Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/90cfec58-4264-38d3-98a5-78ae8dc09541.roa
File: 90cfec58-4264-38d3-98a5-78ae8dc09541.roa (raw, json)
Hash identifier: HfFBit3vQ4XFnpzWNt1e0u6ONbDJCFflRs5XQA3mn0c=
Subject key identifier: 42:7B:99:30:36:1B:A0:C5:58:27:AF:D1:74:25:F7:3F:CD:5A:C2:1D
Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial: 010D0C9F432858481C9A72687A9E6CEFFC13C880
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/90cfec58-4264-38d3-98a5-78ae8dc09541.roa
Signing time: Fri 06 Dec 2024 02:00:39 +0000
ROA not before: Fri 06 Dec 2024 02:00:39 +0000
ROA not after: Thu 06 Mar 2025 02:00:39 +0000
asID: 53508
IP address blocks: 206.255.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1c:9a:72:68:7a:9e:6c:ef:fc:13:c8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Validity
Not Before: Dec 6 02:00:39 2024 GMT
Not After : Mar 6 02:00:39 2025 GMT
Subject: CN=0f1e67e5-ae6a-4f13-ae56-355729df61f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:54:f0:70:1a:6b:5d:c0:ce:25:e9:63:8a:eb:
82:2a:42:61:53:2d:ca:9c:29:dc:dd:48:61:4f:57:
ac:18:cc:20:43:b1:d6:f1:56:62:09:8f:98:ff:14:
a8:f3:7c:b2:47:ef:46:41:a9:e1:b9:4d:f9:37:3a:
0c:fb:2f:35:5a:6d:22:84:51:5c:89:89:86:5d:3a:
c8:21:a5:b0:7b:b5:a7:1f:17:11:6b:64:f3:78:58:
9f:4b:f9:e5:74:d1:0d:b4:66:ab:1e:39:e3:a5:aa:
3f:e1:b0:5f:59:32:e1:8d:ed:f3:d0:9f:e5:96:75:
f5:91:42:50:73:d1:46:58:fb:98:29:6a:28:8a:f0:
63:c3:36:27:b7:a0:e4:33:8d:a4:b2:f4:29:d5:fc:
b5:be:c9:3f:ef:1b:6b:ca:a5:91:58:b7:3c:38:1d:
ed:95:c6:07:84:fd:a8:ad:e7:e5:02:bc:94:d9:86:
33:e8:06:eb:0d:d1:da:21:0e:5e:6b:4b:80:e9:79:
3c:84:da:8f:c7:6e:b8:24:a4:de:e0:fc:d4:51:e9:
c8:48:a5:59:06:6f:38:84:a3:83:70:7f:cf:16:d2:
f4:b2:70:31:9d:1d:9c:27:11:63:de:46:aa:53:98:
46:6d:71:d7:77:f7:2f:f5:f4:0c:dd:10:b9:d4:de:
d0:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:7B:99:30:36:1B:A0:C5:58:27:AF:D1:74:25:F7:3F:CD:5A:C2:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/90cfec58-4264-38d3-98a5-78ae8dc09541.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
X509v3 Authority Key Identifier:
keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
sbgp-ipAddrBlock: critical
IPv4:
206.255.217.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:c3:41:5e:b5:4c:d1:35:dc:1b:e2:cd:f7:f5:03:16:5d:fd:
40:14:36:f2:6b:d8:ba:26:76:42:92:8e:dd:06:71:56:f0:3a:
82:ee:dd:1f:06:54:f3:cc:96:a4:39:12:d9:11:e9:a7:c3:39:
76:7c:de:7f:9b:b5:32:51:c0:15:2a:7f:c4:82:64:ca:cf:55:
6d:9d:60:ea:b8:eb:e1:51:00:0e:65:22:9a:2b:4e:2e:c4:e2:
70:4a:90:c4:4b:2f:5f:70:4e:59:c4:b1:33:a2:b3:42:57:f2:
d0:db:90:86:df:7f:c2:5c:07:6c:67:f8:b8:73:87:c9:57:05:
a3:1e:41:5f:ee:6e:53:00:2f:22:54:91:7b:f4:8f:25:77:7a:
86:78:46:70:90:31:52:37:ca:e6:55:ac:c3:55:81:2a:a8:32:
32:9a:0a:b9:83:13:78:d7:3a:4d:75:10:fa:dc:ec:4b:fa:51:
28:55:25:d9:8f:44:11:c8:2e:96:7e:b6:8b:5b:0e:8f:51:03:
84:28:f1:e2:8d:5d:f9:e9:b0:e4:bb:b9:fd:12:f5:2b:2e:81:
1f:8b:08:de:97:78:c4:2f:65:52:a2:b1:e8:8f:0f:1a:56:bb:
d9:c2:50:38:f0:6c:d7:26:a5:50:8c:90:b7:21:eb:00:16:92:
a1:a7:1a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:49:40 2025 by rpki-client