Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/c0025222-3a7a-3299-b9e6-86ddb22829a5.roa
File: c0025222-3a7a-3299-b9e6-86ddb22829a5.roa (raw, json)
Hash identifier: A12QbtlPxmCrVsYtYuI6t4Ingno0LYoWwMUpyHP08Io=
Subject key identifier: 57:F4:36:E3:A1:4A:37:51:E0:66:38:91:5E:D2:0B:06:A7:C2:9A:36
Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial: 010D0C9F43285848143A6C029D237588654CD5E0
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/c0025222-3a7a-3299-b9e6-86ddb22829a5.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 53508
IP address blocks: 206.255.112.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:6c:02:9d:23:75:88:65:4c:d5:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=9a0f68fe-89f3-490d-8b4b-ef619661f071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ec:fd:f9:69:42:5e:2a:81:00:c1:72:b1:85:
cb:23:97:73:c0:2e:30:74:f3:4a:47:e2:31:6e:06:
3f:1a:66:2f:41:b1:0e:46:00:6e:78:14:0b:43:49:
36:8d:bb:18:1a:8f:0e:0b:41:6c:de:23:b8:3f:84:
97:fc:f6:55:6a:b7:2e:54:df:11:5b:1d:4e:6b:69:
4f:64:a3:86:ab:e6:ff:f8:d0:43:0b:bc:6a:28:aa:
84:00:18:c2:8d:8a:9e:5b:fe:1e:d7:50:91:2a:59:
86:7f:5e:cf:f3:0a:4b:a9:c3:f5:03:8e:d2:6b:cf:
68:83:85:ac:33:f9:67:70:2c:b9:ca:04:35:4b:2f:
91:ac:68:ed:47:58:4c:ce:12:16:d0:12:26:32:58:
26:09:00:42:e3:7f:9e:4a:4b:62:1a:f7:94:12:a6:
0a:3b:27:f6:05:53:43:4e:f8:03:67:23:86:75:4d:
f3:27:0d:a2:5c:f1:a7:97:70:e6:3b:52:00:cf:99:
42:90:ec:96:08:09:61:8a:f9:94:82:4b:1f:9f:74:
fb:49:e6:1a:4e:ab:bb:e6:d1:d0:3a:3e:7d:9b:68:
31:7f:73:a0:67:b7:71:00:7c:c9:bf:69:8a:e5:ee:
c0:62:32:c8:43:00:fb:5d:93:40:8b:b8:4a:e0:4e:
03:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:F4:36:E3:A1:4A:37:51:E0:66:38:91:5E:D2:0B:06:A7:C2:9A:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/c0025222-3a7a-3299-b9e6-86ddb22829a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
X509v3 Authority Key Identifier:
keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
sbgp-ipAddrBlock: critical
IPv4:
206.255.112.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:df:9a:79:58:80:e2:dd:f4:7a:9b:79:b0:12:0e:77:f8:be:
29:73:28:db:b7:0e:d0:8f:f4:43:c1:a4:8c:4c:0e:90:97:3e:
32:61:75:0b:07:cd:ce:3f:47:d2:56:d0:c3:b1:20:8e:18:d5:
43:da:df:f2:fc:f8:18:f8:82:cb:6a:88:35:ba:ef:49:93:5d:
5f:b8:b8:5b:63:f4:b0:fd:66:8b:ca:80:1b:5a:8d:fa:79:2c:
88:94:43:c8:89:06:32:a2:26:91:7a:c3:69:7d:f6:c9:a3:fa:
dc:54:1c:99:68:e3:d9:3a:b6:3c:94:21:53:5d:0c:2f:db:b5:
86:2b:4f:c3:94:ac:9e:af:96:82:aa:ef:00:3d:e2:0a:85:4e:
9f:16:5f:66:b6:28:37:4c:d8:45:86:1e:c5:4a:75:56:67:26:
f0:7a:ab:69:a5:40:66:33:44:02:dc:a3:30:e0:42:57:9b:e6:
73:f2:2e:1c:0f:e1:85:6e:72:3a:b1:d9:e0:12:9c:32:2e:31:
9a:7c:6e:da:4c:47:6e:8c:4e:57:d3:67:42:f4:71:b1:e6:b4:
56:77:66:e3:0f:d8:46:96:0a:38:05:18:1f:77:56:5f:7c:10:
5d:37:88:c4:bc:cf:10:18:61:bc:e9:71:ee:9d:bc:bb:61:6b:
3b:7f:d8:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:19:59 2025 by rpki-client