Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/4905d8ec-3c48-3233-ab75-82dbb1436b28.roa
File: 4905d8ec-3c48-3233-ab75-82dbb1436b28.roa (raw, json)
Hash identifier: KYh3PWc8Ufjz2oDs/XEvgcBm2unDm+/BMfl9nqvC27o=
Subject key identifier: 03:4E:21:6D:C3:05:A6:6F:FB:AA:FF:40:D3:55:AE:39:16:56:AC:37
Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial: 010D0C9F432858481C9A7257A50D83F6FBF1B580
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/4905d8ec-3c48-3233-ab75-82dbb1436b28.roa
Signing time: Fri 06 Dec 2024 02:00:39 +0000
ROA not before: Fri 06 Dec 2024 02:00:39 +0000
ROA not after: Thu 06 Mar 2025 02:00:39 +0000
asID: 53508
IP address blocks: 206.255.168.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1c:9a:72:57:a5:0d:83:f6:fb:f1:b5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Validity
Not Before: Dec 6 02:00:39 2024 GMT
Not After : Mar 6 02:00:39 2025 GMT
Subject: CN=1734f5ee-ae09-4ab5-b158-5c8ccb70fda3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:7a:cb:d1:db:ad:55:c2:27:ce:fc:96:dd:e6:
be:be:5e:b9:0b:7b:0e:21:fc:6d:88:1f:de:61:90:
0b:3d:21:39:1d:74:7f:3b:1f:ca:ca:eb:fb:cb:2c:
de:16:ec:06:99:ba:13:13:f2:91:b5:26:3a:91:cc:
93:e1:c2:40:fa:70:ac:23:42:70:d6:ba:83:0b:67:
c5:17:51:8d:11:97:82:8b:be:b0:b9:fa:48:3b:1e:
72:ba:9c:7c:62:1b:b1:5e:7e:0e:61:ea:0e:89:2f:
23:d8:bd:82:e6:1e:54:9f:78:1a:76:a2:5c:99:1c:
6d:4a:bf:11:76:30:e6:a5:aa:9e:a8:90:e7:ec:6c:
3f:6e:37:e8:73:09:0f:0a:28:d3:1b:7c:aa:4a:b7:
69:08:2b:f1:ee:52:61:e9:bc:3e:b7:ef:e5:1c:f7:
b0:cd:12:a7:4c:30:3f:e4:32:ca:91:58:13:86:2c:
db:0f:9c:14:a1:58:7e:a3:04:53:29:b2:fc:26:46:
bf:99:e3:cb:bd:d8:f8:d1:4a:a2:15:00:9b:5e:11:
13:de:7b:ff:b2:0c:ce:2d:99:11:d8:63:1b:eb:7f:
27:60:dd:b7:fe:83:20:7f:8c:d7:b3:db:3f:7e:dd:
aa:e6:a8:75:19:26:2c:da:39:c6:94:72:0d:8d:3b:
04:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:4E:21:6D:C3:05:A6:6F:FB:AA:FF:40:D3:55:AE:39:16:56:AC:37
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/4905d8ec-3c48-3233-ab75-82dbb1436b28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
X509v3 Authority Key Identifier:
keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
sbgp-ipAddrBlock: critical
IPv4:
206.255.168.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:7f:14:1a:01:89:0d:98:bb:36:11:c0:5a:09:69:e0:6e:50:
b9:66:f0:be:b7:f2:19:07:3f:bf:dc:76:41:63:e5:da:b3:86:
50:53:6a:da:06:8d:a4:34:ac:42:1f:04:8a:d4:8c:55:6f:4b:
46:a7:1f:2e:72:4e:94:d5:63:d8:57:09:39:2e:5e:1e:b8:54:
2c:f3:ba:19:41:af:cb:71:49:36:53:90:db:9d:ba:c8:54:d5:
87:e2:34:46:42:10:ec:45:ff:9a:b2:c4:f1:78:69:57:a8:b9:
7e:5d:26:5f:b9:e7:35:4b:96:02:20:34:b6:2f:71:90:2c:45:
a8:2e:a1:ea:ed:da:93:c4:32:a9:9a:59:eb:b0:28:8c:9b:b1:
93:c9:a9:81:43:a4:72:8e:68:06:f8:8b:f0:6d:ce:f2:9a:46:
f6:d6:6e:1e:6f:d5:50:bd:57:66:df:4d:df:43:f8:05:30:cc:
92:d1:fe:de:92:36:db:40:90:ad:b2:1f:6d:6a:9e:78:ac:96:
e5:c5:e2:11:e1:61:2c:8d:b9:0a:42:37:7d:d1:3a:51:e4:29:
7c:f3:b3:b4:1e:7c:35:1b:0f:15:0a:8b:41:de:9f:13:1b:4d:
ff:de:9f:c3:ee:77:e4:91:af:77:e1:90:eb:05:69:78:8a:aa:
63:29:d7:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:47:28 2025 by rpki-client