Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/9434e6dc-d860-3378-b9ed-0912c88bab1b.roa
File: 9434e6dc-d860-3378-b9ed-0912c88bab1b.roa (raw, json)
Hash identifier: PLe2S3yo2rKU0OPJ0gTsaTEzdVzri/zbBKHzaHQOKfE=
Subject key identifier: 3E:3F:E5:A0:97:AA:57:3D:58:44:FD:27:5E:04:7E:29:D6:FD:37:E7
Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial: 010D0C9F432858481C9A702D10D6E10C5137FF58
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/9434e6dc-d860-3378-b9ed-0912c88bab1b.roa
Signing time: Fri 06 Dec 2024 02:00:39 +0000
ROA not before: Fri 06 Dec 2024 02:00:39 +0000
ROA not after: Thu 06 Mar 2025 02:00:39 +0000
asID: 53508
IP address blocks: 206.255.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1c:9a:70:2d:10:d6:e1:0c:51:37:ff:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Validity
Not Before: Dec 6 02:00:39 2024 GMT
Not After : Mar 6 02:00:39 2025 GMT
Subject: CN=d319fc15-d144-4f8e-81eb-4dc6ec221d14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:33:17:5b:ce:d5:1f:a0:1e:a5:ac:35:f2:a4:
33:f1:99:24:70:bc:d0:cd:f9:58:5b:44:5e:12:ce:
98:d5:a1:17:fd:42:37:d2:e7:4d:b6:dc:1d:71:7e:
54:47:c1:b4:08:e3:c7:c0:97:21:6e:f2:a3:29:db:
af:bb:95:f5:4c:65:51:f8:11:51:13:fc:14:64:64:
e8:38:64:0a:85:1c:45:7c:c0:df:26:d0:c3:64:60:
b7:79:c4:1b:10:50:15:63:39:28:80:74:11:e3:61:
22:63:cb:0f:11:d2:76:c3:5e:14:58:9c:41:b8:ec:
6d:5c:e4:42:6a:6d:68:77:dc:eb:d4:b5:4e:d4:6e:
53:40:63:70:e9:ea:eb:76:89:05:bb:fe:12:ce:c8:
ff:cf:0b:db:db:47:e8:ed:bf:85:5b:21:f1:85:10:
03:c4:a3:e9:db:a1:cc:49:ac:59:b6:06:30:49:b4:
c0:27:72:24:01:70:a6:5b:23:54:1c:78:b3:bb:e6:
47:28:e5:34:7c:1b:05:c2:e0:64:37:eb:45:76:0f:
5b:a5:b1:b8:48:6e:20:a0:4f:65:98:6c:9f:2d:41:
5c:60:c8:bd:90:08:fe:30:f3:43:73:b9:1f:ae:b3:
45:92:37:44:22:a5:39:9b:5d:46:26:4a:50:c6:fd:
78:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:3F:E5:A0:97:AA:57:3D:58:44:FD:27:5E:04:7E:29:D6:FD:37:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/9434e6dc-d860-3378-b9ed-0912c88bab1b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
X509v3 Authority Key Identifier:
keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
sbgp-ipAddrBlock: critical
IPv4:
206.255.248.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:56:0e:0f:e6:4d:2a:29:68:b4:20:58:07:9c:ff:46:5f:8c:
1b:3b:71:3b:4d:98:89:10:c1:29:b6:26:00:57:c0:e5:7b:1e:
74:f8:3e:28:f0:92:de:0f:a4:3c:d6:ce:04:06:54:45:82:71:
f4:65:b2:67:76:40:72:72:25:00:52:95:14:e9:34:8d:c0:98:
ce:48:08:b9:10:2a:38:ad:e9:f9:c5:53:67:59:98:8c:ec:06:
72:90:67:6d:f6:98:5b:de:5e:31:bd:c2:03:58:83:e5:0f:84:
8b:76:c0:3c:83:b0:f0:1a:91:f9:bd:78:7f:f7:a5:9d:fb:86:
2d:0b:12:13:e3:51:37:28:57:b5:a1:29:a3:cd:d5:86:64:71:
43:25:f3:8e:9c:ee:e3:ae:7d:09:a6:18:f1:b1:3f:23:04:19:
8f:0d:52:1a:a4:57:cd:07:7e:74:d7:08:77:16:b0:47:ab:37:
8c:d6:e1:c9:d3:a2:29:0d:59:ab:79:19:1a:1e:ee:2f:45:b2:
77:30:9f:10:56:ab:b3:ec:66:5a:97:9b:b2:99:12:e6:c8:3b:
65:c4:d9:7e:c3:b2:f7:f5:d2:c4:17:2d:07:a8:42:a5:77:1a:
0b:93:14:b8:a6:9f:f4:b3:df:74:0e:e5:61:81:2a:5b:e2:75:
21:ee:e3:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:40:05 2025 by rpki-client