Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/6b7ad6a2-e3c3-3bbb-8039-72c2043011a0.roa
File: 6b7ad6a2-e3c3-3bbb-8039-72c2043011a0.roa (raw, json)
Hash identifier: wM82n0XtlRApSrhTD+USMCiQWyRQx7jWqNoQi8MipRk=
Subject key identifier: 13:7F:C1:BA:12:5C:C6:A3:5B:98:90:5C:C0:2A:2D:32:6C:9C:5C:6C
Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial: 010D0C9F4328584800AFC6E3BE256ED48B9DB000
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/6b7ad6a2-e3c3-3bbb-8039-72c2043011a0.roa
Signing time: Tue 26 Nov 2024 02:00:26 +0000
ROA not before: Tue 26 Nov 2024 02:00:26 +0000
ROA not after: Mon 24 Feb 2025 02:00:26 +0000
asID: 64286
IP address blocks: 64.64.102.0/24 maxlen: 24
64.64.110.0/24 maxlen: 24
64.64.111.0/24 maxlen: 24
64.64.115.0/24 maxlen: 24
64.64.118.0/24 maxlen: 24
64.64.122.0/24 maxlen: 24
64.64.125.0/24 maxlen: 24
64.64.127.0/24 maxlen: 24
98.159.38.0/24 maxlen: 24
98.159.45.0/24 maxlen: 24
98.159.47.0/24 maxlen: 24
98.159.225.0/24 maxlen: 24
98.159.227.0/24 maxlen: 24
98.159.228.0/24 maxlen: 24
98.159.229.0/24 maxlen: 24
98.159.231.0/24 maxlen: 24
98.159.235.0/24 maxlen: 24
98.159.238.0/24 maxlen: 24
173.239.208.0/24 maxlen: 24
173.239.219.0/24 maxlen: 24
173.239.237.0/24 maxlen: 24
173.239.251.0/24 maxlen: 24
173.244.35.0/24 maxlen: 24
173.244.37.0/24 maxlen: 24
173.244.39.0/24 maxlen: 24
173.244.41.0/24 maxlen: 24
173.244.57.0/24 maxlen: 24
173.244.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:00:af:c6:e3:be:25:6e:d4:8b:9d:b0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Validity
Not Before: Nov 26 02:00:26 2024 GMT
Not After : Feb 24 02:00:26 2025 GMT
Subject: CN=859abdf0-f3c0-4539-ae4f-5e9d3b789e61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6e:a2:f1:f2:06:1b:52:30:57:90:02:3c:dd:
f9:17:5c:ff:80:4f:08:d3:78:9b:8f:fe:dc:2b:16:
00:5b:a6:8e:1c:31:43:07:7e:e9:60:88:a7:8a:0d:
6a:c1:9a:75:0b:af:66:5e:7b:4c:5f:15:a9:5e:93:
3b:b1:c0:16:7a:76:87:ce:63:14:41:1d:f2:77:3e:
75:c5:08:1b:d5:22:cb:9f:9d:67:8b:05:83:3f:c3:
93:84:4d:da:82:a7:f5:75:85:cd:20:48:0b:60:07:
55:83:46:14:09:10:91:e1:58:69:7e:5e:8c:5a:64:
eb:81:78:2a:c0:2e:f1:d3:d3:2e:10:4c:f6:6d:c7:
7f:5c:3b:b0:51:36:5d:07:87:53:88:a7:03:4a:bb:
6d:44:2f:7c:fe:e8:2a:ce:33:ef:f9:c0:57:61:89:
79:49:21:b2:6f:79:fc:fa:e0:2f:c3:71:2c:3b:70:
06:9c:82:98:d0:cd:a3:e0:b0:8c:ea:48:6c:23:6d:
cd:80:00:15:58:21:d0:5b:98:a5:58:62:24:70:58:
86:e0:30:79:c8:80:82:9a:61:ff:c7:3b:e1:a8:12:
f4:10:88:9c:c1:4d:b9:4a:2a:cd:a6:a6:d5:95:c7:
34:e4:55:21:81:50:10:90:49:d0:f7:74:ef:79:4f:
b0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:7F:C1:BA:12:5C:C6:A3:5B:98:90:5C:C0:2A:2D:32:6C:9C:5C:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/6b7ad6a2-e3c3-3bbb-8039-72c2043011a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
X509v3 Authority Key Identifier:
keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
sbgp-ipAddrBlock: critical
IPv4:
64.64.102.0/24
64.64.110.0/23
64.64.115.0/24
64.64.118.0/24
64.64.122.0/24
64.64.125.0/24
64.64.127.0/24
98.159.38.0/24
98.159.45.0/24
98.159.47.0/24
98.159.225.0/24
98.159.227.0-98.159.229.255
98.159.231.0/24
98.159.235.0/24
98.159.238.0/24
173.239.208.0/24
173.239.219.0/24
173.239.237.0/24
173.239.251.0/24
173.244.35.0/24
173.244.37.0/24
173.244.39.0/24
173.244.41.0/24
173.244.57.0/24
173.244.59.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:04:c5:d3:42:da:25:0f:0a:02:1a:c2:6e:c5:92:2b:5e:c3:
4b:80:24:b0:75:f2:4c:21:3c:84:a1:15:4c:04:f8:e8:d3:14:
84:ff:38:f7:00:21:3e:19:10:79:fb:d8:dc:36:5b:67:8d:62:
bc:f1:92:10:d1:b2:9c:56:02:06:93:9e:df:c4:bf:6b:fe:62:
53:00:15:32:51:78:80:7e:7c:df:24:f5:34:3e:8d:70:7d:80:
a8:34:d6:89:bd:05:32:8e:1b:96:23:57:c9:8c:1a:5d:79:72:
b9:0c:bf:3d:bb:96:3e:9e:9d:63:45:88:6d:f8:09:27:4d:7f:
97:8f:8a:74:75:a8:1f:00:8f:4e:36:60:77:ef:9f:c9:3b:d1:
96:3f:11:03:97:ad:a5:fd:24:fa:5a:5e:6d:77:f7:f2:82:2e:
4d:09:2e:28:2b:ec:64:17:44:47:12:0b:8b:c1:44:50:c0:dc:
ae:87:48:11:1f:d9:44:7e:2f:32:c3:cf:f9:a3:0e:19:54:01:
73:0f:a0:e0:97:65:ba:70:4d:1b:82:a4:78:c5:02:2a:35:1c:
c3:5b:48:03:f8:84:3d:a9:77:c3:d9:05:cc:4b:92:ff:43:38:
4a:d6:ff:67:9e:6a:90:00:bb:cd:ef:e1:00:57:1b:4e:7a:d6:
a6:38:0f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 22:52:14 2025 by rpki-client