Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71/41f9aae5-6871-3e7a-9d20-457a9775f125.roa
File: 41f9aae5-6871-3e7a-9d20-457a9775f125.roa (raw, json)
Hash identifier: 8HzqAsj95QmFSdfMQybJKFGeS8ZVZdBwomf5XrJKZOk=
Subject key identifier: 1D:0D:53:5A:15:9F:3A:1F:96:C5:1D:18:C3:3E:50:8A:5D:DF:C8:81
Certificate issuer: /CN=bfe5a38f-5ff4-4b97-a459-e25cfc9caa71
Certificate serial: 010D0C9F4328584953C417E46694458D287F6840
Authority key identifier: BC:36:F0:C3:90:91:7B:B8:CB:F7:FE:00:75:72:5B:AF:FB:59:8B:01
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71/41f9aae5-6871-3e7a-9d20-457a9775f125.roa
Signing time: Thu 27 Mar 2025 13:00:52 +0000
ROA not before: Thu 27 Mar 2025 13:00:52 +0000
ROA not after: Wed 25 Jun 2025 13:00:52 +0000
asID: 10886
IP address blocks: 206.196.176.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:53:c4:17:e4:66:94:45:8d:28:7f:68:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfe5a38f-5ff4-4b97-a459-e25cfc9caa71
Validity
Not Before: Mar 27 13:00:52 2025 GMT
Not After : Jun 25 13:00:52 2025 GMT
Subject: CN=030537df-c43e-43a9-9dc1-ecb7b37d2ef2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:cc:ab:4c:11:5c:93:26:ec:7d:7f:88:57:6d:
da:7c:a3:27:c3:5f:54:80:7f:e4:36:73:ef:fb:f8:
68:1c:81:ba:8d:15:4e:9d:92:91:66:b2:0b:fd:fe:
4c:fa:90:21:7f:c1:86:c3:0f:c2:ce:f8:d3:d2:3b:
b7:54:be:89:37:f3:4a:30:24:08:6d:a5:20:30:eb:
8e:a3:d6:47:cc:8c:3d:87:30:f5:93:5a:64:2b:53:
1d:7a:56:33:e2:99:d9:b8:27:f4:43:33:be:60:8c:
4b:92:13:94:15:9c:ec:23:da:24:71:75:59:bb:05:
2e:2c:10:97:04:34:0d:b7:1f:d2:7f:d9:33:6b:3b:
b7:94:80:ab:cc:f9:df:15:cd:4b:53:09:b1:b1:88:
00:6a:b0:f8:c5:e4:32:73:30:f1:fe:ad:01:8f:a4:
38:7e:11:af:05:b4:ea:4c:b7:b8:19:37:ba:d6:35:
44:18:b1:79:b6:16:50:85:f8:42:b3:77:eb:51:ba:
69:87:94:3a:61:f1:57:31:1e:ce:94:87:bc:7a:83:
fa:81:94:8f:d8:77:d3:2c:42:b7:30:8d:32:30:79:
f2:53:ff:64:f9:28:89:62:6c:19:ea:e2:5a:9d:5d:
42:7a:14:de:ca:62:ad:1d:44:dd:fb:f2:59:b1:2f:
40:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:0D:53:5A:15:9F:3A:1F:96:C5:1D:18:C3:3E:50:8A:5D:DF:C8:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71/41f9aae5-6871-3e7a-9d20-457a9775f125.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71.crl
X509v3 Authority Key Identifier:
keyid:BC:36:F0:C3:90:91:7B:B8:CB:F7:FE:00:75:72:5B:AF:FB:59:8B:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71.cer
sbgp-ipAddrBlock: critical
IPv4:
206.196.176.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:0a:d6:d0:3e:14:0e:f2:68:51:87:25:47:c0:a3:6e:04:fe:
39:7d:f6:d3:52:c3:da:e0:3a:21:f8:58:57:0f:55:e1:30:6d:
6e:de:3a:86:5a:94:cf:51:91:65:c6:a9:51:e6:9f:90:6a:a7:
11:0e:1b:7f:7b:af:ed:a0:c1:8a:8d:30:be:73:62:46:75:0a:
32:ca:bd:54:b6:61:22:b3:14:9e:ff:40:3a:68:8d:d5:74:0a:
89:54:fa:b1:55:89:a0:2f:35:a8:ae:f1:64:70:c1:cf:9b:c0:
6e:53:5d:fc:70:d8:e8:83:7d:27:a1:1c:99:5a:7f:79:8c:84:
4a:7a:d2:06:84:be:89:74:5d:33:89:ad:a0:41:68:b5:ed:d8:
53:72:02:9f:51:ff:86:cf:82:0a:c3:50:4d:70:f1:9f:2a:fd:
e4:d1:04:4d:ce:17:f0:19:f1:a8:5e:be:23:20:d0:80:24:b0:
64:aa:69:d7:a6:d2:01:8f:8e:13:d0:c7:25:f6:80:a0:83:d9:
d4:72:c1:f5:74:23:cf:80:cf:e8:e2:e6:79:c8:06:6f:dd:70:
f8:4e:87:24:4a:cb:cc:08:e7:a7:b5:97:62:b6:47:31:67:14:
82:89:de:aa:e9:a2:48:03:60:33:5a:d9:38:97:d6:6e:15:ba:
4d:0f:73:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:06:55 2025 by rpki-client