Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/6704a8d1-6da5-334b-b43f-c6a6426940b7.roa
File: 6704a8d1-6da5-334b-b43f-c6a6426940b7.roa (raw, json)
Hash identifier: gFN9fgvRYI9f2XOwKEPCjSTz0a09rv3DEoUnE2UwI/I=
Subject key identifier: 55:0A:41:21:44:7C:65:3C:1B:FB:C5:B0:90:A2:6D:B5:E6:F3:97:B2
Certificate issuer: /CN=8a4c70a4-33da-4843-a3c7-c8f8d88d8035
Certificate serial: 010D0C9F432858485CD028D58F1849B4286C6F80
Authority key identifier: 95:77:6A:09:B0:68:BA:99:B1:1C:E2:0C:CE:E3:00:FE:B6:52:AD:46
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/6704a8d1-6da5-334b-b43f-c6a6426940b7.roa
Signing time: Sun 29 Dec 2024 02:00:39 +0000
ROA not before: Sun 29 Dec 2024 02:00:39 +0000
ROA not after: Sat 29 Mar 2025 01:00:39 +0000
asID: 13576
IP address blocks: 204.15.52.0/22 maxlen: 22
204.15.52.0/23 maxlen: 23
204.15.52.0/24 maxlen: 24
204.15.53.0/24 maxlen: 24
204.15.54.0/23 maxlen: 23
204.15.54.0/24 maxlen: 24
204.15.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5c:d0:28:d5:8f:18:49:b4:28:6c:6f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a4c70a4-33da-4843-a3c7-c8f8d88d8035
Validity
Not Before: Dec 29 02:00:39 2024 GMT
Not After : Mar 29 01:00:39 2025 GMT
Subject: CN=eaba88aa-c1c1-4e97-af33-ef0629ea6e37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c9:ab:85:bf:ad:0d:18:ea:5e:d1:b9:0a:13:
d0:be:49:50:c6:58:de:8b:5f:05:c8:94:79:95:b8:
91:d1:12:30:28:9e:ae:c6:4d:0f:46:99:dc:75:1e:
86:dc:c3:41:fe:63:67:1c:ef:cf:d1:52:44:32:e9:
c2:21:d7:02:af:69:ac:1a:75:c9:39:44:ae:8e:1c:
56:82:3b:5f:11:4e:f7:13:79:24:a3:65:11:2e:58:
b9:93:8e:f6:be:18:37:f8:f6:d3:c3:c5:1c:0f:d1:
a0:90:28:a4:ee:f6:ae:bc:40:a6:04:d5:e8:f6:9c:
86:40:3d:a3:bc:76:8a:81:2e:1c:0e:a3:07:21:b0:
93:2a:82:88:c3:30:41:5f:07:a7:d0:e8:f3:72:7d:
f4:b8:d1:92:72:11:08:ff:db:da:e0:68:4d:b6:64:
0b:a0:a5:ea:7e:d1:93:34:5f:29:00:0f:65:9a:99:
48:c2:d6:c7:aa:98:bb:5c:4c:89:3c:2c:fd:94:fc:
63:d4:29:e4:7e:27:37:5d:f8:8b:50:3a:a6:23:c3:
10:24:c3:ea:4a:84:5d:e1:d3:64:7b:51:fd:dd:44:
f8:cd:b8:88:df:60:16:9d:56:f5:69:c4:29:d9:e5:
6b:2c:bf:dc:36:e8:4a:86:17:01:64:c0:b3:36:7e:
92:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:0A:41:21:44:7C:65:3C:1B:FB:C5:B0:90:A2:6D:B5:E6:F3:97:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/6704a8d1-6da5-334b-b43f-c6a6426940b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.crl
X509v3 Authority Key Identifier:
keyid:95:77:6A:09:B0:68:BA:99:B1:1C:E2:0C:CE:E3:00:FE:B6:52:AD:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.cer
sbgp-ipAddrBlock: critical
IPv4:
204.15.52.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:dd:b4:7e:7a:94:e6:8e:6e:54:b6:f2:5a:fb:28:b3:03:a9:
7a:cb:ab:25:b8:d4:fa:76:61:b0:aa:92:57:ab:35:79:ab:40:
e5:12:c9:2e:9b:63:0c:f4:28:7c:34:e7:06:dd:06:da:10:f4:
a3:0e:30:6f:32:33:38:a3:b9:7a:35:48:00:46:47:c3:da:04:
79:a8:ec:60:09:36:b1:2a:aa:75:45:93:d8:d4:55:ae:0f:a5:
33:4f:76:cc:1f:e3:28:1c:27:33:d2:8c:88:ea:24:db:c3:02:
2f:c5:63:59:9c:9c:fc:05:ee:a8:28:ee:36:67:a7:6f:f9:7f:
f1:28:20:e6:bf:b6:7a:84:63:ba:c1:80:37:64:e6:dd:e9:f0:
2b:b3:7a:31:8e:07:1b:7a:8d:d3:4c:ec:c8:45:f7:6e:6c:f3:
0b:9e:db:05:46:d6:67:b6:d5:10:4e:5f:9c:04:b3:5f:05:0a:
16:2c:91:0a:ec:4f:19:6c:8f:f8:df:f1:8b:f4:ca:b0:b2:57:
a5:aa:e0:85:fd:d9:f1:8c:1e:fa:78:e4:92:c2:87:8f:56:44:
bc:0f:af:3e:4f:72:0b:10:70:2e:14:77:13:51:10:d4:ba:3a:
e1:b9:b7:53:9b:1e:83:b3:d7:12:c0:07:f6:ca:fa:f6:06:b0:
e3:25:ff:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:16:25 2025 by rpki-client