Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/15c06a4e-0bff-4d29-8219-f3995e34a55f/878c62c2-0412-387e-aee0-602cc4363a49.roa
File: 878c62c2-0412-387e-aee0-602cc4363a49.roa (raw, json)
Hash identifier: GZDVkoQslZqh9xZJw9rr74xtPzqvc1La0orVbIt8OI0=
Subject key identifier: 60:CA:25:C8:EE:BE:4A:E0:F8:45:EA:FE:17:79:CE:5C:36:7C:44:7F
Certificate issuer: /CN=15c06a4e-0bff-4d29-8219-f3995e34a55f
Certificate serial: 010D0C9F4328584839EACA5F59694A7B9F867200
Authority key identifier: 0C:EF:5B:7A:0A:2C:08:43:B3:19:9E:38:FD:C4:BA:3A:9E:4E:15:D2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/15c06a4e-0bff-4d29-8219-f3995e34a55f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/15c06a4e-0bff-4d29-8219-f3995e34a55f/878c62c2-0412-387e-aee0-602cc4363a49.roa
Signing time: Mon 16 Dec 2024 14:00:51 +0000
ROA not before: Mon 16 Dec 2024 14:00:51 +0000
ROA not after: Sun 16 Mar 2025 13:00:51 +0000
asID: 27011
IP address blocks: 209.196.215.0/24 maxlen: 24
209.196.216.0/24 maxlen: 24
209.196.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:39:ea:ca:5f:59:69:4a:7b:9f:86:72:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15c06a4e-0bff-4d29-8219-f3995e34a55f
Validity
Not Before: Dec 16 14:00:51 2024 GMT
Not After : Mar 16 13:00:51 2025 GMT
Subject: CN=17a4bae0-5eed-472e-a434-b229377ee148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6e:b9:85:82:b5:e3:e8:f2:d3:8a:49:5a:60:
33:2f:c2:5e:3d:b5:c3:ae:7d:54:3c:c9:83:4d:88:
b8:cf:ae:09:d6:83:db:2d:49:6b:2e:dc:2f:a1:27:
f0:ce:20:06:11:37:fa:bd:8f:71:4e:22:89:e9:ad:
3e:8b:38:59:12:71:fd:d2:d6:f2:91:84:76:03:80:
26:2d:1c:d5:6d:0a:a0:99:cf:9c:00:89:58:1c:9d:
1e:19:b8:35:cc:61:67:d1:17:19:c2:20:6d:e0:45:
c3:e8:1d:7b:94:b5:86:78:ac:3a:a7:0f:2d:4d:8a:
47:ef:d8:84:b1:69:79:56:7c:65:c7:04:3c:f1:bf:
61:0b:ad:e3:a9:ed:9a:9e:e6:f8:36:0c:cc:57:46:
f8:6e:ce:86:80:3b:8d:a1:16:63:0d:48:2c:c8:7c:
6d:00:b8:88:61:d2:6f:f4:36:19:9b:b5:75:22:0e:
ca:ba:ce:8d:d3:a4:d5:8a:b6:0f:6b:30:ee:62:4f:
98:bb:86:eb:8a:ea:15:18:8c:5c:b7:6d:ab:aa:e0:
ee:cd:23:9d:f5:6d:5d:7b:30:e1:de:64:d8:b2:b4:
4d:c2:1c:09:93:e8:09:a4:94:8b:f3:66:23:d0:7f:
14:2d:c2:e6:87:c6:6b:47:0e:09:f8:67:0a:25:b6:
98:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:CA:25:C8:EE:BE:4A:E0:F8:45:EA:FE:17:79:CE:5C:36:7C:44:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/15c06a4e-0bff-4d29-8219-f3995e34a55f/878c62c2-0412-387e-aee0-602cc4363a49.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/15c06a4e-0bff-4d29-8219-f3995e34a55f/15c06a4e-0bff-4d29-8219-f3995e34a55f.crl
X509v3 Authority Key Identifier:
keyid:0C:EF:5B:7A:0A:2C:08:43:B3:19:9E:38:FD:C4:BA:3A:9E:4E:15:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/15c06a4e-0bff-4d29-8219-f3995e34a55f.cer
sbgp-ipAddrBlock: critical
IPv4:
209.196.215.0-209.196.217.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:61:2b:ab:64:ed:37:8d:07:98:98:99:6c:37:26:b3:01:d3:
49:c1:dc:39:95:5d:b5:8b:d6:e9:1b:f2:29:b0:a7:58:a8:77:
a7:dc:a6:65:cd:db:65:0e:5c:a9:87:af:2c:e5:83:71:37:29:
4a:9d:ef:93:83:c5:72:53:cc:9b:28:ae:a3:b9:31:88:d8:b5:
84:8f:71:f5:86:22:c0:4a:de:cf:77:76:f5:67:6d:f8:68:3c:
de:d1:ac:03:76:c4:a5:48:cd:2b:46:1e:69:bd:19:84:57:b4:
ab:f9:ad:2c:32:fa:38:35:0a:0b:04:7f:5d:19:e0:1f:3a:66:
ef:35:42:18:55:02:0d:d6:00:b1:fb:fb:64:9f:67:34:10:d1:
bb:91:06:46:6a:12:b6:4d:e5:aa:ca:29:d2:a2:d2:ba:7a:c2:
e5:c0:88:7c:56:78:49:c4:4c:a9:1c:7d:0e:42:45:a3:8c:68:
c1:d7:24:85:98:7b:a4:39:a5:66:35:a2:b0:64:2f:53:c2:df:
ab:2c:1c:79:b4:6b:57:e5:f8:74:73:e0:4c:bd:fa:8e:1c:91:
b7:35:66:0e:3e:ba:ed:a7:60:31:e9:f6:df:34:ca:07:25:44:
f8:f6:f1:c4:a2:9e:58:29:85:ab:c9:04:b8:24:09:b5:b0:31:
59:15:79:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:58:13 2025 by rpki-client