Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2bc6b7a-b8f5-4109-b7af-8975e2444d75/bfae38a7-ec79-38f1-8257-8b1b3c10ac5b.roa
File: bfae38a7-ec79-38f1-8257-8b1b3c10ac5b.roa (raw, json)
Hash identifier: KVQV7rpLtTxaROlpWQBuxnSRQCsGkzJgj5KuocFHm+8=
Subject key identifier: 01:A2:39:7B:B5:FC:9C:8E:96:D3:58:9F:43:97:C8:E6:5F:81:D1:18
Certificate issuer: /CN=f2bc6b7a-b8f5-4109-b7af-8975e2444d75
Certificate serial: 010D0C9F432858488DAB4FAF29A79192F7CB3500
Authority key identifier: 58:74:A0:D7:3F:5C:F6:7C:EA:E0:36:90:47:16:07:B8:01:5B:F8:A5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2bc6b7a-b8f5-4109-b7af-8975e2444d75.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2bc6b7a-b8f5-4109-b7af-8975e2444d75/bfae38a7-ec79-38f1-8257-8b1b3c10ac5b.roa
Signing time: Wed 15 Jan 2025 14:00:51 +0000
ROA not before: Wed 15 Jan 2025 14:00:51 +0000
ROA not after: Tue 15 Apr 2025 13:00:51 +0000
asID: 15296
IP address blocks: 204.209.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8d:ab:4f:af:29:a7:91:92:f7:cb:35:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2bc6b7a-b8f5-4109-b7af-8975e2444d75
Validity
Not Before: Jan 15 14:00:51 2025 GMT
Not After : Apr 15 13:00:51 2025 GMT
Subject: CN=b0d81476-88f0-4cbd-8a15-0f25152b7726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:18:f0:83:32:86:5b:b9:e1:fa:bb:60:48:85:
a7:64:e3:54:d9:47:84:8d:01:20:a7:a3:49:83:37:
fb:2a:d9:8b:69:a9:b9:ed:0c:c5:73:65:24:90:77:
58:07:64:b9:0e:da:a2:b7:e2:c4:91:c9:36:14:cd:
92:e6:e2:25:90:85:7b:b8:6f:b0:92:56:52:ae:a8:
57:db:9d:63:cb:23:65:4c:66:0c:65:67:e4:ec:1f:
88:b4:e2:05:79:f6:28:51:a9:ee:6e:2b:d9:84:51:
b4:f2:52:5d:15:a1:4e:e8:4d:92:2b:32:e9:0b:64:
08:c0:16:df:78:26:20:9b:85:d1:c9:c5:1f:24:51:
94:5d:66:54:12:0b:00:b8:8b:c6:cd:44:b7:e7:dc:
30:a6:da:43:dc:61:45:c0:a4:85:65:d4:29:a3:a3:
24:f7:71:8c:5c:a5:8b:1a:88:96:40:37:de:fe:01:
37:a1:77:1d:cb:ea:50:af:d8:22:a0:a2:bc:d8:c5:
36:e0:f2:d3:15:b1:86:ea:cb:e8:08:d9:7e:e7:ba:
75:db:5a:56:f4:9e:a2:69:b7:65:e5:fb:5d:5c:6f:
1e:5d:56:d7:f2:8d:cb:81:0d:ed:1b:ea:70:d8:35:
c9:53:39:13:f7:27:a4:cb:c6:29:87:61:bc:c5:36:
56:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:A2:39:7B:B5:FC:9C:8E:96:D3:58:9F:43:97:C8:E6:5F:81:D1:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2bc6b7a-b8f5-4109-b7af-8975e2444d75/bfae38a7-ec79-38f1-8257-8b1b3c10ac5b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2bc6b7a-b8f5-4109-b7af-8975e2444d75/f2bc6b7a-b8f5-4109-b7af-8975e2444d75.crl
X509v3 Authority Key Identifier:
keyid:58:74:A0:D7:3F:5C:F6:7C:EA:E0:36:90:47:16:07:B8:01:5B:F8:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2bc6b7a-b8f5-4109-b7af-8975e2444d75.cer
sbgp-ipAddrBlock: critical
IPv4:
204.209.58.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:a7:49:dd:0e:1d:d7:bd:e3:27:93:79:c9:a9:8c:0a:7c:37:
e2:9b:05:c0:ff:e8:99:fd:41:3d:2d:9f:a7:5b:3c:ca:4b:3f:
10:50:11:51:1c:07:3d:11:b1:cf:3c:38:a4:ce:99:f6:0b:0b:
46:19:c6:bf:d0:6d:9b:ff:18:68:d9:1d:6c:a8:e7:15:1d:ac:
38:42:79:6a:25:d7:61:5f:63:ab:c6:87:4b:d8:d7:ea:3d:52:
7d:1c:22:2f:51:2a:ab:00:3a:8e:0c:9a:1c:bb:ac:96:fa:0e:
c6:e1:aa:da:62:58:1f:15:88:1a:14:c5:3e:7d:f8:bd:ec:84:
f0:1c:41:b7:99:9a:b2:02:26:ef:82:56:96:3d:46:47:e1:de:
27:16:2f:57:89:0d:32:46:5c:3d:85:18:df:89:35:f7:c8:de:
ae:1d:d4:d0:3f:c4:fd:6c:a0:98:46:88:26:8c:8a:d0:34:28:
19:90:09:7d:d5:42:ee:30:07:4a:2e:b5:d2:c1:e2:1b:29:c9:
37:1e:3d:de:ed:da:20:56:1e:2f:aa:04:29:9b:5d:44:41:24:
e4:7e:78:67:83:56:d1:27:6c:bd:96:f3:52:66:0c:25:07:da:
9a:52:69:a9:bc:52:af:18:4e:1e:ed:eb:b7:fe:a4:28:6c:97:
f4:04:e2:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:57:50 2025 by rpki-client