
Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae6238c6-9389-4fbe-a6aa-24095966ea40/0a58d4b8-b587-3b07-bb46-842da695b817.roa
File: 0a58d4b8-b587-3b07-bb46-842da695b817.roa (raw, json)
Hash identifier: lkPjklMVYpxMRBmWkOaa747aIArmP+yK+0yBPM2ARxU=
Subject key identifier: E2:EC:10:14:E7:09:91:67:61:CF:C3:58:6E:58:3E:3B:4E:8F:63:B7
Certificate issuer: /CN=ae6238c6-9389-4fbe-a6aa-24095966ea40
Certificate serial: 010D0C9F43285848037A4AFF88217C16BDA7E900
Authority key identifier: 22:FD:42:6E:C0:AB:77:6D:3E:E9:73:3A:09:2E:7D:DE:5C:80:B7:6C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae6238c6-9389-4fbe-a6aa-24095966ea40.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae6238c6-9389-4fbe-a6aa-24095966ea40/0a58d4b8-b587-3b07-bb46-842da695b817.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 10271
IP address blocks: 69.7.0.0/20 maxlen: 24
204.107.252.0/24 maxlen: 24
209.213.64.0/19 maxlen: 24
216.129.128.0/20 maxlen: 24
216.237.96.0/20 maxlen: 24
2607:d980::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7a:4a:ff:88:21:7c:16:bd:a7:e9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae6238c6-9389-4fbe-a6aa-24095966ea40
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=37da2993-cc6d-4ede-8656-70017b0f369a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4a:6c:66:1d:73:28:0b:29:d7:2e:10:7c:44:
2a:c1:a0:39:1d:cd:51:12:ca:7e:5a:03:09:d7:d8:
b0:03:1d:ec:14:f1:b3:fd:1b:f6:3e:c0:9a:63:94:
21:cc:f8:32:f4:3d:9f:76:bf:da:9d:87:bb:a9:72:
5f:8a:ec:96:61:2b:e4:7b:f8:9c:d7:83:6d:ae:22:
d2:e5:59:04:1f:f4:15:62:45:ab:66:76:20:91:08:
31:32:ec:bb:4b:a7:a0:6f:14:4a:d1:77:6b:d1:1e:
97:54:83:aa:2f:2e:47:fe:5f:34:f1:ec:c3:a4:71:
e5:19:26:9a:22:90:4b:d5:24:21:a5:5a:10:32:bd:
bd:88:77:87:0d:fb:9b:aa:94:30:c2:2e:39:23:75:
ca:af:59:db:dd:70:dc:5e:e3:78:7e:dc:db:11:72:
ee:67:f6:2f:ae:70:30:cd:e7:7d:f8:c5:e0:15:62:
71:d8:f0:cf:a7:78:9c:cf:b2:04:04:74:44:70:32:
d4:0d:fd:a3:77:05:f9:fb:9b:14:57:b6:a2:91:a0:
e3:67:7d:2f:6b:41:37:8e:c6:89:ad:b5:31:08:0a:
67:57:a4:ff:9d:f9:8a:c2:80:b7:3d:97:10:50:57:
5e:47:f0:aa:3c:5a:e0:0a:6a:8a:22:11:de:c3:ab:
08:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:EC:10:14:E7:09:91:67:61:CF:C3:58:6E:58:3E:3B:4E:8F:63:B7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae6238c6-9389-4fbe-a6aa-24095966ea40/0a58d4b8-b587-3b07-bb46-842da695b817.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae6238c6-9389-4fbe-a6aa-24095966ea40/ae6238c6-9389-4fbe-a6aa-24095966ea40.crl
X509v3 Authority Key Identifier:
keyid:22:FD:42:6E:C0:AB:77:6D:3E:E9:73:3A:09:2E:7D:DE:5C:80:B7:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae6238c6-9389-4fbe-a6aa-24095966ea40.cer
sbgp-ipAddrBlock: critical
IPv4:
69.7.0.0/20
204.107.252.0/24
209.213.64.0/19
216.129.128.0/20
216.237.96.0/20
IPv6:
2607:d980::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:10:b2:88:0d:8c:ff:54:22:a2:6b:66:7d:31:aa:dd:de:6e:
1a:b9:9b:08:5c:1a:96:a9:22:14:15:90:ca:d4:1a:2d:40:c4:
ed:fb:2e:04:b4:73:ef:7d:20:54:b6:86:53:07:3c:0c:03:53:
bc:3e:b3:3e:13:12:00:f1:de:78:11:96:4d:bc:40:30:4c:6e:
de:61:13:b3:a2:b7:9b:81:99:ff:87:bf:8b:d0:55:a5:88:c2:
5a:5d:35:39:91:f3:29:ed:c5:c3:a9:48:9a:f2:54:7f:d5:68:
0a:1a:80:2c:4e:ae:ba:8d:14:87:9f:15:0b:36:b0:b8:ce:bc:
71:a7:73:ce:1d:79:e5:f3:ee:26:56:83:ad:7a:43:0f:c1:d0:
88:d3:9c:24:c4:58:9e:06:f4:bf:4e:95:f3:e9:22:9b:2a:a4:
fd:b5:0e:9c:48:40:87:3b:58:2e:69:d7:59:02:c1:6f:91:13:
5a:4b:a3:0a:17:75:50:63:e6:c4:7c:ce:65:6a:33:46:28:53:
da:45:74:79:b7:9b:c7:02:67:4e:8a:33:a5:0b:78:2e:32:2f:
ce:92:c7:00:f2:95:e1:f3:e5:b1:b5:53:62:8e:42:d1:5f:98:
8e:5c:5b:a6:f3:18:ff:ed:eb:66:24:31:35:45:81:58:f3:e6:
53:18:ae:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:57:34 2025 by rpki-client