Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/456c2cd9-454a-3d06-9031-8440b4842af7.roa
File: 456c2cd9-454a-3d06-9031-8440b4842af7.roa (raw, json)
Hash identifier: J7fytFk5La7hxS8gKtxvbdKWJBX0fyzRULzmWuSvG0o=
Subject key identifier: F1:53:0B:C0:8F:A1:87:FF:E0:58:6F:02:2C:E1:2B:13:3D:5B:17:92
Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial: 010D0C9F432858481C9A6FA1CBDDC02615FA4B00
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/456c2cd9-454a-3d06-9031-8440b4842af7.roa
Signing time: Fri 06 Dec 2024 02:00:39 +0000
ROA not before: Fri 06 Dec 2024 02:00:39 +0000
ROA not after: Thu 06 Mar 2025 02:00:39 +0000
asID: 53508
IP address blocks: 206.255.188.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1c:9a:6f:a1:cb:dd:c0:26:15:fa:4b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Validity
Not Before: Dec 6 02:00:39 2024 GMT
Not After : Mar 6 02:00:39 2025 GMT
Subject: CN=c56f22e5-53b4-46d8-8599-e3ed550f4175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:aa:2e:24:c1:b4:73:22:d4:7b:72:47:14:0e:
2f:4d:a4:0d:be:43:3a:35:cb:a5:52:d0:b8:11:1f:
58:29:37:6c:bc:b4:a0:15:ff:a7:7b:ca:eb:79:81:
8f:73:36:17:8c:af:29:2a:4e:ae:24:00:7b:4d:2b:
7a:02:5e:9a:c7:46:c6:fe:dd:2b:d9:26:c0:b6:79:
de:83:bf:2c:36:2f:cd:f8:47:d5:f9:84:95:19:a5:
2c:8d:df:e7:7e:83:98:9d:90:21:df:9f:24:9f:31:
19:07:fd:0e:b7:02:48:1b:10:32:60:de:73:12:3e:
51:01:cf:f5:38:de:0a:69:a9:d3:f7:83:7e:a5:a2:
fa:22:d5:a8:25:37:d3:6a:ae:16:dc:09:3b:ba:dc:
08:02:c3:e1:e1:17:3b:4a:79:74:86:b0:76:6e:6e:
4a:56:e9:86:ae:2c:ee:f7:e6:b2:fc:3e:19:c3:2c:
dc:42:d9:38:31:34:5f:f6:88:0e:49:9e:27:70:8f:
57:40:34:11:50:b7:b1:d8:a8:b5:1a:6c:b2:51:c3:
c8:a0:3f:09:26:a7:52:11:03:46:14:66:9b:a5:f8:
17:60:92:5d:1d:97:f6:fd:d6:bf:7f:44:89:f7:f5:
db:a9:5b:08:09:0f:bd:89:b0:d1:f3:df:0b:19:6a:
35:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:53:0B:C0:8F:A1:87:FF:E0:58:6F:02:2C:E1:2B:13:3D:5B:17:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/456c2cd9-454a-3d06-9031-8440b4842af7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
X509v3 Authority Key Identifier:
keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
sbgp-ipAddrBlock: critical
IPv4:
206.255.188.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:a4:33:76:c0:af:b9:fb:fa:13:34:e5:05:c4:7e:29:3e:2a:
1d:18:6c:90:d7:c8:26:3e:2e:a9:96:87:96:05:b8:2e:a3:ce:
b0:af:16:b2:33:e8:7f:28:5a:5d:97:49:14:e0:2a:2e:40:91:
8e:7e:03:93:92:5f:19:b6:23:35:61:c8:07:9f:82:1d:f1:db:
c0:11:a8:56:25:28:73:1e:4d:45:21:52:28:21:4d:ca:86:78:
42:b9:f4:86:d7:65:bb:0b:e7:fc:42:d8:ac:77:f4:27:e2:a9:
ad:52:c7:26:c7:7f:0e:af:d4:2a:cb:67:6e:b4:7c:10:b1:bf:
89:58:e5:d2:73:30:80:81:58:94:e5:2e:3b:75:7a:2d:d4:19:
db:01:ee:51:be:64:f5:fc:69:cd:02:38:16:25:90:1b:e6:64:
39:dd:81:12:2b:ac:dc:6f:25:11:60:f2:3c:d7:f5:b1:2a:0a:
01:47:4e:fc:2f:ec:65:24:1e:91:99:c2:d9:5a:56:e9:36:c6:
42:20:77:37:cf:17:c7:40:0b:6f:25:21:bc:eb:7e:cd:7c:3f:
28:3e:5e:cf:93:77:a2:d8:4f:f3:c4:1d:13:c3:1c:f2:a6:97:
e5:3a:0b:2c:81:f8:1a:4d:dd:75:e5:81:5b:52:64:c5:45:98:
7c:5e:1b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:02:55 2025 by rpki-client