Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/3880b21f-244e-35e6-a256-bd5d4c123331.roa
File: 3880b21f-244e-35e6-a256-bd5d4c123331.roa (raw, json)
Hash identifier: niOpyj8cyi3UlM5kMS6FOchO/imXITWbMd140LbOmd8=
Subject key identifier: 6F:EA:85:B7:E0:4A:4C:44:66:BB:E9:AC:0D:FD:11:0C:22:C2:0A:41
Certificate issuer: /CN=8a4c70a4-33da-4843-a3c7-c8f8d88d8035
Certificate serial: 010D0C9F432858485CD028F69DB6107BE5E3DA80
Authority key identifier: 95:77:6A:09:B0:68:BA:99:B1:1C:E2:0C:CE:E3:00:FE:B6:52:AD:46
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/3880b21f-244e-35e6-a256-bd5d4c123331.roa
Signing time: Sun 29 Dec 2024 02:00:39 +0000
ROA not before: Sun 29 Dec 2024 02:00:39 +0000
ROA not after: Sat 29 Mar 2025 01:00:39 +0000
asID: 15204
IP address blocks: 204.15.52.0/22 maxlen: 22
204.15.52.0/23 maxlen: 23
204.15.52.0/24 maxlen: 24
204.15.53.0/24 maxlen: 24
204.15.54.0/23 maxlen: 23
204.15.54.0/24 maxlen: 24
204.15.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5c:d0:28:f6:9d:b6:10:7b:e5:e3:da:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a4c70a4-33da-4843-a3c7-c8f8d88d8035
Validity
Not Before: Dec 29 02:00:39 2024 GMT
Not After : Mar 29 01:00:39 2025 GMT
Subject: CN=bbd4cac9-7b5f-42cd-9dfb-2d034c33afdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f8:26:5e:bc:8d:90:f2:2c:d4:61:78:9f:cc:
87:42:e7:57:fe:87:41:41:00:1c:d5:23:2f:e6:d4:
91:04:c2:78:1e:04:da:ae:75:ad:30:8e:a3:b8:38:
fc:a1:f0:2d:26:6d:7b:7f:81:12:1a:76:2f:e0:30:
f5:51:db:73:e5:64:20:c0:c2:b7:71:08:85:ad:5d:
02:6a:6b:19:da:ff:ef:d0:2f:c5:7a:0e:62:85:9e:
f1:a0:d9:c6:92:eb:38:68:e9:73:d6:3b:a9:fa:91:
45:d6:bc:3d:79:91:4c:ee:02:a8:ca:d4:37:29:93:
7a:91:ad:c7:89:95:ad:77:d2:32:e7:5a:b4:0b:61:
5f:16:40:e5:43:18:43:2d:cc:65:74:fd:88:29:53:
8c:7e:22:1c:05:ff:7f:3c:64:bd:69:e7:61:44:59:
59:3e:d6:a7:b4:c3:38:d0:cf:d0:b8:8b:c0:9c:11:
70:15:ca:ee:05:1c:d9:13:3d:6a:87:cf:0a:97:92:
d1:b7:21:78:9d:e8:5c:0e:7b:85:16:63:de:bd:54:
a6:42:a5:4f:bc:c4:27:cc:6d:81:02:1e:39:8b:fc:
d6:c8:61:f0:f7:d5:21:af:9d:82:04:1f:8c:cc:6d:
da:13:59:12:50:52:61:35:8a:85:95:64:34:1b:d9:
b9:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:EA:85:B7:E0:4A:4C:44:66:BB:E9:AC:0D:FD:11:0C:22:C2:0A:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/3880b21f-244e-35e6-a256-bd5d4c123331.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.crl
X509v3 Authority Key Identifier:
keyid:95:77:6A:09:B0:68:BA:99:B1:1C:E2:0C:CE:E3:00:FE:B6:52:AD:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.cer
sbgp-ipAddrBlock: critical
IPv4:
204.15.52.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:ed:6a:78:64:3e:b1:f8:ed:cf:d0:e2:a6:97:34:7b:82:6f:
5c:23:d5:78:7c:f9:99:b0:66:0d:9d:cc:88:7d:4e:8d:b3:b6:
81:11:eb:4f:b5:09:a4:45:ba:ee:f4:77:b7:86:47:48:cb:df:
46:e2:c7:53:e1:ca:1d:5c:1f:55:c5:68:69:d5:9d:cc:a7:97:
59:56:16:ae:78:9b:a0:82:14:c1:81:3d:1f:65:49:b2:a3:b7:
6e:a6:24:10:85:c9:07:17:3a:61:88:b5:47:95:f2:5f:5e:bd:
d2:55:26:35:8f:2f:28:39:2c:70:68:6c:9f:a1:1d:64:48:21:
97:89:92:4a:2b:f7:28:2f:63:16:7b:5a:e3:f2:65:6b:8c:f9:
41:16:5d:22:16:bb:5c:10:55:06:9e:e9:1b:4f:d9:f1:7e:2b:
71:5e:a5:84:f8:f7:2d:fa:83:12:51:65:fa:a8:89:fc:cf:82:
99:23:ca:6a:91:bb:71:ff:aa:ec:03:ce:fe:9f:e8:1d:51:d3:
32:ee:60:e7:8c:24:bc:a4:a1:0e:df:78:1b:49:7f:89:1f:a7:
10:ac:ff:f4:78:1d:12:66:59:dc:2a:4b:a9:00:fb:93:12:3c:
28:ec:3d:70:f3:a3:d6:0e:51:ba:2e:7c:65:c2:75:73:1a:f1:
b5:b3:f3:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:02:46 2025 by rpki-client