Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/f285d95a-b783-3400-8db8-8b30c968f7c0.roa
File: f285d95a-b783-3400-8db8-8b30c968f7c0.roa (raw, json)
Hash identifier: 4MLY4O56m40DuYgDAp3+PQraULOA+cTd2jDq8+xzA0M=
Subject key identifier: 4A:60:A1:7A:40:E4:4A:D4:AF:4E:02:6F:8D:DD:52:10:3D:65:A9:12
Certificate issuer: /CN=6ce95cb2-398f-4574-bae0-522b74e03f71
Certificate serial: 010D0C9F4328584812D52BCAC04A7CF149439B00
Authority key identifier: CC:A9:17:F8:E6:45:3A:31:6D:87:06:F6:D1:6E:36:3E:6C:84:7F:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/f285d95a-b783-3400-8db8-8b30c968f7c0.roa
Signing time: Mon 02 Dec 2024 14:00:51 +0000
ROA not before: Mon 02 Dec 2024 14:00:51 +0000
ROA not after: Sun 02 Mar 2025 14:00:51 +0000
asID: 174
IP address blocks: 204.15.220.0/22 maxlen: 24
208.86.120.0/21 maxlen: 24
2606:3840::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:12:d5:2b:ca:c0:4a:7c:f1:49:43:9b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ce95cb2-398f-4574-bae0-522b74e03f71
Validity
Not Before: Dec 2 14:00:51 2024 GMT
Not After : Mar 2 14:00:51 2025 GMT
Subject: CN=9695b17b-b6b9-4974-8ddc-48d88abe3ed3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:98:23:97:dd:60:ff:e8:ca:de:f4:23:a0:30:
a0:d1:97:ed:a6:d7:df:53:84:6e:81:90:a0:f0:25:
48:c8:95:9a:2f:47:e9:77:9f:20:0e:68:4e:39:dc:
83:d1:c6:bb:6f:63:0a:8d:9d:7e:c3:8f:8b:bc:56:
86:a1:36:ee:5c:e2:c0:aa:ef:97:40:13:cc:47:ed:
98:f8:99:10:46:07:f1:d8:6f:bc:ed:9e:b4:bc:13:
49:40:ed:b1:17:9a:1c:7c:d6:b5:05:8c:bf:25:55:
32:d8:1b:7b:30:f8:63:2f:ef:5b:f9:dc:c8:37:e9:
84:12:ea:d2:de:c2:df:9a:a6:68:76:0d:72:2a:3d:
b7:0e:d9:e7:8a:c8:a2:c4:b8:13:7e:e7:4a:fb:8f:
f1:d4:21:d0:4c:a5:0a:60:e0:28:d5:76:3f:7c:85:
ef:e6:9e:5c:42:b0:14:7f:a9:c9:d9:6a:bb:c9:aa:
83:3c:cd:42:61:37:6c:e8:21:97:bb:9c:92:8d:d9:
cd:03:96:24:1c:86:04:ba:a1:1d:51:4c:c9:0a:4d:
01:90:1c:7a:c7:54:1f:67:6f:e5:96:66:cf:11:62:
bb:55:c7:d1:fb:5d:a1:c7:74:73:78:eb:f7:c1:df:
c0:fb:ce:3f:aa:30:52:6b:2b:10:e7:5d:56:c9:97:
77:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:60:A1:7A:40:E4:4A:D4:AF:4E:02:6F:8D:DD:52:10:3D:65:A9:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/f285d95a-b783-3400-8db8-8b30c968f7c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/6ce95cb2-398f-4574-bae0-522b74e03f71.crl
X509v3 Authority Key Identifier:
keyid:CC:A9:17:F8:E6:45:3A:31:6D:87:06:F6:D1:6E:36:3E:6C:84:7F:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71.cer
sbgp-ipAddrBlock: critical
IPv4:
204.15.220.0/22
208.86.120.0/21
IPv6:
2606:3840::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:ab:9d:a6:1b:33:72:6e:10:c0:38:e4:ad:d8:84:53:57:a5:
a4:a9:4b:59:e2:47:fc:bf:4d:f9:32:6b:92:23:5b:27:41:b8:
96:56:03:73:85:ab:ab:6a:b9:45:69:48:0f:61:3d:d1:b1:5f:
6b:01:02:93:ed:ee:40:9e:c9:b9:c2:d9:d9:26:b3:95:21:53:
fb:48:f2:d4:99:b6:84:10:a1:ac:4b:0b:e8:05:46:ad:0f:7d:
49:0c:d3:e1:65:4b:9e:fc:c4:2c:f1:83:0f:6d:4d:ef:78:20:
09:ee:4f:fe:e0:a0:5c:ad:f8:b5:79:a3:88:dc:ea:68:0d:f4:
b3:59:f0:0a:72:66:37:df:7a:46:e1:da:e4:97:2c:37:64:2c:
da:35:d6:4d:c1:52:fb:ba:a7:f3:80:2d:4d:97:4f:77:c0:52:
4b:4f:e1:86:f8:8f:b9:38:7b:a0:85:df:9f:77:f3:cf:b9:4e:
a1:da:aa:b5:54:1b:35:5d:d0:21:41:58:6d:6d:c9:cf:1f:f7:
69:4a:a0:59:e3:12:16:11:71:2b:23:a3:a6:65:55:f2:5a:8c:
10:be:7d:70:3a:5f:1c:1d:dc:e5:81:e6:57:71:e0:de:9b:56:
dd:2c:fe:6c:b9:e2:2b:fb:bd:e3:6f:b7:32:74:99:be:1e:54:
50:70:ed:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:11:25 2025 by rpki-client