Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/487d0e32-0ca9-3533-b4e3-dfb4edc0154c.roa
File: 487d0e32-0ca9-3533-b4e3-dfb4edc0154c.roa (raw, json)
Hash identifier: KK74hvXK0VHPns9qpABDPN22fuB2xEZBk0eJ2ydpKB8=
Subject key identifier: AF:6B:2E:27:FA:06:FF:25:A5:1C:CD:B6:43:A1:8F:A1:8B:9E:01:67
Certificate issuer: /CN=6ce95cb2-398f-4574-bae0-522b74e03f71
Certificate serial: 010D0C9F43285848F22C65A97635C118E21792E0
Authority key identifier: CC:A9:17:F8:E6:45:3A:31:6D:87:06:F6:D1:6E:36:3E:6C:84:7F:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/487d0e32-0ca9-3533-b4e3-dfb4edc0154c.roa
Signing time: Thu 20 Feb 2025 14:00:52 +0000
ROA not before: Thu 20 Feb 2025 14:00:52 +0000
ROA not after: Wed 21 May 2025 13:00:52 +0000
asID: 6939
IP address blocks: 204.15.220.0/22 maxlen: 24
208.86.120.0/21 maxlen: 24
2606:3840::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f2:2c:65:a9:76:35:c1:18:e2:17:92:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ce95cb2-398f-4574-bae0-522b74e03f71
Validity
Not Before: Feb 20 14:00:52 2025 GMT
Not After : May 21 13:00:52 2025 GMT
Subject: CN=60c1add6-624d-42c0-a83f-fdbe816b97f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:10:9c:eb:92:ff:23:6c:0d:fe:99:c4:3c:f3:
ef:44:ad:77:70:98:cd:30:b4:b1:28:f2:aa:7e:4f:
6c:3d:81:e9:15:ea:9e:07:3a:25:6b:68:1d:cc:fe:
5a:6b:4d:57:5a:2d:07:51:64:e9:30:8b:0a:38:38:
99:41:c9:7b:05:d7:5f:39:2a:0e:bf:fd:2d:5e:f3:
c6:e0:ee:18:2c:91:4d:62:13:ad:59:73:57:63:70:
6f:d9:c0:50:ac:4b:83:7b:f5:3e:be:80:39:0b:af:
57:3a:04:01:4a:7f:f4:c3:10:60:87:8c:15:00:f1:
08:49:d6:48:f1:0e:fd:30:f8:85:de:db:0c:d6:6a:
66:c2:fe:29:16:37:5d:f7:c2:43:c2:c0:08:8e:bb:
0c:e5:ce:3f:99:46:11:23:ab:06:89:eb:67:95:ab:
cc:7d:2f:8f:85:06:0b:f5:44:a7:7a:cc:b3:f5:90:
a0:cb:ba:42:3b:88:83:5e:d0:86:7e:e2:4f:d2:59:
d6:61:07:cf:a1:d2:47:dd:01:93:26:d6:b9:88:64:
0a:a0:c9:1e:94:73:68:18:c4:74:ee:bb:8a:a1:aa:
08:1a:c8:ad:de:d1:ae:0f:4f:9c:6f:46:56:42:9d:
bd:2d:b9:58:5b:e7:17:9a:9f:df:09:4e:ed:21:c7:
d4:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:6B:2E:27:FA:06:FF:25:A5:1C:CD:B6:43:A1:8F:A1:8B:9E:01:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/487d0e32-0ca9-3533-b4e3-dfb4edc0154c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/6ce95cb2-398f-4574-bae0-522b74e03f71.crl
X509v3 Authority Key Identifier:
keyid:CC:A9:17:F8:E6:45:3A:31:6D:87:06:F6:D1:6E:36:3E:6C:84:7F:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71.cer
sbgp-ipAddrBlock: critical
IPv4:
204.15.220.0/22
208.86.120.0/21
IPv6:
2606:3840::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:0f:f5:6f:f0:e3:44:dd:b0:cc:09:49:82:28:d8:df:41:3d:
