Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3f95a8ab-f9b2-432c-a1fd-d93683bc2fa8/2ef2c836-21f9-32b9-8322-176c344929e8.roa
File: 2ef2c836-21f9-32b9-8322-176c344929e8.roa (raw, json)
Hash identifier: 8x8pT2p6xEh6OYt2D54BGi92QcNLI/rt5/ML10y4JQg=
Subject key identifier: 2E:E8:90:07:52:55:31:4D:1D:34:E8:1F:10:A3:B5:C5:8A:E1:37:4D
Certificate issuer: /CN=3f95a8ab-f9b2-432c-a1fd-d93683bc2fa8
Certificate serial: 010D0C9F43285847FF4A7D35B98F297973D23E20
Authority key identifier: A5:CB:08:74:12:2A:85:45:3F:68:87:FD:C4:D8:C5:4D:A9:87:00:06
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3f95a8ab-f9b2-432c-a1fd-d93683bc2fa8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3f95a8ab-f9b2-432c-a1fd-d93683bc2fa8/2ef2c836-21f9-32b9-8322-176c344929e8.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 6128
IP address blocks: 24.89.128.0/18 maxlen: 25
75.99.0.0/16 maxlen: 25
75.127.128.0/17 maxlen: 25
96.56.0.0/15 maxlen: 25
108.58.0.0/16 maxlen: 25
108.162.0.0/18 maxlen: 25
108.170.64.0/18 maxlen: 25
142.54.64.0/18 maxlen: 25
173.220.0.0/16 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:7d:35:b9:8f:29:79:73:d2:3e:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f95a8ab-f9b2-432c-a1fd-d93683bc2fa8
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=bdb670ad-0eca-459e-8380-7391b8790aa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:2b:b6:65:1c:6b:16:34:c3:45:b5:6e:a5:ca:
4e:e5:c6:b5:43:05:4a:94:b2:87:b2:49:b3:80:75:
dd:14:c0:e0:54:a4:4b:db:84:01:16:dc:a5:2a:04:
53:16:b0:41:b9:00:21:80:2b:e4:66:9c:23:cd:e5:
05:f9:aa:85:05:3c:0b:39:37:44:ab:80:ac:dc:4c:
e4:f6:9c:c8:00:f6:41:8c:15:ec:ee:2d:31:25:aa:
99:a1:4a:4b:b4:a9:9a:a8:6a:ff:c1:14:c6:d2:d8:
d7:d6:8d:b2:f1:59:b2:e7:ee:e0:f9:39:3d:d0:87:
01:8d:9a:d2:84:0f:3b:23:fc:b6:b1:24:33:1e:ef:
5a:95:12:1f:74:94:85:1e:ec:8e:cb:1a:9d:b6:39:
38:c3:fd:1e:fb:87:81:11:92:21:fc:83:01:85:4e:
e3:e0:a3:83:59:92:1b:f2:c8:65:c7:df:8e:b2:b4:
10:12:7e:98:e9:dd:2f:3b:e0:96:6a:c3:c4:55:1f:
25:2b:8e:5f:b9:cf:26:b6:48:ce:d6:01:f3:01:fb:
8c:70:3a:97:97:d3:30:79:95:ec:27:4a:e0:1e:92:
91:88:1b:20:37:d3:5d:ed:81:3d:f8:62:de:c0:36:
37:ce:bb:e5:d9:4f:65:db:85:06:e0:cd:ab:a5:a8:
4f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:E8:90:07:52:55:31:4D:1D:34:E8:1F:10:A3:B5:C5:8A:E1:37:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3f95a8ab-f9b2-432c-a1fd-d93683bc2fa8/2ef2c836-21f9-32b9-8322-176c344929e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3f95a8ab-f9b2-432c-a1fd-d93683bc2fa8/3f95a8ab-f9b2-432c-a1fd-d93683bc2fa8.crl
X509v3 Authority Key Identifier:
keyid:A5:CB:08:74:12:2A:85:45:3F:68:87:FD:C4:D8:C5:4D:A9:87:00:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3f95a8ab-f9b2-432c-a1fd-d93683bc2fa8.cer
sbgp-ipAddrBlock: critical
IPv4:
24.89.128.0/18
75.99.0.0/16
75.127.128.0/17
96.56.0.0/15
108.58.0.0/16
108.162.0.0/18
108.170.64.0/18
142.54.64.0/18
173.220.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:68:28:15:12:b6:91:c4:33:4f:fa:e8:d7:a2:e7:8e:16:96:
a0:77:d9:fe:da:a1:d6:90:a0:c0:18:c2:dd:8b:eb:bb:c4:db:
70:f1:68:81:1a:c6:f3:76:9d:fd:0b:34:3f:54:c8:01:6c:03:
72:73:63:b7:b1:33:d0:39:12:7a:62:a1:27:d2:50:ef:c0:69:
28:44:20:5e:85:4c:ff:42:19:25:5b:d2:4c:93:a2:02:be:e6:
65:4c:7c:94:67:c1:a9:8e:e7:70:51:e9:a7:d1:b1:5c:43:f4:
0f:eb:6b:19:8e:b3:0e:bb:92:e9:b2:77:f6:e7:90:e1:ec:47:
c5:f8:87:7f:9e:42:cc:d0:12:96:02:51:54:03:93:3b:23:fd:
ad:4d:87:36:f9:8f:3e:72:b5:36:88:dc:5a:e9:25:c9:4e:24:
8a:e0:20:44:0f:9b:f3:4e:50:b1:6f:99:43:b4:f3:fa:03:a8:
37:e0:0f:11:d4:7e:47:9d:83:d5:d2:4f:a8:16:39:81:9e:f8:
e3:1f:5c:2b:2a:1c:80:f0:06:db:d5:0d:dc:08:55:a5:f3:69:
70:a2:78:04:50:99:b5:bf:98:58:04:f9:67:11:09:df:bf:01:
cf:f0:1c:1e:4f:c6:25:2c:f1:c8:e6:e0:50:b8:7a:c0:f3:33:
fe:8c:79:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:47:52 2025 by rpki-client