Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/6704a8d1-6da5-334b-b43f-c6a6426940b7.roa
File: 6704a8d1-6da5-334b-b43f-c6a6426940b7.roa (raw, json)
Hash identifier: TGQtpb44/oL5e4DKfhVctZH51OZlG0C1ZBLgcjhOuPg=
Subject key identifier: 64:12:F3:85:7F:C3:39:0A:9F:0B:F1:D7:0E:F6:F3:B3:63:28:F8:E4
Certificate issuer: /CN=8a4c70a4-33da-4843-a3c7-c8f8d88d8035
Certificate serial: 010D0C9F432858493C0941994E5B16DDD30A60C0
Authority key identifier: 95:77:6A:09:B0:68:BA:99:B1:1C:E2:0C:CE:E3:00:FE:B6:52:AD:46
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/6704a8d1-6da5-334b-b43f-c6a6426940b7.roa
Signing time: Wed 19 Mar 2025 01:00:40 +0000
ROA not before: Wed 19 Mar 2025 01:00:40 +0000
ROA not after: Tue 17 Jun 2025 01:00:40 +0000
asID: 13576
IP address blocks: 204.15.52.0/22 maxlen: 22
204.15.52.0/23 maxlen: 23
204.15.52.0/24 maxlen: 24
204.15.53.0/24 maxlen: 24
204.15.54.0/23 maxlen: 23
204.15.54.0/24 maxlen: 24
204.15.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3c:09:41:99:4e:5b:16:dd:d3:0a:60:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a4c70a4-33da-4843-a3c7-c8f8d88d8035
Validity
Not Before: Mar 19 01:00:40 2025 GMT
Not After : Jun 17 01:00:40 2025 GMT
Subject: CN=46838608-2ad5-4e9e-8bba-75053a9f1caf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b2:90:0e:f9:d7:49:da:4b:11:f7:e4:9f:01:
96:6d:26:ad:46:50:8c:dc:5c:8d:1c:5d:a8:83:3b:
d6:97:a5:b1:53:cf:c4:a1:0d:89:01:03:df:e5:63:
71:8e:1c:88:c9:f3:dc:25:62:11:74:20:01:d8:8e:
3c:f8:13:5d:c1:39:d2:58:f9:70:c6:71:bd:de:24:
03:b6:ae:d7:10:85:b8:a8:5d:4d:36:dc:69:7d:5d:
65:31:5c:7b:70:4e:0c:20:61:40:29:95:b0:d5:91:
0d:4d:76:22:be:bd:a9:6e:e9:84:3c:cd:e9:2a:b0:
c0:a9:e9:60:cb:29:36:c1:56:ff:c3:88:11:27:b8:
5c:0e:1a:b2:04:21:40:f7:6a:85:12:69:3f:4f:5e:
ca:76:14:b6:24:06:6d:da:63:17:75:ec:c0:7d:06:
2f:f7:40:bd:74:5a:6e:74:98:99:c7:1d:6c:0d:70:
3a:0e:09:95:45:9a:20:b8:d2:33:6c:ef:48:28:38:
49:69:99:33:ac:d6:90:59:ca:2e:03:a4:c6:3e:f3:
00:c1:a2:a6:8c:5a:4c:d4:fb:aa:49:d0:eb:d0:02:
04:ec:31:32:78:c1:00:42:16:46:29:df:71:c3:f5:
4c:4a:84:d1:51:a0:3d:d6:cc:56:0b:63:f6:4d:f8:
1e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:12:F3:85:7F:C3:39:0A:9F:0B:F1:D7:0E:F6:F3:B3:63:28:F8:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/6704a8d1-6da5-334b-b43f-c6a6426940b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.crl
X509v3 Authority Key Identifier:
keyid:95:77:6A:09:B0:68:BA:99:B1:1C:E2:0C:CE:E3:00:FE:B6:52:AD:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.cer
sbgp-ipAddrBlock: critical
IPv4:
204.15.52.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:c4:8d:03:fe:a2:9b:7a:58:d8:cf:d9:de:b7:b3:8b:05:91:
19:89:b7:f1:fa:20:b5:9c:39:4f:6d:6e:95:ba:ba:45:2a:7d:
a4:a5:11:5c:55:43:f6:ac:45:d5:6c:f2:c3:5d:5f:97:6a:08:
c6:ad:20:bf:07:cf:a5:ff:e3:c4:97:d6:da:3e:9a:3e:12:50:
c0:0f:7a:d7:c1:7d:67:5c:27:c6:cb:b5:32:65:07:1f:2d:0f:
32:8c:2c:53:e5:5c:cb:4e:f3:33:aa:06:26:3b:c6:10:e5:aa:
9b:b6:0f:80:fa:ca:4a:e0:20:08:7b:3f:4f:0c:a9:65:87:c5:
32:94:63:9b:70:23:70:f5:e1:5e:8d:52:a0:f5:7f:69:79:5b:
48:59:b7:6b:d1:14:ac:09:0e:71:0a:6e:69:b2:73:ee:55:75:
1d:93:85:cd:76:66:25:a5:f0:38:89:60:ef:68:33:d9:52:58:
31:29:99:49:68:99:4b:dd:35:54:a7:3d:f4:d4:6a:62:05:54:
fa:d9:78:58:6b:81:58:35:21:43:c1:4d:e8:f4:ba:55:3f:ec:
e6:d2:80:78:cf:a6:59:7a:b3:6b:e2:50:f0:89:9d:dd:e6:13:
4f:30:97:11:99:29:99:ba:46:55:e7:2e:dd:04:9e:2b:b0:84:
1a:ff:a1:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:28:41 2025 by rpki-client