Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/4fc976c2-5932-31ad-b787-eed2d11f5e5d.roa
File: 4fc976c2-5932-31ad-b787-eed2d11f5e5d.roa (raw, json)
Hash identifier: /rJtA1Z02f5WAwJsBuAgR+et1JTZ70mZDpFOmgkShVI=
Subject key identifier: F7:8F:EF:F5:02:18:0F:CF:60:A3:BF:73:83:87:5E:5B:48:66:EA:0C
Certificate issuer: /CN=a95fce7e-65c2-466f-ae34-eadb8c72156b
Certificate serial: 010D0C9F43285848037B609E9AC26B308DBC7E80
Authority key identifier: 5F:8C:A6:E1:84:0F:A2:FE:BD:8D:DA:83:98:81:21:DF:CB:E0:65:CE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/4fc976c2-5932-31ad-b787-eed2d11f5e5d.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 87
IP address blocks: 129.79.0.0/16 maxlen: 16
140.182.0.0/16 maxlen: 16
140.182.0.0/19 maxlen: 19
149.159.0.0/19 maxlen: 19
149.161.0.0/16 maxlen: 16
149.161.128.0/17 maxlen: 17
149.162.0.0/16 maxlen: 16
149.163.0.0/16 maxlen: 16
156.56.0.0/16 maxlen: 16
198.49.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7b:60:9e:9a:c2:6b:30:8d:bc:7e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a95fce7e-65c2-466f-ae34-eadb8c72156b
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=bdd5aa1d-10a8-4fc1-b627-0ea18211d3cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:de:14:70:4c:99:26:52:f3:0c:0c:6e:48:22:
3d:5e:94:1c:1f:31:8a:05:e5:c9:1d:dc:f6:2a:77:
2e:56:9b:20:d0:ea:fe:b5:37:04:d8:d0:71:b9:50:
73:07:93:5b:8d:df:b7:de:b0:d7:a9:79:48:e9:19:
7c:76:a1:4b:0c:29:b6:5d:2e:54:21:e3:3d:38:5e:
a0:cc:ad:12:c1:82:82:43:5d:7a:42:09:ef:0b:cd:
34:26:73:87:de:c6:d8:ac:71:65:6a:b8:52:c0:a5:
35:f1:f1:d6:f5:c2:b5:0f:ed:de:9b:a2:b1:b7:f4:
36:fb:64:b1:9e:88:94:cd:28:15:64:cd:8d:e4:53:
ac:fa:e1:23:82:92:0f:e2:2f:de:34:7b:3b:ee:89:
01:94:84:89:2d:ae:28:d5:ef:d7:46:81:52:3f:a7:
09:ee:00:dd:7f:45:05:26:f0:86:4c:84:df:ee:23:
d8:8f:b4:7f:96:40:f0:4e:e5:1e:de:39:9f:2e:a0:
08:c3:04:d2:cf:7a:8e:19:7c:60:b1:28:ef:32:4b:
ef:79:d2:07:40:41:ae:85:35:fc:32:a8:c6:63:76:
5c:d9:f9:2e:55:56:68:60:29:75:60:e8:98:be:c2:
ac:fe:ee:e5:96:73:25:91:cc:7c:19:ba:94:c4:7e:
81:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:8F:EF:F5:02:18:0F:CF:60:A3:BF:73:83:87:5E:5B:48:66:EA:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/4fc976c2-5932-31ad-b787-eed2d11f5e5d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/a95fce7e-65c2-466f-ae34-eadb8c72156b.crl
X509v3 Authority Key Identifier:
keyid:5F:8C:A6:E1:84:0F:A2:FE:BD:8D:DA:83:98:81:21:DF:CB:E0:65:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b.cer
sbgp-ipAddrBlock: critical
IPv4:
129.79.0.0/16
140.182.0.0/16
149.159.0.0/19
149.161.0.0-149.163.255.255
156.56.0.0/16
198.49.177.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:a3:2a:61:02:4f:d2:a6:21:f0:3d:8c:09:c9:5a:e1:82:ed:
b3:78:ac:80:e7:58:d7:f1:4e:83:ec:1d:c7:1b:c7:7a:f1:cb:
dc:1e:65:0a:45:48:e8:96:6d:5f:23:6d:c4:b7:ab:6c:d7:1a:
ae:b8:a2:85:8b:ab:2e:22:b7:71:74:42:77:50:d8:d5:b6:5b:
96:62:ae:8f:74:cd:b7:1e:97:b2:a8:ef:d1:8a:89:c9:26:65:
88:ec:04:2b:29:d1:4a:e6:e7:1f:db:a3:fb:f9:6b:a6:b8:c6:
30:52:ec:ff:e7:28:1b:40:9e:fa:2a:8d:0b:a3:b6:de:45:3e:
c6:6c:3d:d2:5b:3d:74:54:e5:9f:5d:39:6d:51:b4:db:51:93:
c9:5e:8b:42:9c:ac:55:c3:4c:b5:40:84:2b:ca:94:80:6d:8d:
81:5d:05:ba:0e:0f:f5:8a:45:d7:3b:4d:a0:41:a4:08:87:bb:
a1:80:85:e2:5c:e8:b2:a0:af:41:0c:21:98:82:77:41:73:05:
41:50:bb:3a:f6:a5:87:71:49:af:28:e2:86:ef:4e:5a:0e:a5:
6f:9d:73:3e:b9:af:bf:e3:ec:e8:1d:6b:ee:a7:14:c8:ca:08:
8f:af:63:32:af:82:a4:3f:ac:92:82:c1:5e:ff:83:3d:16:02:
8e:e5:f5:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:09:37 2025 by rpki-client