Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/487d0e32-0ca9-3533-b4e3-dfb4edc0154c.roa
File: 487d0e32-0ca9-3533-b4e3-dfb4edc0154c.roa (raw, json)
Hash identifier: 0o9T6s6MoyeCBObMSRTNXbeJg0+kwu5g0bsFadWVnlw=
Subject key identifier: 06:46:FF:EA:3D:C6:A4:C2:90:22:35:D6:9C:88:AB:D5:23:0C:56:AB
Certificate issuer: /CN=6ce95cb2-398f-4574-bae0-522b74e03f71
Certificate serial: 010D0C9F4328584812D530A171C091868D945180
Authority key identifier: CC:A9:17:F8:E6:45:3A:31:6D:87:06:F6:D1:6E:36:3E:6C:84:7F:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/487d0e32-0ca9-3533-b4e3-dfb4edc0154c.roa
Signing time: Mon 02 Dec 2024 14:00:51 +0000
ROA not before: Mon 02 Dec 2024 14:00:51 +0000
ROA not after: Sun 02 Mar 2025 14:00:51 +0000
asID: 6939
IP address blocks: 204.15.220.0/22 maxlen: 24
208.86.120.0/21 maxlen: 24
2606:3840::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:12:d5:30:a1:71:c0:91:86:8d:94:51:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ce95cb2-398f-4574-bae0-522b74e03f71
Validity
Not Before: Dec 2 14:00:51 2024 GMT
Not After : Mar 2 14:00:51 2025 GMT
Subject: CN=363d42ea-825a-4632-b404-3f79ce1d84e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:50:7a:60:40:e6:7f:ef:73:79:52:25:ec:be:
6b:b4:eb:88:c6:9e:09:1a:96:6c:1d:2b:4d:69:9f:
51:b3:c7:15:83:5a:86:36:07:a3:fa:17:73:cf:cd:
70:f8:25:6e:3f:72:b4:09:66:a3:1d:32:86:30:59:
fd:ef:f4:99:1c:98:34:11:87:83:1c:e6:88:8f:12:
69:50:0c:e5:6e:ee:83:13:ed:b0:29:74:9f:b9:ba:
cc:0e:e5:ba:1d:6c:a7:b2:0c:36:14:c3:69:85:5f:
86:c3:56:04:5e:64:6d:91:3d:d1:36:3f:52:94:60:
f5:29:6e:64:08:93:3b:67:1c:25:81:53:2a:89:eb:
f4:cf:3c:ae:36:8b:4c:1b:fc:a0:21:85:d0:d3:ce:
4d:fa:a2:a8:5e:53:2b:f9:24:27:1d:b3:ab:da:9d:
8d:06:6f:29:cc:7e:c2:18:fe:9b:3e:de:4d:d1:8a:
e7:b3:2e:68:4b:53:e3:6b:76:67:f9:6b:aa:ac:70:
8a:88:44:1a:b9:be:4a:42:f8:54:7e:d2:8c:23:ea:
6f:2c:2a:a3:1d:f5:44:0c:f2:5c:fa:0b:d3:a9:a4:
1c:29:da:c1:1b:2c:1d:90:3f:71:d0:67:aa:eb:f0:
c7:88:8d:e1:b8:c0:d5:60:56:cc:ab:cf:be:46:52:
e7:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:46:FF:EA:3D:C6:A4:C2:90:22:35:D6:9C:88:AB:D5:23:0C:56:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/487d0e32-0ca9-3533-b4e3-dfb4edc0154c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/6ce95cb2-398f-4574-bae0-522b74e03f71.crl
X509v3 Authority Key Identifier:
keyid:CC:A9:17:F8:E6:45:3A:31:6D:87:06:F6:D1:6E:36:3E:6C:84:7F:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71.cer
sbgp-ipAddrBlock: critical
IPv4:
204.15.220.0/22
208.86.120.0/21
IPv6:
2606:3840::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:9f:07:51:8f:7e:6f:80:53:d8:f9:47:73:2e:0e:f2:2f:a9:
5c:86:f6:c2:c5:0e:90:b8:e3:9a:1c:5e:d6:ef:b3:c9:c1:10:
48:ce:ea:4a:70:0d:2e:43:c0:8c:66:c8:4c:04:8d:62:11:0e:
1a:d5:93:00:f4:0a:b9:29:48:f5:61:41:c1:d3:22:93:b2:7b:
72:2d:14:c0:9d:5f:58:ba:67:79:7e:9c:58:e1:f4:c1:0b:c3:
b2:18:21:14:00:a7:fd:db:4d:bb:76:fe:df:b2:cc:aa:32:f9:
f3:11:bb:8e:4e:17:ea:f2:7a:a8:5c:cc:d6:96:fe:4d:18:38:
ec:ee:6a:03:fe:4f:42:d9:58:5b:98:c0:a4:84:74:4b:59:ff:
81:e0:06:bc:c1:ca:82:d5:a2:23:8d:89:a2:1b:50:c9:7c:d0:
34:fc:1f:45:78:3e:97:07:a8:75:8b:84:d1:0b:e5:17:57:f7:
ec:76:fc:50:1c:3a:20:7b:a9:89:36:ac:03:b2:79:04:e7:62:
55:4c:e4:de:3a:9d:14:2e:09:10:38:2f:48:0b:57:2a:1d:c8:
d2:6d:da:c8:a1:0e:05:ef:ae:8b:bc:1b:da:ca:de:08:5b:f2:
7e:d8:37:7d:0e:28:b1:37:08:2a:04:a0:b7:8b:14:7d:da:16:
fa:af:1c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:07:07 2025 by rpki-client