Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/33028ba9-27e2-3b38-90b7-315e62ccf89c.roa
File: 33028ba9-27e2-3b38-90b7-315e62ccf89c.roa (raw, json)
Hash identifier: tkCtwJHUFBx5KBwOTldLC9gsPl5+iN2N4EHa5/S9AtM=
Subject key identifier: C7:3D:40:D6:5A:7B:36:EE:19:38:05:73:BA:60:F6:04:A9:6A:09:98
Certificate issuer: /CN=6ce95cb2-398f-4574-bae0-522b74e03f71
Certificate serial: 010D0C9F4328584812D52BDF5A4A6F56C2D05880
Authority key identifier: CC:A9:17:F8:E6:45:3A:31:6D:87:06:F6:D1:6E:36:3E:6C:84:7F:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/33028ba9-27e2-3b38-90b7-315e62ccf89c.roa
Signing time: Mon 02 Dec 2024 14:00:51 +0000
ROA not before: Mon 02 Dec 2024 14:00:51 +0000
ROA not after: Sun 02 Mar 2025 14:00:51 +0000
asID: 31915
IP address blocks: 204.15.220.0/22 maxlen: 24
208.86.120.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:12:d5:2b:df:5a:4a:6f:56:c2:d0:58:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ce95cb2-398f-4574-bae0-522b74e03f71
Validity
Not Before: Dec 2 14:00:51 2024 GMT
Not After : Mar 2 14:00:51 2025 GMT
Subject: CN=f69fd4de-91cd-4fd0-84ea-c03e38a7b59c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:d0:87:28:7a:50:cf:6f:a8:28:e9:f1:ef:47:
e5:6c:08:b1:52:5d:21:b3:9e:2c:57:a3:1d:25:ec:
23:be:19:1b:0a:ba:4e:f0:6e:4c:54:85:d7:fb:7d:
78:70:e3:b4:24:4c:7a:50:9a:a5:b3:d4:75:f1:7e:
34:df:bf:28:bf:52:8d:4a:64:10:69:21:af:33:91:
2a:00:c1:ae:4c:54:d0:9d:47:94:1a:71:d5:fc:69:
0a:90:e0:08:35:9e:3f:b7:23:f6:92:7b:9b:e1:b8:
c7:9b:50:5e:e3:13:17:be:7c:a4:58:a3:f7:5c:f6:
cf:c2:ec:23:da:de:b0:ff:39:83:e2:b6:27:14:d4:
5b:86:d6:4f:d9:7a:e6:15:03:60:af:b2:b9:f7:c8:
13:2a:a1:7d:34:3e:18:2e:74:ae:1d:0b:c8:e2:a4:
a0:68:ad:ab:18:c9:c1:9a:4a:b9:1d:1f:21:87:a6:
b7:e9:94:02:5e:52:2d:06:01:1c:0e:cf:53:c0:3b:
46:b3:b1:6f:ba:b4:a8:05:e8:0c:de:62:dd:31:e9:
e3:26:56:c8:76:29:29:73:aa:9f:9d:f5:2d:eb:d5:
dc:bc:0e:12:c4:21:d1:97:57:15:53:06:bc:4d:13:
44:0f:81:fd:68:94:e9:82:37:b0:5c:9f:7e:da:ac:
0e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:3D:40:D6:5A:7B:36:EE:19:38:05:73:BA:60:F6:04:A9:6A:09:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/33028ba9-27e2-3b38-90b7-315e62ccf89c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/6ce95cb2-398f-4574-bae0-522b74e03f71.crl
X509v3 Authority Key Identifier:
keyid:CC:A9:17:F8:E6:45:3A:31:6D:87:06:F6:D1:6E:36:3E:6C:84:7F:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71.cer
sbgp-ipAddrBlock: critical
IPv4:
204.15.220.0/22
208.86.120.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:e8:b0:4c:c5:9a:ee:bc:1e:6c:d8:b6:54:65:00:eb:d3:78:
da:ee:1d:a7:bc:53:c7:67:b9:69:09:b5:24:a3:22:01:d0:e7:
c2:97:a8:53:3c:8d:9e:e7:ce:29:84:c3:32:94:c2:cf:95:33:
bf:1d:13:e9:05:a7:98:b5:85:a0:4b:1a:dc:8a:3c:09:9b:b5:
48:8c:08:63:62:19:48:ae:f6:0a:2b:5a:e6:55:bb:fe:5b:62:
25:5e:a9:a4:56:4b:44:d5:ce:af:90:11:6b:ad:64:48:25:b5:
7f:65:b3:a1:7c:63:06:4a:97:29:74:e2:55:3a:63:68:31:61:
1c:a4:78:69:f8:67:fe:70:5e:66:0d:a1:66:ab:00:2f:8a:bc:
57:d9:bb:9d:ba:d7:fb:0e:f5:7c:e7:9d:96:f2:e5:be:a7:17:
64:40:ba:f8:e8:78:6c:9f:11:db:56:08:f9:1b:16:a6:6c:58:
24:70:c8:5c:5c:2c:5b:43:de:a2:1e:a5:f4:e8:5a:ef:e4:39:
1e:8f:88:aa:fa:db:35:01:fd:ac:47:43:cb:24:e4:14:77:34:
94:2a:73:e0:5b:79:80:a5:da:2f:a2:40:79:3f:8f:69:c1:69:
fa:ae:e6:a4:78:af:79:50:b3:97:67:77:13:aa:b7:f9:e9:63:
f8:dc:f8:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:14:36 2025 by rpki-client