Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/bcf4837b-705f-3ae0-a9a3-c8ce47882966.roa
File: bcf4837b-705f-3ae0-a9a3-c8ce47882966.roa (raw, json)
Hash identifier: +zY8Jtu27Fb8wJKblc/56pC9L8UsNfjMstN6w8Wr/Hc=
Subject key identifier: A8:0E:35:11:CA:A9:48:FE:5C:E9:B0:0A:4F:ED:8B:56:64:CA:38:A0
Certificate issuer: /CN=d6d708e8-5964-4587-8db1-e22545ec38a3
Certificate serial: 010D0C9F43285849513140938576614361E95600
Authority key identifier: 96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/bcf4837b-705f-3ae0-a9a3-c8ce47882966.roa
Signing time: Wed 26 Mar 2025 14:53:32 +0000
ROA not before: Wed 26 Mar 2025 14:53:32 +0000
ROA not after: Tue 24 Jun 2025 14:53:32 +0000
asID: 21947
IP address blocks: 216.47.48.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:51:31:40:93:85:76:61:43:61:e9:56:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6d708e8-5964-4587-8db1-e22545ec38a3
Validity
Not Before: Mar 26 14:53:32 2025 GMT
Not After : Jun 24 14:53:32 2025 GMT
Subject: CN=8c5b84ee-208a-4ea9-98c0-90414cf9a687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:52:4e:50:ef:7a:de:1e:53:c9:65:44:5a:a2:
7a:a0:a9:35:27:9a:b6:37:88:bc:e8:55:d0:19:f4:
4b:e0:60:25:06:99:bb:3e:53:73:56:3e:0c:ec:e2:
2e:f5:16:de:33:cd:e4:45:f7:e6:55:a1:fa:d3:24:
4a:79:61:1c:68:4c:11:a7:9e:9f:ef:a5:18:27:75:
10:a4:43:78:f8:2e:5b:7d:2d:c1:3e:27:e5:20:87:
e2:2b:aa:a6:7c:ae:98:e0:dd:28:39:a8:2f:bb:cd:
49:38:4f:e4:4b:19:3f:b8:73:de:2b:2c:14:23:1b:
b1:54:ec:9a:b4:e7:45:0c:e7:ed:5f:ae:27:7f:d9:
39:5a:f3:92:c6:bf:39:11:77:19:49:e6:d4:47:b8:
be:50:f4:6b:b4:81:ff:51:24:33:c6:8b:31:ec:1e:
7a:ae:6f:14:e0:2f:d9:4a:3a:a8:34:af:89:d8:94:
23:e9:62:09:01:e8:35:4a:4f:9c:27:52:68:4b:54:
57:60:ce:1e:b9:08:6e:4d:fb:42:49:5a:6a:ad:c3:
58:3a:34:05:1c:ba:b7:da:92:f2:ab:bc:8d:5f:f9:
ed:2b:5f:32:00:4a:b7:3d:b4:3c:27:a7:1d:59:b2:
4d:ac:c4:8c:f0:44:c4:e9:89:a7:87:66:22:ab:45:
c0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:0E:35:11:CA:A9:48:FE:5C:E9:B0:0A:4F:ED:8B:56:64:CA:38:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/bcf4837b-705f-3ae0-a9a3-c8ce47882966.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl
X509v3 Authority Key Identifier:
keyid:96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer
sbgp-ipAddrBlock: critical
IPv4:
216.47.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:c2:a7:53:fb:1b:3b:5a:35:98:59:62:7c:17:08:39:bd:cb:
8d:d3:02:2a:fe:cd:53:6a:c9:66:8a:6d:41:ed:c3:db:89:62:
e1:47:81:66:22:9a:49:2e:1e:f9:09:f6:e1:8e:48:ca:df:02:
07:f5:e6:98:1b:c2:5e:b4:41:1b:a9:06:b6:ee:4f:21:62:c4:
b6:2d:0b:1b:20:ba:3c:67:15:30:e1:c7:15:57:11:41:3b:b2:
9b:48:a2:58:de:53:de:82:bf:69:c2:13:fe:cf:13:00:8e:25:
47:14:e2:08:aa:b4:98:78:28:03:e5:46:2e:d5:0f:ac:39:ff:
33:fe:ff:97:38:33:11:5d:cc:a7:7e:35:9b:61:7b:bf:8c:ba:
07:10:f2:6f:f0:d8:33:91:17:8d:dd:0a:5a:b8:df:c3:3f:97:
f0:7f:a8:f2:24:ce:51:21:75:08:98:bb:05:44:92:b1:d3:ee:
28:68:14:ca:8c:64:1d:c4:35:cf:da:9e:39:80:30:7a:23:f2:
c9:76:50:32:59:33:e4:bd:a5:3d:1b:50:19:56:b3:d8:c9:de:
b5:35:17:ce:8c:bc:d3:ee:03:10:84:7c:ef:af:d3:02:3d:0d:
fb:2e:ca:87:10:da:e3:9e:6e:a7:05:37:15:cb:2b:ab:a0:8b:
8f:a1:f9:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:35:01 2025 by rpki-client