Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9/44ad5312-3568-3fbb-ae0b-db218adc5fdb.roa
File: 44ad5312-3568-3fbb-ae0b-db218adc5fdb.roa (raw, json)
Hash identifier: d06KVWbP/zPMUOWca8y9ksn3Yy31NEIaWJIuFV6YQqo=
Subject key identifier: CB:B5:74:F6:A7:1A:89:65:34:2E:D1:94:97:DA:F1:3F:6A:E2:BC:51
Certificate issuer: /CN=e407c8fd-b808-41d1-af5e-a88d2dd556f9
Certificate serial: 010D0C9F43285848292AA14FAC206463ACCB95E0
Authority key identifier: 39:88:56:13:51:28:01:35:37:02:BA:15:76:26:0A:52:03:98:3E:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9/44ad5312-3568-3fbb-ae0b-db218adc5fdb.roa
Signing time: Tue 10 Dec 2024 14:00:52 +0000
ROA not before: Tue 10 Dec 2024 14:00:52 +0000
ROA not after: Mon 10 Mar 2025 13:00:52 +0000
asID: 396982
IP address blocks: 209.133.224.0/24 maxlen: 24
209.133.225.0/24 maxlen: 24
209.133.226.0/24 maxlen: 24
209.133.227.0/24 maxlen: 24
209.133.228.0/24 maxlen: 24
209.133.229.0/24 maxlen: 24
209.133.230.0/24 maxlen: 24
209.133.231.0/24 maxlen: 24
209.133.232.0/24 maxlen: 24
209.133.233.0/24 maxlen: 24
209.133.234.0/24 maxlen: 24
209.133.235.0/24 maxlen: 24
209.133.236.0/24 maxlen: 24
209.133.237.0/24 maxlen: 24
209.133.238.0/24 maxlen: 24
209.133.239.0/24 maxlen: 24
209.133.240.0/24 maxlen: 24
209.133.241.0/24 maxlen: 24
209.133.242.0/24 maxlen: 24
209.133.243.0/24 maxlen: 24
209.133.244.0/24 maxlen: 24
209.133.245.0/24 maxlen: 24
209.133.247.0/24 maxlen: 24
209.133.248.0/24 maxlen: 24
209.133.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:29:2a:a1:4f:ac:20:64:63:ac:cb:95:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e407c8fd-b808-41d1-af5e-a88d2dd556f9
Validity
Not Before: Dec 10 14:00:52 2024 GMT
Not After : Mar 10 13:00:52 2025 GMT
Subject: CN=7b586430-6e3a-49b0-8c1b-d76bc1e0e666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:99:74:fe:24:fb:cf:97:cf:ec:63:05:af:5d:
0e:00:ce:66:ee:4a:5c:0f:55:14:9c:cc:5c:a9:1d:
ba:ca:f0:ef:92:84:51:4b:57:b4:88:d2:b5:87:2a:
72:89:21:03:29:d0:8d:9b:91:41:4e:c0:b8:bd:40:
e9:c8:21:64:76:64:02:bc:83:25:61:06:68:ec:4b:
a3:1a:ac:d2:d3:1f:de:37:3d:63:5d:66:72:0a:be:
67:0c:74:62:4b:34:81:aa:80:86:13:25:a0:52:d3:
e5:84:59:37:a6:1d:b9:6d:d5:cc:94:dd:9a:09:5c:
c4:b9:19:cf:69:b9:ae:b4:d5:df:1a:74:f6:49:f3:
2f:b2:ca:99:99:07:d8:d7:ee:6c:f5:41:bb:03:33:
8d:a2:90:a7:02:19:36:8f:e3:1a:af:ef:9f:ef:10:
b3:c6:c3:51:64:03:fa:43:53:83:8a:55:4f:72:f9:
75:f7:3c:62:60:8c:15:b1:89:08:fa:b2:cc:f5:5f:
33:81:93:7c:84:4e:e2:a8:bf:8c:43:c5:9f:f0:3b:
06:69:4e:39:0b:fd:a2:af:23:14:3d:92:d4:af:01:
09:01:04:6b:6b:b7:36:07:44:b9:d3:67:f9:fe:5b:
1d:3b:4b:90:25:8b:fb:38:0c:7b:73:90:a6:1f:31:
7a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:B5:74:F6:A7:1A:89:65:34:2E:D1:94:97:DA:F1:3F:6A:E2:BC:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9/44ad5312-3568-3fbb-ae0b-db218adc5fdb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9/e407c8fd-b808-41d1-af5e-a88d2dd556f9.crl
X509v3 Authority Key Identifier:
keyid:39:88:56:13:51:28:01:35:37:02:BA:15:76:26:0A:52:03:98:3E:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9.cer
sbgp-ipAddrBlock: critical
IPv4:
209.133.224.0-209.133.245.255
209.133.247.0-209.133.249.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:0d:31:3d:48:98:e1:9e:28:ee:d8:50:7b:d2:da:61:3c:c1:
74:0c:68:19:19:02:3b:e9:76:03:9f:b8:1e:b6:29:ea:af:a5:
ed:aa:6a:ec:e8:af:78:94:05:a5:12:2e:c6:06:4d:bb:28:1c:
11:1b:84:a6:17:96:5c:1d:f6:c2:63:89:7a:25:c2:1d:3a:58:
0c:0e:15:49:5c:42:31:40:c3:fb:5c:ec:08:68:f7:3d:7b:46:
07:5d:52:df:ba:38:d4:f1:f7:fb:95:d1:a4:63:26:db:de:f4:
98:d4:40:91:a3:b7:aa:83:e5:29:d5:4e:ec:49:a1:35:4d:fd:
e9:df:44:0f:7c:9c:48:3e:9a:fc:62:b5:8f:df:f1:51:f1:3f:
d7:de:19:80:9e:ea:95:42:91:25:8c:4e:17:dd:1e:3d:10:35:
e2:ad:7e:2f:38:02:8e:a9:1a:7b:a5:0f:a4:f5:28:48:42:d0:
43:a1:08:1d:cd:6f:fb:c9:80:c4:3b:e3:bb:d2:bd:5b:54:b4:
c6:26:7a:10:7c:ce:35:ee:97:a5:3f:ea:bf:2a:f8:be:7b:d7:
51:28:45:6a:f8:86:4a:29:8f:6f:24:eb:2d:23:7a:bf:92:59:
d9:e5:1c:98:41:a1:7c:00:db:3e:fb:41:75:ec:be:f7:e4:a1:
e0:76:21:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:35:05 2025 by rpki-client