Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/bd89da8b-bd32-33a2-8093-1b5f44bc7bf3.roa
File: bd89da8b-bd32-33a2-8093-1b5f44bc7bf3.roa (raw, json)
Hash identifier: h0hx5RLZfuw4k8j3PpK+Q/E7BFsd2Sy2WQ8ExOntkPc=
Subject key identifier: 40:18:8D:04:38:69:56:7F:CE:A0:21:5B:DB:08:0C:CB:E1:C5:72:53
Certificate issuer: /CN=6ce95cb2-398f-4574-bae0-522b74e03f71
Certificate serial: 010D0C9F43285848F22C5F4678B12F65B79691C0
Authority key identifier: CC:A9:17:F8:E6:45:3A:31:6D:87:06:F6:D1:6E:36:3E:6C:84:7F:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/bd89da8b-bd32-33a2-8093-1b5f44bc7bf3.roa
Signing time: Thu 20 Feb 2025 14:00:52 +0000
ROA not before: Thu 20 Feb 2025 14:00:52 +0000
ROA not after: Wed 21 May 2025 13:00:52 +0000
asID: 1299
IP address blocks: 204.15.220.0/22 maxlen: 24
208.86.120.0/21 maxlen: 24
2606:3840::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f2:2c:5f:46:78:b1:2f:65:b7:96:91:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ce95cb2-398f-4574-bae0-522b74e03f71
Validity
Not Before: Feb 20 14:00:52 2025 GMT
Not After : May 21 13:00:52 2025 GMT
Subject: CN=7bb82416-51f6-467e-a832-6f970223b382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:b4:80:3b:80:9f:e7:87:09:e6:c9:f2:23:d3:
89:dc:52:d9:d7:6d:b3:4d:8b:cf:ec:e2:e8:02:84:
7b:52:3a:74:e1:51:e2:74:47:d1:c7:d8:2c:05:37:
fc:03:25:f1:0b:94:21:7d:bb:31:ec:78:05:40:33:
70:7b:51:bc:f0:eb:db:35:27:f2:bf:bc:49:37:05:
e1:1e:06:1f:5c:d6:ca:9c:66:f1:5a:d5:fe:7b:60:
cc:a7:92:63:6e:a2:c8:62:0d:ef:8f:fa:e2:a3:a9:
4c:50:49:24:1d:44:86:eb:e0:fa:22:87:57:39:d5:
91:de:a3:4a:2a:6c:a6:1d:67:7d:f5:69:e8:43:ff:
1a:40:68:b6:ba:64:7d:bb:4b:f5:c8:10:1d:d6:f0:
16:93:94:1e:6d:7e:e5:79:50:84:3f:fa:fe:ef:54:
30:f2:c2:4d:83:6e:b0:9d:3a:ef:08:02:9b:35:3f:
2c:a2:47:48:0a:65:72:95:f6:da:12:bb:3d:ab:00:
87:a2:60:15:e1:8a:bd:ef:dd:15:df:20:f2:30:7a:
2e:3c:5d:d8:0c:4a:0b:39:e8:ce:0b:49:19:cb:22:
7f:20:e5:c8:e3:80:ee:0e:a4:59:4b:15:ae:3b:ee:
e2:61:7e:49:da:4f:93:11:e8:0e:35:92:01:c1:21:
7c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:18:8D:04:38:69:56:7F:CE:A0:21:5B:DB:08:0C:CB:E1:C5:72:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/bd89da8b-bd32-33a2-8093-1b5f44bc7bf3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/6ce95cb2-398f-4574-bae0-522b74e03f71.crl
X509v3 Authority Key Identifier:
keyid:CC:A9:17:F8:E6:45:3A:31:6D:87:06:F6:D1:6E:36:3E:6C:84:7F:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71.cer
sbgp-ipAddrBlock: critical
IPv4:
204.15.220.0/22
208.86.120.0/21
IPv6:
2606:3840::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:a4:38:36:b7:07:90:93:a8:fc:7a:bc:cb:ec:42:52:39:28:
c3:10:c5:10:d1:d9:8d:1a:ae:60:bb:7a:87:15:94:b5:a3:1b:
de:18:f4:98:b3:f2:f2:e0:51:81:3a:54:9f:ca:73:d0:7d:be:
23:1c:07:1d:65:51:bc:19:af:63:49:a1:3d:b9:f7:8a:f1:7a:
f9:f1:d6:51:9f:56:79:eb:eb:5d:50:04:d9:7f:14:8d:be:3b:
f1:70:96:d0:a0:b0:04:2c:8a:fa:32:c5:39:b4:14:93:52:0e:
e6:67:59:74:9d:eb:1a:32:ce:c5:be:2f:9d:c3:11:8f:f4:31:
3b:4f:c2:2b:bd:65:f7:0a:b3:69:c1:bb:bc:37:38:72:7d:6c:
d8:bb:e1:d8:d5:3a:82:35:a9:e9:3e:c4:fd:70:dd:7a:4c:54:
90:cb:0c:95:36:97:d7:8e:fd:20:70:08:5f:3c:a1:61:e0:d5:
c4:c1:55:c1:f3:da:22:88:34:17:91:14:6b:ea:f3:0f:21:a9:
8b:fb:62:1f:a4:ad:f2:ae:08:26:60:43:2d:6b:89:7c:81:ec:
e4:39:4b:24:9e:46:f9:9e:a0:a0:d7:85:ba:ad:c2:38:77:ef:
57:df:6c:25:1f:1d:aa:a8:01:4d:05:b1:a3:2e:89:c7:9b:19:
6b:e0:7c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:40:58 2025 by rpki-client