Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/63f893e9-f16a-3c41-ba4a-bedd0b845a04.roa
File: 63f893e9-f16a-3c41-ba4a-bedd0b845a04.roa (raw, json)
Hash identifier: 3GSTb+DdM1qTjPw+fCYI2MsJqWztRfQ7lN5A98HZJOs=
Subject key identifier: 15:4C:8E:4B:A5:8B:ED:74:82:B5:DF:26:C1:2E:3B:37:24:BF:BF:47
Certificate issuer: /CN=61532adb-ed7d-43ba-a66f-2a333fb9cf62
Certificate serial: 010D0C9F432858483E1AAD25525D29E0861B0940
Authority key identifier: C9:65:22:CD:0A:BC:3A:D6:00:B2:BD:17:FD:42:C2:66:C6:45:5F:CD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/63f893e9-f16a-3c41-ba4a-bedd0b845a04.roa
Signing time: Wed 18 Dec 2024 02:00:39 +0000
ROA not before: Wed 18 Dec 2024 02:00:39 +0000
ROA not after: Tue 18 Mar 2025 01:00:39 +0000
asID: 20299
IP address blocks: 65.182.8.0/24 maxlen: 24
65.182.31.0/24 maxlen: 24
200.12.224.0/24 maxlen: 24
200.12.225.0/24 maxlen: 24
200.12.231.0/24 maxlen: 24
205.211.192.0/22 maxlen: 24
205.211.196.0/22 maxlen: 24
205.211.200.0/22 maxlen: 24
205.211.204.0/22 maxlen: 24
205.211.218.0/23 maxlen: 24
205.211.220.0/24 maxlen: 24
205.211.221.0/24 maxlen: 24
205.211.224.0/24 maxlen: 24
205.211.233.0/24 maxlen: 24
205.211.234.0/24 maxlen: 24
205.211.244.0/22 maxlen: 24
205.211.248.0/21 maxlen: 24
208.96.140.0/24 maxlen: 24
208.96.141.0/24 maxlen: 24
208.96.143.0/24 maxlen: 24
209.124.96.0/24 maxlen: 24
209.124.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3e:1a:ad:25:52:5d:29:e0:86:1b:09:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61532adb-ed7d-43ba-a66f-2a333fb9cf62
Validity
Not Before: Dec 18 02:00:39 2024 GMT
Not After : Mar 18 01:00:39 2025 GMT
Subject: CN=ab3f798d-6736-4866-aef5-9fd57c393a8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a3:f1:9a:3d:fc:76:4b:92:7e:60:fc:0a:93:
c4:ce:81:51:bf:6d:23:83:d4:55:9f:9c:7d:9e:72:
aa:d7:8a:2b:24:4e:b8:85:31:e9:53:eb:6e:37:b9:
1d:c5:c8:0c:7d:c8:96:9d:a6:82:eb:4f:b2:b8:f5:
4c:da:8e:56:f8:af:00:5e:49:e2:84:ae:80:e2:90:
e6:af:e3:ee:1b:bc:19:f8:d4:41:8c:d1:42:9b:f0:
e8:ee:42:94:fb:1f:63:43:1c:c0:c6:62:f3:30:cd:
c9:85:92:e8:19:dd:b0:d1:31:48:13:c4:2e:d1:d0:
af:33:6f:29:fd:63:7c:ea:04:3f:7d:92:4f:bc:44:
d3:88:e2:a0:47:31:56:a7:f2:82:fd:ab:a7:0c:4f:
5e:47:80:4d:d8:6a:ad:aa:eb:d1:62:b0:95:42:fd:
b7:f2:61:72:1f:57:f2:35:0e:3e:64:6f:2c:2b:8f:
6c:7f:c0:01:94:30:67:20:32:52:c2:b6:a3:c1:67:
e8:e3:39:22:d9:d4:37:b7:f2:e7:5c:59:6e:4b:b0:
38:65:4d:4a:12:92:6e:a0:ff:f5:05:ba:99:dd:62:
b0:7d:18:00:17:0e:5f:62:a8:c9:a7:ae:f5:a7:53:
08:77:9a:d6:a7:ee:25:73:e4:4c:76:a4:1f:8e:04:
15:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:4C:8E:4B:A5:8B:ED:74:82:B5:DF:26:C1:2E:3B:37:24:BF:BF:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/63f893e9-f16a-3c41-ba4a-bedd0b845a04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/61532adb-ed7d-43ba-a66f-2a333fb9cf62.crl
X509v3 Authority Key Identifier:
keyid:C9:65:22:CD:0A:BC:3A:D6:00:B2:BD:17:FD:42:C2:66:C6:45:5F:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62.cer
sbgp-ipAddrBlock: critical
IPv4:
65.182.8.0/24
65.182.31.0/24
200.12.224.0/23
200.12.231.0/24
205.211.192.0/20
205.211.218.0-205.211.221.255
205.211.224.0/24
205.211.233.0-205.211.234.255
205.211.244.0-205.211.255.255
208.96.140.0/23
208.96.143.0/24
209.124.96.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:ef:7d:00:b7:29:dc:ae:66:f6:f4:81:ed:51:bf:25:d8:12:
6b:39:a8:88:2b:7b:25:69:4a:a4:9f:81:eb:42:3b:56:06:1a:
93:3f:a1:0a:0b:64:ba:67:b7:55:a9:36:ca:7b:b7:53:19:7b:
e0:e2:c8:11:cc:20:12:ea:f6:40:d7:cc:83:cf:46:bf:c1:c1:
32:3c:70:0a:19:0f:9f:6a:6e:be:67:08:1c:86:6d:5d:5a:ec:
c1:d3:14:b3:d9:bd:54:4c:22:cb:a6:6a:44:78:d2:c5:37:f1:
ec:40:f4:03:ae:9c:b6:df:ba:1c:90:84:49:b2:f8:c0:a2:67:
07:d4:75:3c:ac:63:4b:de:a1:b9:3b:5a:47:e5:b6:ab:82:1d:
8a:91:67:f1:b4:6d:e0:de:a5:da:c1:44:e2:21:1e:5b:9b:fa:
15:a5:34:40:73:70:0e:70:32:ca:8f:3a:ea:94:95:08:43:db:
92:86:63:81:ef:c8:20:b0:50:e1:e1:25:8b:fa:c0:31:77:6e:
74:64:d2:f4:e7:1e:4d:c2:95:25:a8:8d:cd:f9:a2:5a:1b:29:
68:9c:6b:f8:6c:7b:7e:da:c6:bd:28:f1:bc:58:12:e0:a7:5a:
af:30:9d:d1:60:de:a3:89:5a:7e:39:20:8d:3c:cb:43:ac:9c:
43:de:61:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:56:44 2025 by rpki-client