=bfe5a38f-5ff4-4b97-a459-e25cfc9caa71
Certificate serial: 010D0C9F432858487325B729BABB3D823DEA1350
Authority key identifier: BC:36:F0:C3:90:91:7B:B8:CB:F7:FE:00:75:72:5B:AF:FB:59:8B:01
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71/41f9aae5-6871-3e7a-9d20-457a9775f125.roa
Signing time: Mon 06 Jan 2025 02:00:40 +0000
ROA not before: Mon 06 Jan 2025 02:00:40 +0000
ROA not after: Sun 06 Apr 2025 01:00:40 +0000
asID: 10886
IP address blocks: 206.196.176.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:73:25:b7:29:ba:bb:3d:82:3d:ea:13:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfe5a38f-5ff4-4b97-a459-e25cfc9caa71
Validity
Not Before: Jan 6 02:00:40 2025 GMT
Not After : Apr 6 01:00:40 2025 GMT
Subject: CN=3724dfc4-9646-48df-8b84-40a7e3731cb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ef:1b:18:1f:52:5d:c6:f8:23:e3:02:ce:7e:
05:c7:c2:d8:c1:66:2c:4d:cd:25:58:07:8c:40:1b:
01:db:10:04:b8:e4:e8:bb:33:29:ba:c5:06:58:ff:
bc:a1:8f:07:6d:35:82:02:d4:5e:35:74:13:70:08:
ff:ea:b6:fb:a2:dd:c7:32:6d:e8:a5:a3:0e:c2:ad:
a1:be:e2:b4:09:63:fa:16:8f:59:1a:93:f5:d0:92:
7c:62:27:87:7c:49:6f:51:bd:24:eb:e2:7c:8a:81:
a6:0c:c3:a0:98:ee:40:80:0d:57:90:8a:61:c4:15:
ff:b7:f8:f5:a8:8a:27:61:e6:2d:cb:29:6f:e2:07:
c9:6e:8e:10:ca:4f:8f:62:78:45:38:73:8d:b8:4f:
53:57:8a:5b:c1:b3:29:e5:9e:96:4a:a1:12:d3:e0:
0b:84:2d:d5:0e:fe:c7:22:41:e9:88:81:55:43:b9:
9a:0a:75:53:8b:a8:3e:c3:54:f0:3d:ca:c5:d9:e0:
76:cc:f2:78:73:3f:64:8a:ff:8f:a1:bb:00:24:ad:
cb:df:ed:93:df:1e:cf:43:ae:d2:67:bc:ed:57:ab:
97:f9:d1:ac:05:b2:e2:6a:0a:2a:91:4f:79:d0:4a:
20:dd:2e:24:aa:c2:a1:0e:bd:a4:9b:4f:36:db:b8:
ad:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:57:73:E6:B0:0E:98:1F:50:B0:CC:6E:20:C0:D2:AE:AF:E3:FB:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71/41f9aae5-6871-3e7a-9d20-457a9775f125.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71.crl
X509v3 Authority Key Identifier:
keyid:BC:36:F0:C3:90:91:7B:B8:CB:F7:FE:00:75:72:5B:AF:FB:59:8B:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71.cer
sbgp-ipAddrBlock: critical
IPv4:
206.196.176.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:70:ca:ec:0b:1e:b6:3c:0c:e4:de:ff:f3:81:be:b4:09:c7:
2b:f1:28:db:d9:d4:ab:5e:34:13:fe:a6:9a:d1:d7:be:cf:9d:
47:01:b9:89:4e:f0:b3:54:7f:41:40:c2:b6:d5:9a:c0:52:59:
55:0a:d7:07:c1:49:4d:3d:63:f0:28:f9:c4:23:a1:8d:37:27:
04:90:bb:bb:ba:dc:3f:6a:a1:24:61:54:0d:51:d7:3e:95:d1:
c2:8b:1b:76:8b:45:07:22:23:3c:4a:29:9a:60:34:f2:68:02:
9a:d7:36:12:e0:c1:86:11:41:c4:ba:89:1a:bd:6e:f6:98:c7:
9b:54:62:0b:44:67:0d:1e:2d:aa:c3:69:57:ac:25:3a:21:b2:
d6:d4:1e:26:aa:bf:c5:dc:bb:dc:75:35:bf:ff:51:5c:44:9d:
ed:c5:47:99:11:00:17:ed:1c:f3:8e:f7:57:7b:ba:18:41:cf:
1b:ef:96:f3:80:e1:be:8d:48:54:f2:e9:80:8f:49:24:07:cd:
70:64:71:72:fb:80:a3:62:da:bf:02:16:ed:89:ab:2b:d2:1c:
78:7b:d4:3b:a5:35:b8:82:db:4e:6d:1d:58:c5:23:26:71:d9:
0f:a9:7b:04:66:2b:fb:78:17:42:15:8a:a6:62:3d:a4:3f:94:
c9:a0:ec:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:03:17 2025 by rpki-client