Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/d2015878-4527-3557-82c5-f62f18fd4715.roa
File: d2015878-4527-3557-82c5-f62f18fd4715.roa (raw, json)
Hash identifier: t1naPnGwkgx6PR+hv3cLd7yGMyF3CtMHRR7MlRgYL9k=
Subject key identifier: 3E:D8:8B:0B:DE:6A:5E:85:09:B4:B1:59:66:5F:F8:30:D6:78:CA:A0
Certificate issuer: /CN=34b715b9-211f-4bf7-ace9-03b3446775ab
Certificate serial: 010D0C9F43285848EF614257472BB04C85661500
Authority key identifier: A2:06:2D:8C:8F:04:C6:8E:B7:00:2D:04:38:3A:77:9F:8C:EB:67:AC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/d2015878-4527-3557-82c5-f62f18fd4715.roa
Signing time: Wed 19 Feb 2025 14:00:52 +0000
ROA not before: Wed 19 Feb 2025 14:00:52 +0000
ROA not after: Tue 20 May 2025 13:00:52 +0000
asID: 394927
IP address blocks: 204.155.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ef:61:42:57:47:2b:b0:4c:85:66:15:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34b715b9-211f-4bf7-ace9-03b3446775ab
Validity
Not Before: Feb 19 14:00:52 2025 GMT
Not After : May 20 13:00:52 2025 GMT
Subject: CN=c20fbf5b-41e1-4bde-afab-6d2ab9c62f5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:91:36:0c:7e:56:76:22:c5:97:54:19:9b:31:
4b:a3:88:df:18:5d:3d:f4:c1:77:0f:60:5e:c0:27:
00:90:63:3d:fd:d2:4f:0c:a3:2a:e1:45:17:1f:1c:
cb:36:88:2b:1e:9c:ba:6d:c8:f0:c2:74:cb:cc:de:
c4:28:31:5d:18:d1:ab:30:60:71:3e:2f:ac:a4:85:
f2:be:be:41:3f:17:40:12:d3:1d:f0:38:e1:e4:14:
bb:3e:65:2a:ea:d8:9d:6b:7d:d5:22:e8:63:f0:8f:
93:d2:b1:e9:bc:27:3b:36:57:36:1a:dc:42:a5:43:
27:c7:83:1c:8c:ad:b8:06:c2:a1:33:f4:87:96:13:
a5:01:42:72:90:27:50:07:ed:3c:e7:10:e5:4c:1b:
9a:5f:76:b4:fc:70:62:2b:37:8b:dd:d1:8d:4e:b1:
ec:ab:4d:b3:16:10:cd:15:1e:73:24:3b:5a:08:07:
cb:a7:4e:ce:35:32:cc:32:e4:ca:58:aa:f7:5c:72:
e9:78:fe:8c:9f:16:a9:5b:c6:a4:0a:73:d3:d5:ee:
3c:cb:c7:bb:c3:a8:a6:10:c0:02:91:82:a0:c5:68:
60:15:b9:df:b7:b1:b2:6b:ad:52:f7:78:3b:b5:87:
74:ee:e7:40:a1:43:ac:45:4a:d8:17:6e:9c:29:b2:
21:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:D8:8B:0B:DE:6A:5E:85:09:B4:B1:59:66:5F:F8:30:D6:78:CA:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/d2015878-4527-3557-82c5-f62f18fd4715.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.crl
X509v3 Authority Key Identifier:
keyid:A2:06:2D:8C:8F:04:C6:8E:B7:00:2D:04:38:3A:77:9F:8C:EB:67:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer
sbgp-ipAddrBlock: critical
IPv4:
204.155.192.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:81:70:fe:fa:eb:f3:d8:c3:ab:6d:49:18:02:b7:6a:79:50:
e3:6c:bf:b4:ee:93:6d:1f:b6:40:5a:aa:fe:21:a4:63:21:5c:
b8:a2:1b:2b:99:75:63:24:41:4d:40:1f:67:3d:62:d5:75:86:
39:12:12:b8:96:6e:11:84:ae:63:30:37:33:bf:eb:ad:41:f6:
76:c8:73:06:12:9c:8e:2a:27:41:e5:3c:16:4b:ca:76:2e:09:
e4:0d:40:2e:14:4b:4d:77:8f:58:4f:4a:82:43:69:6f:ec:1b:
37:63:09:be:97:c7:b0:02:67:db:71:09:d1:c1:b5:45:4e:4f:
6f:fb:90:58:43:72:25:06:d9:ce:8c:73:fc:67:d7:d2:29:67:
2d:41:e3:b4:bb:1c:92:30:d4:08:6b:fb:15:ec:83:4b:82:ad:
11:fb:94:39:58:12:40:81:a3:96:2c:2a:7e:c0:5b:b9:15:53:
ca:0b:e6:56:38:c0:cf:c4:c8:04:a4:03:85:ce:8e:b7:16:8f:
98:3e:a6:c9:3d:70:36:2e:15:a9:65:14:a3:4c:74:81:2d:bd:
72:e4:b1:f3:d4:e8:a6:5a:f2:79:da:a6:b9:13:23:85:2c:e9:
16:17:01:32:59:3d:8e:fb:08:f8:d2:67:2b:56:45:2c:a2:33:
79:7e:44:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:19:48 2025 by rpki-client