Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71/8d7b7a60-ed08-3ef1-afee-8da2a6a09e15.roa
File: 8d7b7a60-ed08-3ef1-afee-8da2a6a09e15.roa (raw, json)
Hash identifier: kxycFK+cQkJlIDcXtaASBaud8iDbiOgdbEFG0BCjidA=
Subject key identifier: 3A:5E:DC:E9:D3:9A:8B:5C:CB:23:8E:D5:6E:6F:E5:83:40:22:EF:27
Certificate issuer: /CN=bfe5a38f-5ff4-4b97-a459-e25cfc9caa71
Certificate serial: 010D0C9F432858487325B2C686C0FF7F7A950280
Authority key identifier: BC:36:F0:C3:90:91:7B:B8:CB:F7:FE:00:75:72:5B:AF:FB:59:8B:01
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71/8d7b7a60-ed08-3ef1-afee-8da2a6a09e15.roa
Signing time: Mon 06 Jan 2025 02:00:40 +0000
ROA not before: Mon 06 Jan 2025 02:00:40 +0000
ROA not after: Sun 06 Apr 2025 01:00:40 +0000
asID: 27
IP address blocks: 206.196.160.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:73:25:b2:c6:86:c0:ff:7f:7a:95:02:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfe5a38f-5ff4-4b97-a459-e25cfc9caa71
Validity
Not Before: Jan 6 02:00:40 2025 GMT
Not After : Apr 6 01:00:40 2025 GMT
Subject: CN=ba556fa0-df95-4649-9ccd-85b0a861f492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f6:6a:85:85:2a:c9:b2:05:36:43:ba:3b:d2:
d2:dd:ef:7b:6b:8e:69:85:0d:cf:6a:47:d6:a1:0f:
74:3d:c4:7a:bb:37:3b:c8:85:b1:df:65:f5:f9:62:
2f:c1:f9:b1:c0:c1:5d:0a:b5:6d:c4:48:90:bb:7b:
c6:a9:4d:1f:d9:13:a2:ef:ef:66:e1:47:e8:7b:5f:
1c:7e:f6:d4:74:6a:c2:8c:c6:8e:61:11:71:ff:12:
a1:52:88:2f:a8:6e:d4:b8:4e:5a:40:0c:2a:b0:79:
07:10:9e:91:45:7d:b0:88:4d:42:80:c4:af:53:f2:
5d:30:2e:a8:7b:6b:7f:3d:ff:ee:aa:69:c1:b9:1b:
1a:5a:cf:67:14:ff:01:1d:1d:5d:df:37:b9:c9:fb:
c9:17:d6:01:3d:e8:8c:f8:d7:da:2f:74:12:73:7a:
57:6f:cc:30:c7:f6:e8:65:d8:2e:d8:1b:d7:a1:d8:
ed:0a:87:23:a2:18:51:3e:e2:59:e1:f0:aa:9c:5b:
2a:68:02:fb:ec:99:41:61:9f:33:47:4b:7f:eb:ab:
2b:14:02:21:0d:1b:0a:de:ff:a4:67:0d:c3:16:fe:
c8:b7:f1:df:38:44:0c:5b:38:1a:34:47:48:c7:1c:
c7:35:ea:53:2f:a4:3d:c5:a6:1f:7c:0f:11:c9:bd:
12:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:5E:DC:E9:D3:9A:8B:5C:CB:23:8E:D5:6E:6F:E5:83:40:22:EF:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71/8d7b7a60-ed08-3ef1-afee-8da2a6a09e15.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71.crl
X509v3 Authority Key Identifier:
keyid:BC:36:F0:C3:90:91:7B:B8:CB:F7:FE:00:75:72:5B:AF:FB:59:8B:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71.cer
sbgp-ipAddrBlock: critical
IPv4:
206.196.160.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:6f:e3:b0:a0:42:4a:f5:07:93:d3:a2:66:0c:58:69:6c:9c:
e6:51:ea:c2:24:14:10:c8:b1:03:5c:ac:38:0d:11:9e:1b:6e:
d4:30:6c:c2:81:43:96:08:94:ef:0c:03:d9:8f:6f:58:57:44:
cc:1c:13:63:19:47:9b:af:b2:a4:9d:3c:89:55:5b:55:c1:57:
62:c2:b5:60:e8:94:db:ff:b1:08:ca:90:8b:58:dc:b2:48:2c:
c9:a4:8d:98:81:d2:81:e1:1e:71:be:7b:8c:88:fc:fb:8d:72:
05:b5:7a:49:63:e8:b3:37:af:19:7b:17:fc:71:9c:8a:66:89:
8d:cf:f5:a1:c9:4d:1e:e0:03:15:2e:3f:6a:3e:fe:88:ab:3b:
e7:07:b4:6d:11:40:d8:af:6c:a1:53:93:f1:94:7a:86:16:3c:
d8:e1:a6:19:ea:cf:5d:a2:6e:02:8a:b7:37:ca:cc:62:df:81:
53:dc:62:ab:7c:66:72:f3:1c:e4:bc:fd:03:06:1e:20:01:8e:
34:da:13:38:8c:d3:74:2c:4d:a1:11:f7:2c:d1:ae:dd:aa:b5:
0e:9d:c3:ca:5a:b0:d8:6d:b4:55:97:fe:f1:0f:99:a8:36:53:
fd:15:b5:09:d2:ba:0d:fd:29:a8:8e:24:e2:fc:3f:a4:75:4b:
f1:21:4d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:48:00 2025 by rpki-client