Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/bf1bc49a-0d53-3332-893b-589cda28cf4e.roa
File: bf1bc49a-0d53-3332-893b-589cda28cf4e.roa (raw, json)
Hash identifier: juXs3cQYSO1CAk9hdkAVseB+n25bU4FIYSu78FSdLNM=
Subject key identifier: B6:B6:C3:62:43:13:14:A9:0C:87:96:85:5F:8C:F0:57:E8:8C:07:D8
Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Certificate serial: 010D0C9F43285848ADC61B2252BF9528055D7100
Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/bf1bc49a-0d53-3332-893b-589cda28cf4e.roa
Signing time: Mon 27 Jan 2025 02:00:39 +0000
ROA not before: Mon 27 Jan 2025 02:00:39 +0000
ROA not after: Sun 27 Apr 2025 01:00:39 +0000
asID: 13536
IP address blocks: 68.70.48.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ad:c6:1b:22:52:bf:95:28:05:5d:71:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Validity
Not Before: Jan 27 02:00:39 2025 GMT
Not After : Apr 27 01:00:39 2025 GMT
Subject: CN=cee4f1c2-c44a-42fd-83c0-e29bbb297824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:7d:f7:62:4b:dd:1e:12:39:5d:68:ab:38:67:
dc:ea:d3:41:20:8f:ec:c9:32:12:b2:3b:f6:1d:3e:
db:95:dc:8b:3b:96:4c:d9:29:e4:24:74:f1:43:6e:
46:84:02:a7:91:8e:c8:02:28:84:23:6b:63:b3:0c:
b5:26:64:9d:9a:80:49:5a:bb:70:c7:de:87:60:b1:
b0:16:2f:c1:33:2d:82:f8:89:b8:df:67:2c:76:ea:
be:c8:64:9f:9f:46:f6:90:60:49:77:54:1a:cd:37:
d3:01:d5:7b:30:b9:ff:90:8f:ae:8e:06:ad:8c:79:
77:04:b2:72:69:ed:79:59:58:c8:0b:f3:ec:ad:3b:
41:9b:ea:fe:b3:0a:9e:ec:c1:72:aa:28:b7:f7:24:
91:05:a2:e8:bb:65:88:64:70:90:cb:5a:cf:94:a8:
0f:6a:00:d8:09:1a:35:84:a5:06:ec:74:d2:67:ef:
1e:7f:c5:c1:98:77:05:e0:57:65:18:67:5f:d4:c7:
e4:d0:f0:4b:c5:3c:5c:02:f7:26:ce:71:8f:1d:44:
cf:88:4d:a2:31:5d:20:7d:3a:c6:e4:af:09:3e:79:
3f:c3:b3:ab:4e:24:81:c6:d2:fc:ce:38:7b:e6:ae:
11:93:8d:5b:fd:58:7d:87:dd:93:02:a6:e4:51:c9:
68:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:B6:C3:62:43:13:14:A9:0C:87:96:85:5F:8C:F0:57:E8:8C:07:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/bf1bc49a-0d53-3332-893b-589cda28cf4e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl
X509v3 Authority Key Identifier:
keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
sbgp-ipAddrBlock: critical
IPv4:
68.70.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d2:64:4f:5d:7a:b4:e5:f8:e3:45:cf:a3:82:c7:e1:33:b3:4f:
9c:0d:10:c5:40:f5:06:a3:5e:11:28:0f:a4:93:57:a9:59:3f:
51:67:5c:9e:56:3c:ca:70:41:3d:6d:a0:f5:bc:d6:83:9d:e3:
fa:06:89:00:e0:99:b0:55:dc:45:f0:18:10:12:85:35:6c:c4:
93:c3:64:bb:4a:21:c0:71:87:5b:3b:54:7a:99:f9:64:1a:96:
ce:4f:79:c2:fa:0f:9c:84:ed:24:71:11:9e:ac:a9:7a:06:88:
b8:c8:bc:f3:4e:b5:c7:07:b5:63:08:ef:46:0e:b3:01:93:d5:
b5:72:3b:41:cf:11:f2:4f:ef:f7:92:e7:7f:33:b1:3f:77:bc:
d9:9c:12:0d:b2:43:f7:40:03:43:80:91:60:3d:df:9e:16:43:
74:8d:2a:f2:bb:3a:fe:f2:c8:0c:33:0d:89:47:04:17:8e:0e:
40:9e:6f:12:e8:04:a7:50:76:a8:ec:df:09:60:4b:8e:04:57:
3b:28:b6:0c:ea:13:f4:5d:88:0a:4f:b0:75:dc:d4:1b:b0:1e:
85:ff:b7:b3:b7:55:10:df:ed:a9:8e:89:95:af:8c:12:a0:94:
4f:a4:65:b7:c1:4b:ff:eb:e7:62:f3:f6:6a:71:83:7e:dc:ec:
95:7a:55:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:28:11 2025 by rpki-client