Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/3160331e-7569-3786-8250-26b377505c71.roa
File: 3160331e-7569-3786-8250-26b377505c71.roa (raw, json)
Hash identifier: Sb6UCwxFppc9sByIsy9H09cAb5lgEtZ4K6HIhlDdi8o=
Subject key identifier: F1:E8:89:CE:05:DA:83:3F:DD:C5:E8:DB:65:0A:B0:B0:C7:A6:96:5F
Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial: 010D0C9F432858481C9A73CE468BB4E188A06900
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/3160331e-7569-3786-8250-26b377505c71.roa
Signing time: Fri 06 Dec 2024 02:00:39 +0000
ROA not before: Fri 06 Dec 2024 02:00:39 +0000
ROA not after: Thu 06 Mar 2025 02:00:39 +0000
asID: 53508
IP address blocks: 206.255.136.0/21 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1c:9a:73:ce:46:8b:b4:e1:88:a0:69:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Validity
Not Before: Dec 6 02:00:39 2024 GMT
Not After : Mar 6 02:00:39 2025 GMT
Subject: CN=f9adeb12-5f34-4165-84f1-479f74f44f3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:80:d9:f9:09:2b:ae:e1:06:a4:68:d6:fb:96:
70:f7:b6:38:f5:21:97:74:9d:dd:ea:85:90:1c:c8:
09:3d:47:84:b4:65:14:5e:59:17:95:59:a3:5f:ac:
31:6d:20:52:6f:e4:34:f7:bc:cb:99:d5:7c:32:61:
b7:cf:d5:22:94:73:6e:8b:20:fa:54:6b:7d:83:a8:
bd:51:dc:f5:2c:cd:73:05:2d:5f:56:00:ef:83:c3:
29:7e:e8:9e:4f:40:94:7a:88:37:31:7c:a1:71:c5:
23:5f:9f:be:7b:0a:04:f5:40:b5:5b:51:dd:3a:f1:
5f:1c:d5:4a:b4:2f:61:d6:c9:f8:40:b2:6d:71:27:
ec:7a:59:bd:17:a6:c4:8b:f6:42:b0:4c:d1:f3:2a:
02:eb:15:ab:08:6d:b2:36:b9:58:ea:b9:ed:97:81:
7d:4d:84:76:eb:fa:35:a2:f2:4b:b9:cc:92:7b:85:
1b:b2:2b:56:15:cc:ca:32:36:02:eb:df:54:83:4c:
e4:bb:f3:4d:84:75:de:3e:de:9a:8b:bb:ea:68:49:
58:1a:ad:b4:af:40:26:00:4f:7a:ed:b4:d9:85:bd:
73:22:fa:66:c6:4d:89:96:b7:d2:b4:f8:d6:08:1c:
2f:7e:f0:38:06:5a:ed:45:be:8d:35:53:5d:6c:72:
ce:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:E8:89:CE:05:DA:83:3F:DD:C5:E8:DB:65:0A:B0:B0:C7:A6:96:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/3160331e-7569-3786-8250-26b377505c71.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
X509v3 Authority Key Identifier:
keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
sbgp-ipAddrBlock: critical
IPv4:
206.255.136.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:a7:44:e7:73:13:27:e0:ce:1c:e0:d3:ed:8a:0e:67:ab:70:
2c:31:d8:a6:32:e4:6d:5c:3b:5c:28:7f:1f:03:cd:2f:d5:be:
91:80:77:b2:a6:c3:88:ab:ec:a3:a0:a6:a9:2c:f6:4a:3d:3d:
31:fa:23:24:f5:ed:af:27:47:7d:78:ab:92:0d:48:bb:a6:d5:
93:e1:d7:14:3e:76:c5:40:ad:bc:6a:9c:63:3f:5d:bc:69:88:
3b:e9:c2:76:64:12:3d:03:a1:b0:1d:76:fa:07:fb:3a:6e:e9:
ef:49:d3:1f:f8:6b:ba:1b:b0:21:be:76:77:68:98:45:94:97:
c2:73:71:6f:cf:25:91:1c:2b:20:b7:95:ea:4a:ca:3e:5c:fc:
01:92:e3:0a:91:45:fc:5b:1c:3f:cf:16:14:18:5c:d1:36:82:
27:c9:d7:c7:96:bd:91:07:82:9a:84:3d:20:4f:c4:5c:d6:29:
0f:73:0e:60:04:97:e6:2f:0b:b8:d7:8e:99:a9:8a:1e:4e:07:
7d:7a:7d:84:33:98:33:95:47:67:a9:3e:1d:d3:49:c4:b4:c1:
65:53:33:c0:cf:59:f2:73:47:51:28:2e:3e:cd:53:e4:b0:c1:
f7:ed:7e:1e:88:20:d2:bf:3a:22:69:d2:96:ea:32:06:f7:a2:
a2:45:89:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:14:59 2025 by rpki-client