Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/b39705dc-aa8e-3894-ae97-fe60e59e609d.roa
File: b39705dc-aa8e-3894-ae97-fe60e59e609d.roa (raw, json)
Hash identifier: W8mELwlGJrd6+IPz/zx4lfqGf0+yy2yARi8jO0LOWWM=
Subject key identifier: 76:89:3B:34:E1:CA:58:E0:9B:51:FA:E1:A1:5C:1D:D6:A8:E7:DE:58
Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial: 010D0C9F432858481C9A727A61FA4DF3426DA900
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/b39705dc-aa8e-3894-ae97-fe60e59e609d.roa
Signing time: Fri 06 Dec 2024 02:00:39 +0000
ROA not before: Fri 06 Dec 2024 02:00:39 +0000
ROA not after: Thu 06 Mar 2025 02:00:39 +0000
asID: 53508
IP address blocks: 206.255.220.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1c:9a:72:7a:61:fa:4d:f3:42:6d:a9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Validity
Not Before: Dec 6 02:00:39 2024 GMT
Not After : Mar 6 02:00:39 2025 GMT
Subject: CN=26d15fe1-6ed4-493d-af0c-bae2d05fdfc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0d:d6:58:88:c7:c3:50:ef:34:1b:3b:c8:b7:
15:38:b9:54:60:30:71:64:7f:66:10:0f:75:37:8d:
b0:60:fa:07:98:29:41:cf:2f:e1:47:d7:6d:64:d5:
ab:f6:f4:f5:b2:0c:0c:5c:4b:3b:fb:f5:13:40:a0:
a1:f6:46:0a:61:5e:60:a7:4c:6b:39:13:40:39:25:
71:4c:35:d1:aa:2d:cb:a8:03:54:d2:d0:21:2c:7e:
3b:82:55:95:eb:13:60:a1:2b:16:55:db:e2:c4:31:
bf:05:d8:0f:a5:52:12:71:a2:dd:42:8a:fb:8c:b3:
e1:d9:6f:9b:25:f6:39:f7:bf:57:98:68:57:2a:8d:
16:b6:4f:74:51:62:ae:e7:a5:c0:30:e9:15:fc:5e:
4e:a0:5a:c9:f6:c0:b6:aa:e7:ff:58:95:dc:df:2a:
65:2a:74:2a:d1:aa:f9:5a:96:30:fa:7d:85:b3:41:
9a:08:f5:3c:13:a5:dc:c9:c0:26:0a:8e:f5:87:38:
06:c1:88:88:66:ea:bf:a0:de:ca:aa:ff:4a:47:7a:
51:76:20:c1:eb:9a:aa:1f:15:e9:db:df:13:e0:55:
64:7d:ca:dd:74:2c:f3:0f:fb:ba:b7:25:d2:55:76:
5b:2d:41:db:22:59:d2:02:4f:77:97:bc:b9:b8:15:
f4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:89:3B:34:E1:CA:58:E0:9B:51:FA:E1:A1:5C:1D:D6:A8:E7:DE:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/b39705dc-aa8e-3894-ae97-fe60e59e609d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
X509v3 Authority Key Identifier:
keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
sbgp-ipAddrBlock: critical
IPv4:
206.255.220.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:f3:64:95:d9:cc:ca:7e:49:5a:ce:b3:2f:b1:a8:8d:1d:ed:
c2:78:c9:a3:4d:9c:51:f8:5c:3b:4f:3f:4f:b5:f4:fa:93:f7:
d5:6a:f5:6a:d7:32:92:0c:f3:48:f5:59:e6:18:87:e2:f0:59:
12:53:73:04:b7:ab:43:87:97:b4:b7:1f:af:83:61:a1:63:13:
72:18:c4:c9:55:93:47:2d:76:31:86:b4:b7:6a:6e:8c:03:0b:
51:7d:d4:d1:4a:48:b6:52:6b:f0:be:40:ef:3a:b6:8f:21:de:
bb:17:44:e4:4d:9d:5f:84:2d:64:4f:82:1d:21:fa:74:2b:29:
1f:ac:28:fa:6d:f9:16:9c:79:87:12:27:34:5a:2e:ff:a9:38:
f1:8b:2f:0b:dd:ba:cc:f7:0e:81:99:03:5c:4b:ca:fc:8b:28:
de:15:df:89:6d:c4:2c:bc:c5:e6:e0:85:fc:aa:ae:62:73:4f:
98:d6:63:4c:2d:62:ab:f2:1d:ed:31:14:cc:7a:36:c3:57:df:
10:f7:4e:d8:97:5e:b0:ba:67:9e:e3:c7:f3:78:37:fe:e1:80:
9d:e2:12:36:39:40:22:1c:a4:ad:cd:d9:a9:3b:d3:1a:70:b7:
4e:89:bc:54:9c:53:db:3e:b9:4f:a3:00:f8:7b:bc:22:5d:f0:
b8:b8:96:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:44:47 2025 by rpki-client