Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740/0bfdcce3-bf0c-3c99-8e69-783195d18590.roa
File: 0bfdcce3-bf0c-3c99-8e69-783195d18590.roa (raw, json)
Hash identifier: 1Lh1XPdwo8yUByugGk4yPt4Efdo+Pldve4OG6q+rm0g=
Subject key identifier: B7:42:1D:BC:EC:55:8A:70:1E:32:96:17:FF:C8:E5:93:D4:6F:4C:B0
Certificate issuer: /CN=06b2da7d-ae03-4c12-bd29-f0c285888740
Certificate serial: 010D0C9F432858481F652A59C980C1AB61C02280
Authority key identifier: B8:FD:89:4B:88:4F:53:16:18:88:90:87:6E:B8:1B:07:4D:27:4A:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740/0bfdcce3-bf0c-3c99-8e69-783195d18590.roa
Signing time: Sat 07 Dec 2024 02:00:39 +0000
ROA not before: Sat 07 Dec 2024 02:00:39 +0000
ROA not after: Fri 07 Mar 2025 02:00:39 +0000
asID: 16509
IP address blocks: 206.195.220.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1f:65:2a:59:c9:80:c1:ab:61:c0:22:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06b2da7d-ae03-4c12-bd29-f0c285888740
Validity
Not Before: Dec 7 02:00:39 2024 GMT
Not After : Mar 7 02:00:39 2025 GMT
Subject: CN=f99c4e08-a5f7-4dd1-9804-fc7edc0d076f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:18:b9:1b:76:3c:d1:60:02:bc:b3:e5:37:56:
1a:5f:d9:16:06:bc:12:04:b0:d5:f7:86:62:b4:5c:
7e:c1:c5:64:a8:60:09:85:ce:40:b3:7c:9d:98:9d:
a6:08:6b:b5:59:82:0d:76:f8:6b:b4:87:e5:61:56:
76:3f:0b:d1:b5:7f:86:57:f1:81:81:20:ca:0e:0b:
1f:88:c1:45:2b:d7:9a:38:d7:04:53:2c:85:24:cc:
6d:3d:ad:83:de:b0:f6:a0:a3:bb:c1:d3:40:6c:b7:
c0:c3:47:91:71:4d:d0:4c:89:bd:61:0e:93:f0:39:
c5:7c:f8:4e:a9:da:6f:46:81:88:e3:c2:82:aa:f4:
69:27:d8:a3:62:58:98:5a:2f:65:3a:d9:69:b7:bb:
fb:9d:5d:ad:cf:6a:65:4f:de:90:b2:58:12:3c:a6:
64:7c:8b:99:9b:84:05:bb:bb:bc:c3:20:76:74:b6:
d3:97:32:24:87:05:62:85:e7:a0:43:03:60:34:95:
47:f4:46:8f:d3:2e:ed:ba:ce:bc:aa:00:ae:88:12:
67:a8:5e:60:64:36:88:ea:91:cd:0c:97:ee:cb:eb:
c6:c7:2d:1f:f1:95:37:af:a2:c7:b6:63:d8:d4:09:
ee:a3:2b:02:06:81:aa:9c:06:0f:b9:3c:9f:a2:44:
24:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:42:1D:BC:EC:55:8A:70:1E:32:96:17:FF:C8:E5:93:D4:6F:4C:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740/0bfdcce3-bf0c-3c99-8e69-783195d18590.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740/06b2da7d-ae03-4c12-bd29-f0c285888740.crl
X509v3 Authority Key Identifier:
keyid:B8:FD:89:4B:88:4F:53:16:18:88:90:87:6E:B8:1B:07:4D:27:4A:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740.cer
sbgp-ipAddrBlock: critical
IPv4:
206.195.220.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:5f:50:41:b9:1d:a4:60:3c:4b:be:9c:6d:14:c9:6f:9f:cc:
9d:4e:89:41:95:d1:bf:5d:95:b4:23:b1:bb:51:b4:42:c9:aa:
fc:56:94:cb:7e:68:6f:05:b3:8f:a4:71:65:1b:30:ef:77:63:
3f:df:1b:a6:88:99:d1:c0:b9:2c:bd:85:64:18:1a:71:8a:9f:
6c:d8:03:7e:55:9f:bb:23:a3:25:8c:51:91:25:4f:e8:6d:ac:
5f:c3:2b:f7:23:9c:f4:75:1e:d2:21:e9:b1:0e:46:ce:3d:35:
90:54:ed:2d:b7:fe:45:82:18:12:68:9b:aa:ac:0a:b9:78:04:
45:64:d6:24:f8:24:b3:13:e7:48:9c:c2:98:89:a1:59:f6:dd:
3a:12:10:84:e1:34:73:fb:15:9d:9b:5a:58:5f:4f:52:f8:cc:
44:7b:67:26:d7:99:60:a2:58:a8:70:88:97:8d:33:cc:0c:88:
e5:13:e5:4c:75:49:b8:5c:71:df:52:5a:ae:01:55:29:76:bc:
49:56:f9:3b:77:76:ee:a0:98:e8:a7:a3:65:9f:5c:6a:74:d1:
bc:d8:50:96:c9:29:1a:f7:14:4f:70:11:0e:c5:10:f7:33:3c:
79:f6:30:7c:c6:c4:fe:c3:f0:40:e0:9e:44:9d:ba:64:ee:d8:
e9:f4:dd:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:33:20 2025 by rpki-client