Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/81af0be6-f23c-30fe-8f01-107b7f0d4738.roa
File: 81af0be6-f23c-30fe-8f01-107b7f0d4738.roa (raw, json)
Hash identifier: XNeY0AOSNTcRcw+/TtBFH+LnzYFp1H0S8uN4kcR/K6E=
Subject key identifier: 3B:89:5C:4F:AA:B7:F2:C0:36:82:24:62:F4:A5:F6:D4:55:0F:14:0A
Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial: 010D0C9F432858481C9A6F63F2D6292EA9E4E130
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/81af0be6-f23c-30fe-8f01-107b7f0d4738.roa
Signing time: Fri 06 Dec 2024 02:00:39 +0000
ROA not before: Fri 06 Dec 2024 02:00:39 +0000
ROA not after: Thu 06 Mar 2025 02:00:39 +0000
asID: 53508
IP address blocks: 206.255.80.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1c:9a:6f:63:f2:d6:29:2e:a9:e4:e1:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Validity
Not Before: Dec 6 02:00:39 2024 GMT
Not After : Mar 6 02:00:39 2025 GMT
Subject: CN=939116b7-bf09-4034-a70f-5fcb04894dde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a6:c5:f8:78:2a:29:0d:d0:f0:3b:5d:0c:ae:
86:d9:7f:7d:b4:aa:38:90:73:a9:0f:cf:98:84:15:
85:92:b9:90:c8:17:08:f3:61:93:07:ac:e3:01:b3:
7e:af:90:70:fb:83:55:ba:1a:d7:12:28:26:3e:c7:
67:7b:c0:c0:a7:73:e5:ff:96:25:d8:03:fb:20:7a:
f5:4c:80:6c:6d:ac:6b:3f:3a:ca:e3:a5:dc:c4:f8:
db:2a:73:02:80:c2:81:50:ac:83:1f:80:3d:06:60:
a5:47:c4:5f:5a:7b:02:1e:b1:91:d1:e1:c7:18:7b:
c2:ae:bd:71:c9:47:9c:90:e1:e8:0a:32:34:df:fc:
4f:e3:93:98:da:67:f1:2a:c2:a1:49:28:7c:c7:8d:
a7:a3:1f:cf:61:8d:e1:9c:b0:60:c8:0a:db:c4:6d:
70:87:98:1e:ae:7d:37:ef:f8:91:44:dd:86:d6:69:
62:b2:bf:0c:0b:94:e2:da:c2:1e:3d:78:00:56:26:
7c:f7:7d:83:db:f8:b3:16:6e:5a:2a:17:cc:bf:1d:
d1:fa:bd:7f:37:4d:a7:7c:48:4b:d3:7f:1e:a2:b8:
91:13:1a:5b:40:1b:68:d6:55:b3:58:69:dc:58:a6:
73:83:4a:94:5f:47:16:23:04:43:8d:36:1d:d0:d2:
5c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:89:5C:4F:AA:B7:F2:C0:36:82:24:62:F4:A5:F6:D4:55:0F:14:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/81af0be6-f23c-30fe-8f01-107b7f0d4738.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
X509v3 Authority Key Identifier:
keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
sbgp-ipAddrBlock: critical
IPv4:
206.255.80.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:a9:a2:b2:d9:4e:ac:e4:f4:fe:29:bd:cf:3e:ba:f7:8a:16:
bb:6a:44:94:40:47:55:25:66:d1:a5:3f:f7:35:96:0a:51:7c:
d5:78:2c:37:38:78:a3:fb:ea:ed:a6:99:19:35:cc:38:b4:48:
b2:46:8b:76:37:24:8e:71:13:12:f2:84:6d:db:84:eb:25:a9:
cb:87:48:8c:b6:05:7c:c4:bb:48:f5:d4:42:3c:7e:a0:95:a9:
fe:48:b4:0e:e1:3e:cf:e7:a4:f1:33:9d:b5:ac:43:38:f2:e6:
76:a3:03:ed:59:1c:05:fd:7d:b1:b6:70:e7:36:77:63:1c:75:
d5:6a:58:19:50:0c:cf:e2:95:eb:72:67:04:b3:83:85:a1:52:
33:da:86:6a:7e:21:88:b0:80:4a:ef:85:7c:f7:72:0e:eb:ac:
3c:84:83:38:60:af:f9:c2:3a:66:16:64:63:94:8b:52:f1:66:
79:8a:e0:84:fa:b4:17:99:ea:4c:6b:63:8f:cb:be:47:70:0c:
a5:32:f1:5d:af:7c:ec:9f:a5:9c:c9:cd:df:c9:49:eb:da:a4:
89:8a:8c:27:e5:03:3b:74:bc:2f:9a:5f:ad:19:f6:c6:cd:9e:
24:80:99:69:84:a1:50:ef:f6:6a:74:a7:b4:fc:d9:10:93:5e:
63:69:a5:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 17:43:10 2025 by rpki-client