Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/bd89da8b-bd32-33a2-8093-1b5f44bc7bf3.roa
File: bd89da8b-bd32-33a2-8093-1b5f44bc7bf3.roa (raw, json)
Hash identifier: B5tuswRn5zbnQSQJ6Q2gq86wJuuKAg7phIcTjJJOTzU=
Subject key identifier: FB:FE:FD:F3:41:1B:6E:8A:3F:A1:86:6F:A5:52:04:05:F6:10:D0:EC
Certificate issuer: /CN=6ce95cb2-398f-4574-bae0-522b74e03f71
Certificate serial: 010D0C9F43285848128ABF73CB2BBA2434F4BD00
Authority key identifier: CC:A9:17:F8:E6:45:3A:31:6D:87:06:F6:D1:6E:36:3E:6C:84:7F:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/bd89da8b-bd32-33a2-8093-1b5f44bc7bf3.roa
Signing time: Mon 02 Dec 2024 11:31:00 +0000
ROA not before: Mon 02 Dec 2024 11:31:00 +0000
ROA not after: Sun 02 Mar 2025 11:31:00 +0000
asID: 1299
IP address blocks: 204.15.220.0/22 maxlen: 24
208.86.120.0/21 maxlen: 24
2606:3840::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:12:8a:bf:73:cb:2b:ba:24:34:f4:bd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ce95cb2-398f-4574-bae0-522b74e03f71
Validity
Not Before: Dec 2 11:31:00 2024 GMT
Not After : Mar 2 11:31:00 2025 GMT
Subject: CN=ddf5ad5a-bf3f-43fa-bc4e-9ad26ea58d38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:7b:4f:91:46:96:11:8a:0a:a5:00:8e:4d:e0:
40:35:f5:ba:65:3d:43:96:99:32:1a:66:43:98:c1:
ac:c1:74:cd:75:78:aa:93:15:37:61:b3:fc:fc:9d:
0b:37:1f:77:d1:d8:3a:9c:f2:13:6d:e7:26:b6:2c:
2b:52:dc:c7:45:fa:8e:6f:85:f0:46:01:13:ba:97:
57:36:e7:00:ae:4c:dc:a9:ab:11:5b:de:57:c2:07:
a4:bb:af:a3:7e:df:57:ef:ed:68:95:c7:a7:12:99:
33:1c:61:f8:48:fd:c6:36:60:04:3b:e6:4c:d4:f3:
02:9a:54:18:07:a0:06:a3:6a:19:4b:01:54:3b:1a:
2e:e8:3e:46:37:cb:41:43:2d:93:27:b8:08:88:fd:
98:84:b8:72:72:35:60:60:d4:ad:a7:20:89:1f:63:
bd:9e:b8:d1:14:31:d0:a2:99:b8:12:e3:52:59:57:
73:ad:61:ac:73:ba:80:d4:69:e9:da:62:e0:81:c0:
d6:ac:1e:17:11:65:57:81:c4:07:03:32:4a:1b:85:
7f:63:2a:8f:a7:73:ff:82:7d:ea:9f:9f:f4:76:69:
ba:1c:29:06:f3:05:32:27:6e:49:6b:67:85:18:05:
83:c9:47:45:4c:2d:54:91:21:7a:3d:85:89:93:45:
53:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:FE:FD:F3:41:1B:6E:8A:3F:A1:86:6F:A5:52:04:05:F6:10:D0:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/bd89da8b-bd32-33a2-8093-1b5f44bc7bf3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/6ce95cb2-398f-4574-bae0-522b74e03f71.crl
X509v3 Authority Key Identifier:
keyid:CC:A9:17:F8:E6:45:3A:31:6D:87:06:F6:D1:6E:36:3E:6C:84:7F:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71.cer
sbgp-ipAddrBlock: critical
IPv4:
204.15.220.0/22
208.86.120.0/21
IPv6:
2606:3840::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:6a:1b:44:60:11:cc:5f:cc:ad:ec:a7:32:e1:58:bf:83:16:
83:47:25:23:6e:dc:97:4b:4c:e1:6c:25:8e:b0:db:ad:79:37:
e6:4a:fb:f1:1a:d5:f6:7a:fc:37:3d:99:1b:53:d9:c6:7c:cc:
11:01:7c:b7:0b:c0:15:95:35:30:7c:72:8c:e5:0c:cf:5e:1b:
7c:c4:4f:57:6e:1d:36:44:c2:e0:18:83:8c:cb:8f:1a:b8:68:
9d:0b:fa:ac:bb:c5:68:d7:f9:fe:a9:cc:b9:98:82:4d:e1:af:
1e:8b:dc:2d:6a:ab:1f:9d:aa:f5:bd:7a:fc:00:e8:44:ef:dd:
d2:5d:21:66:67:11:3f:56:fb:9b:81:1c:6a:e3:fb:90:f4:86:
44:a7:9f:d9:d4:01:0a:7f:c2:00:db:d3:e8:2f:bb:21:c9:40:
f6:3b:b0:73:65:e4:0a:20:92:2f:66:1a:93:2f:b8:69:39:ad:
77:6d:b0:47:60:a8:09:e0:ec:c1:39:5b:4a:bd:bb:46:4a:5e:
ab:1e:a4:ac:c9:f4:62:53:4a:e2:77:ea:eb:9a:ee:f2:ce:93:
16:e4:8f:58:c3:51:a6:cb:f5:4c:84:a9:a4:3b:e0:b3:a2:4a:
50:7d:18:82:5d:1f:b3:f8:13:55:d4:54:6c:41:5d:6a:75:c3:
3d:b9:97:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:04:15 2025 by rpki-client