Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/aae70563-797d-34b1-9db2-9978daa04520.roa
File: aae70563-797d-34b1-9db2-9978daa04520.roa (raw, json)
Hash identifier: yNPAPsJwgIPTdKY5lwuLgjJGD5w2zgSuqjcRv59VUK8=
Subject key identifier: DE:30:11:78:B7:8C:32:67:66:77:7C:52:7B:04:42:78:DC:BF:6B:28
Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial: 010D0C9F432858481C9A6F4E4C0D1B8737439380
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/aae70563-797d-34b1-9db2-9978daa04520.roa
Signing time: Fri 06 Dec 2024 02:00:39 +0000
ROA not before: Fri 06 Dec 2024 02:00:39 +0000
ROA not after: Thu 06 Mar 2025 02:00:39 +0000
asID: 53508
IP address blocks: 206.255.72.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1c:9a:6f:4e:4c:0d:1b:87:37:43:93:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Validity
Not Before: Dec 6 02:00:39 2024 GMT
Not After : Mar 6 02:00:39 2025 GMT
Subject: CN=c8b5df10-e7a3-4b5a-a6cc-b78a1eeff76e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:91:3f:23:b1:72:e8:ba:0c:68:b9:9e:1d:63:
39:61:c5:47:ac:8d:6f:1e:a1:04:76:26:af:75:be:
d9:d9:6d:5d:32:3f:46:78:d1:a1:2f:be:74:9d:c0:
cb:3b:e5:66:b2:dc:b3:8d:4a:53:21:7a:a5:e1:37:
f4:ff:8f:32:a0:95:7b:8d:f9:33:aa:90:a8:4a:43:
5a:a7:49:95:60:12:ab:35:cd:05:98:02:fa:e8:2c:
59:0a:0b:94:a5:a3:45:56:26:2f:31:e5:08:f8:16:
11:fe:4b:db:f1:03:51:bd:d7:ec:aa:9c:51:6d:6e:
36:5a:88:e1:24:fc:ab:a0:b1:fe:65:48:d5:94:36:
95:98:3e:57:56:28:3b:01:d3:74:31:7b:9f:dc:4d:
a7:96:6c:61:1b:11:1d:93:fa:6c:c8:cd:aa:32:70:
20:c8:6a:db:f5:4e:c6:48:6a:71:1b:cf:1a:0d:54:
a2:26:74:15:59:38:58:39:df:3b:82:af:bc:2a:e9:
bf:42:08:22:33:36:90:6c:98:2c:da:75:1e:7b:ca:
dd:24:a9:9b:9f:da:cc:7f:98:7a:d3:71:22:9f:5e:
1c:e8:56:b2:0a:e7:ed:6e:18:1c:da:09:1b:55:c5:
12:ef:ae:fb:f6:f3:85:ed:23:6e:da:aa:f9:93:c3:
24:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:30:11:78:B7:8C:32:67:66:77:7C:52:7B:04:42:78:DC:BF:6B:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/aae70563-797d-34b1-9db2-9978daa04520.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
X509v3 Authority Key Identifier:
keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
sbgp-ipAddrBlock: critical
IPv4:
206.255.72.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9e:b2:c1:f2:dd:e5:1e:3c:7b:0f:4a:1e:37:92:d9:69:fe:64:
10:f2:3b:a6:32:46:63:de:67:41:33:17:b1:30:67:a2:4b:b8:
f7:4a:20:62:85:1d:29:a3:ac:3d:8f:7f:42:63:b3:51:bc:de:
57:7b:ed:99:79:e2:2f:b8:70:6d:1f:9a:91:e5:d4:92:4b:08:
0a:dd:e3:0f:40:81:29:e5:b5:e2:c4:de:30:f1:09:88:78:68:
7b:b2:e9:1d:74:41:29:da:13:d3:9d:e9:f1:70:22:ab:92:95:
78:e8:ab:2a:ad:1b:a6:93:c3:18:46:9a:20:e4:cc:f0:52:b7:
bb:b1:2e:68:11:24:01:17:89:23:b1:45:c9:0e:e5:7a:35:c3:
4c:0d:cf:00:81:08:89:30:53:5e:28:0e:8c:94:4c:2d:07:31:
a2:97:16:31:e5:af:28:68:67:4f:d0:17:f8:2f:72:5a:04:12:
6a:ff:e9:d0:29:11:8d:d2:20:d4:06:ac:1c:4e:4f:59:49:63:
78:1c:2a:87:ad:91:86:62:2d:73:0b:05:bb:81:c4:be:f3:c6:
12:35:51:6c:cd:bd:7d:76:f2:d6:ee:0c:48:23:64:b0:94:64:
fd:cb:6e:81:75:68:6c:5e:5c:42:fd:48:17:31:ec:d6:e0:14:
4b:24:5e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:23:53 2025 by rpki-client