51:7c:8d:92:db:60:55:4c:71:25:50:fd:c3:e0:a6:45:c4:9c:
72:de:ef:85:d4:3e:8c:21:73:a4:73:b5:cd:50:db:20:21:79:
cf:af:f8:7e:21:6f:b5:ba:00:3b:a3:62:7b:13:f2:5d:0e:f3:
f7:79:10:f9:13:23:ec:04:09:8f:5b:3b:3c:b2:ac:62:16:23:
5f:fb:97:5e:6e:f0:3a:42:3f:54:5a:10:f5:46:8d:fb:9e:c3:
fc:9c:7c:67:c7:b0:b3:c4:48:5c:df:d4:29:d4:58:18:51:a9:
8c:4a:4a:0d:00:63:37:c4:b4:06:cc:f6:6f:14:1e:0e:03:08:
60:07:7e:b0:bf:0e:78:50:f4:93:dd:aa:40:87:20:13:eb:35:
36:8d:94:ce:3d:d1:02:8d:32:02:6e:92:20:1e:96:ad:d6:b3:
a2:3a:19:42:89:e4:9c:e6:b9:a4:0a:bf:9d:89:7b:a8:3b:dd:
c4:30:30:bb:a8:eb:4e:2b:1f:2f:21:c4:88:92:83:f2:72:e1:
b1:b8:cb:dd:f8:c6:22:a6:d1:96:8c:d6:38:d4:a5:12:d5:7e:
d5:27:4c:28:61:5c:8c:73:dc:d9:74:54:98:5f:5b:51:2f:ed:
2e:5e:e6:f3
-----BEGIN CERTIFICATE-----
MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWEjyLGWpdjXBGOIXkuAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmNlOTVjYjItMzk4Zi00NTc0LWJhZTAtNTIyYjc0ZTAz
ZjcxMB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk
NjBjMWFkZDYtNjI0ZC00MmMwLWE4M2YtZmRiZTgxNmI5N2Y5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxCc65L/I2wN/pnEPPPvRK13cJjNMLSxKPKq
fk9sPYHpFeqeBzola2gdzP5aa01XWi0HUWTpMIsKODiZQcl7BddfOSoOv/0tXvPG
4O4YLJFNYhOtWXNXY3Bv2cBQrEuDe/U+voA5C69XOgQBSn/0wxBgh4wVAPEISdZI
8Q79MPiF3tsM1mpmwv4pFjdd98JDwsAIjrsM5c4/mUYRI6sGietnlavMfS+PhQYL
9USnesyz9ZCgy7pCO4iDXtCGfuJP0lnWYQfPodJH3QGTJta5iGQKoMkelHNoGMR0
7ruKoaoIGsit3tGuD0+cb0ZWQp29LblYW+cXmp/fCU7tIcfU9wIDAQABo4IDajCC
A2YwHQYDVR0OBBYEFK9rLif6Bv8lpRzNtkOhj6GLngFnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82Y2U5
NWNiMi0zOThmLTQ1NzQtYmFlMC01MjJiNzRlMDNmNzEvNDg3ZDBlMzItMGNhOS0z
NTMzLWI0ZTMtZGZiNGVkYzAxNTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmNlOTVjYjItMzk4Zi00NTc0LWJh
ZTAtNTIyYjc0ZTAzZjcxLzZjZTk1Y2IyLTM5OGYtNDU3NC1iYWUwLTUyMmI3NGUw
M2Y3MS5jcmwwHwYDVR0jBBgwFoAUzKkX+OZFOjFthwb20W42PmyEf7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82Y2U5NWNiMi0zOThmLTQ1NzQtYmFlMC01MjJi
NzRlMDNmNzEuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCzA/cAwQD
0FZ4MA0EAgACMAcDBQAmBjhAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4
BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv
Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHkP9W/w40TdsMwJSYIo2N9BPVF8
jZLbYFVMcSVQ/cPgpkXEnHLe74XUPowhc6Rztc1Q2yAhec+v+H4hb7W6ADujYnsT
8l0O8/d5EPkTI+wECY9bOzyyrGIWI1/7l15u8DpCP1RaEPVGjfuew/ycfGfHsLPE
SFzf1CnUWBhRqYxKSg0AYzfEtAbM9m8UHg4DCGAHfrC/DnhQ9JPdqkCHIBPrNTaN
lM490QKNMgJukiAelq3Ws6I6GUKJ5JzmuaQKv52Je6g73cQwMLuo604rHy8hxIiS
g/Jy4bG4y934xiKm0ZaM1jjUpRLVftUnTChhXIxz3Nl0VJhfW1Ev7S5e5vM=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:08:28 2025 by rpki-client