Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/4b4d699c-a075-36cf-bad2-252163d3c3d6.roa
File: 4b4d699c-a075-36cf-bad2-252163d3c3d6.roa (raw, json)
Hash identifier: 3OQKD7E70mV7nULKlIcXq30aRSa110aRorgJQIlWRnI=
Subject key identifier: 2B:0C:75:23:78:FA:B2:66:F8:95:54:70:C6:9E:E1:88:BB:73:CB:11
Certificate issuer: /CN=bf7d171d-7917-4a21-b6cc-8a27039802a5
Certificate serial: 010D0C9F4328584835BA979C909E467EA0987E00
Authority key identifier: AD:F6:BD:F8:A9:46:C0:37:45:CB:6D:47:C5:6C:D2:C7:15:EF:8A:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/4b4d699c-a075-36cf-bad2-252163d3c3d6.roa
Signing time: Sun 15 Dec 2024 02:00:39 +0000
ROA not before: Sun 15 Dec 2024 02:00:39 +0000
ROA not after: Sat 15 Mar 2025 01:00:39 +0000
asID: 13415
IP address blocks: 204.15.84.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:35:ba:97:9c:90:9e:46:7e:a0:98:7e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf7d171d-7917-4a21-b6cc-8a27039802a5
Validity
Not Before: Dec 15 02:00:39 2024 GMT
Not After : Mar 15 01:00:39 2025 GMT
Subject: CN=7c791117-dba3-447f-a511-6f7230d86091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:7f:ff:e5:37:83:a4:d5:8e:2b:44:47:8b:71:
73:45:3d:57:4a:cd:03:f3:96:6d:bf:56:02:7e:e3:
d9:1c:03:c2:a8:51:4f:f5:d7:e3:74:ab:21:3e:96:
72:78:be:40:17:ac:6d:50:d1:7a:d9:e0:aa:a0:fe:
d6:d4:23:44:14:0f:e5:dd:cd:3a:b2:99:4c:e9:44:
d1:6a:02:7e:13:fd:f0:60:09:56:68:be:0f:24:55:
64:3b:8f:a6:14:d4:4a:27:6c:4e:ef:a3:41:7b:3b:
3b:35:6d:23:68:bb:78:56:37:0e:99:a8:ab:d3:b8:
19:b9:9a:08:5a:a7:08:55:52:c3:88:55:d6:86:de:
23:bb:0d:02:53:4f:1d:6a:c9:7f:b2:5b:3b:e0:a1:
60:dc:1f:28:b9:fb:17:c6:81:7e:64:f6:3e:a3:2f:
25:a1:8b:0a:99:b4:5b:7b:5f:2b:5e:a5:0c:82:4b:
a6:b1:76:e8:9f:c1:32:7e:3a:d5:ca:68:03:3d:09:
ed:e1:2a:aa:be:e0:5c:8f:e1:af:18:c9:27:de:77:
ae:ba:1a:0e:69:4c:76:3c:f8:1f:c6:41:54:bc:c0:
30:d3:d7:2a:d3:ea:c7:97:b0:7d:18:b7:b6:8f:44:
47:51:15:4a:2a:eb:83:04:67:0e:47:24:77:54:2d:
39:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:0C:75:23:78:FA:B2:66:F8:95:54:70:C6:9E:E1:88:BB:73:CB:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/4b4d699c-a075-36cf-bad2-252163d3c3d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/bf7d171d-7917-4a21-b6cc-8a27039802a5.crl
X509v3 Authority Key Identifier:
keyid:AD:F6:BD:F8:A9:46:C0:37:45:CB:6D:47:C5:6C:D2:C7:15:EF:8A:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5.cer
sbgp-ipAddrBlock: critical
IPv4:
204.15.84.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:ef:24:7b:5c:e3:2f:3d:03:84:07:20:ef:db:04:af:3f:2d:
10:b5:6f:de:07:ff:0b:07:66:91:f0:64:d8:56:cc:b3:f0:9f:
83:3a:b2:c6:6c:cd:48:c7:1c:91:84:75:31:ca:b6:6a:bb:de:
2c:68:b7:9a:a6:ca:46:c4:d3:ba:f1:f5:da:84:29:81:7c:b6:
c4:3f:d9:6d:26:a5:6e:e0:0b:ce:2b:61:41:1d:f6:1c:fd:0a:
fb:2c:33:14:c0:1f:f6:8a:be:f9:79:0f:3f:b1:3a:cc:63:cb:
ae:f1:20:f6:e1:05:b8:51:d6:c0:a4:78:f6:6e:09:2c:c5:fe:
aa:22:32:37:9d:e2:1c:6b:63:cd:4f:57:56:1e:e3:2a:12:9b:
75:be:2f:5a:79:91:dd:0f:1e:20:99:2c:24:cf:96:ca:dc:fb:
29:a9:de:f5:b1:1f:fc:5e:83:45:e2:5e:60:70:31:05:af:a5:
ce:9b:1f:67:9e:e3:bf:4d:b0:5b:59:87:a1:ea:e2:04:bb:c2:
69:0f:0e:f1:29:78:0f:a9:af:66:27:3b:58:8b:4c:cb:e5:27:
29:9d:3f:29:2a:50:97:ad:4d:15:11:9e:55:2f:af:67:6c:20:
41:33:58:04:73:4c:e3:be:f3:ed:5e:e1:41:05:c8:54:aa:7f:
eb:4f:d1:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:47:25 2025 by rpki-client