Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332/a5cb4e8b-52b7-3f3a-8259-f47c5855a25e.roa
File: a5cb4e8b-52b7-3f3a-8259-f47c5855a25e.roa (raw, json)
Hash identifier: 2IqWEkEcdhXbKpb9nkFQYwQd+Ssk4rLZEDrY04CfkFw=
Subject key identifier: 2F:E3:5C:13:D4:CF:95:B4:B1:13:32:62:8B:33:3C:B2:4B:46:55:96
Certificate issuer: /CN=8df83f2e-e4b4-4953-8acc-7816b333d332
Certificate serial: 010D0C9F43285848037A47E9B238A1E11FCF8380
Authority key identifier: 0D:A6:2A:C6:EA:68:4E:B2:C5:7D:5B:E2:F5:3F:23:30:63:8F:E6:E5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332/a5cb4e8b-52b7-3f3a-8259-f47c5855a25e.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 46844
IP address blocks: 45.58.128.0/18 maxlen: 24
64.32.0.0/19 maxlen: 24
67.21.64.0/19 maxlen: 24
70.39.64.0/18 maxlen: 24
104.37.244.0/22 maxlen: 24
104.160.160.0/19 maxlen: 24
107.167.0.0/19 maxlen: 24
170.178.160.0/19 maxlen: 24
174.128.224.0/19 maxlen: 24
198.148.80.0/20 maxlen: 24
199.115.100.0/22 maxlen: 24
204.188.192.0/18 maxlen: 24
208.98.0.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7a:47:e9:b2:38:a1:e1:1f:cf:83:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8df83f2e-e4b4-4953-8acc-7816b333d332
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=82440b7d-b8ad-461e-b055-15e8021d3db1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:a5:e4:33:21:57:b0:bc:cd:04:20:0d:70:c6:
30:ee:d4:61:e1:0e:85:1c:39:35:d0:3a:50:e7:bd:
6d:af:1f:bd:14:7b:21:80:d2:03:28:2e:a4:76:d6:
ef:43:61:78:15:54:66:ca:31:28:ca:d0:28:b3:f2:
2d:46:20:17:ce:eb:56:28:c3:8b:ef:7b:27:bb:f9:
60:29:5c:80:22:be:cf:de:98:09:82:ff:9c:79:a4:
70:5c:01:cf:c6:bd:54:a2:81:4e:09:b2:e2:a6:f2:
14:20:1d:5d:42:0d:58:b2:ee:01:70:24:ad:bb:9e:
37:a5:95:c6:21:12:42:c1:d5:20:e4:bb:e2:a2:72:
bf:56:4a:3f:0b:76:b4:20:9d:01:66:a8:b1:d6:93:
17:a8:f5:a7:46:97:e1:8a:cf:34:f5:23:37:3d:a0:
e9:92:02:c0:31:a9:c6:04:d9:e8:47:76:b2:19:46:
c1:4e:57:58:3e:bc:8e:f9:4b:3f:59:12:a9:d2:1a:
f8:43:27:4f:e2:b1:10:11:70:72:de:18:bf:46:ab:
0d:fa:cc:78:09:03:75:57:10:73:e4:41:43:4f:81:
46:d3:03:6f:86:38:66:41:0e:73:ee:4b:c5:8b:8d:
62:41:9e:bd:63:83:81:8b:ea:a3:c7:8c:27:7a:56:
bd:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E3:5C:13:D4:CF:95:B4:B1:13:32:62:8B:33:3C:B2:4B:46:55:96
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332/a5cb4e8b-52b7-3f3a-8259-f47c5855a25e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332/8df83f2e-e4b4-4953-8acc-7816b333d332.crl
X509v3 Authority Key Identifier:
keyid:0D:A6:2A:C6:EA:68:4E:B2:C5:7D:5B:E2:F5:3F:23:30:63:8F:E6:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332.cer
sbgp-ipAddrBlock: critical
IPv4:
45.58.128.0/18
64.32.0.0/19
67.21.64.0/19
70.39.64.0/18
104.37.244.0/22
104.160.160.0/19
107.167.0.0/19
170.178.160.0/19
174.128.224.0/19
198.148.80.0/20
199.115.100.0/22
204.188.192.0/18
208.98.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bb:4e:89:d5:6b:df:3f:29:65:d1:10:b9:46:b0:dd:33:94:f2:
cf:aa:cc:f8:29:da:bf:1e:67:4a:8e:74:98:cf:b3:ea:e6:01:
f0:c3:d2:a7:b0:11:33:94:8b:54:6b:f3:40:00:7f:d1:30:97:
08:3d:3a:59:d4:3d:4a:ae:8c:05:01:04:ce:7e:ee:c3:e5:a6:
ce:5b:c2:e6:f6:b5:62:d1:85:fd:c9:0c:a9:57:77:16:88:f2:
d8:a4:e9:53:3c:34:dc:08:98:09:05:41:41:ad:6b:5e:f5:ad:
b5:8c:59:0c:93:94:0a:f3:92:4f:ef:a0:01:19:b5:c6:8f:47:
8a:57:8f:56:67:92:2d:56:38:dc:e0:9e:bd:a8:18:a2:cf:69:
89:2b:26:ab:d5:2e:67:ef:d8:7d:10:3d:14:7f:1b:d2:98:b5:
95:63:e5:03:50:ec:bc:5e:86:49:00:b2:8e:77:01:9a:1f:b2:
40:aa:fa:67:c5:0b:5d:5a:7a:c7:bb:43:bd:e6:44:6a:8d:48:
21:10:c4:3e:a5:28:5a:8a:3d:46:77:01:f9:db:e8:52:1a:a2:
f1:52:2b:49:af:11:b6:61:89:3d:37:00:37:e3:dd:bd:4c:06:
d2:c2:32:d7:b0:df:31:da:1c:70:1d:58:85:09:79:1a:f4:ff:
64:8a:61:f5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 26 13:07:08 2025 by rpki-client