Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/cd9eef01-ff5f-3461-982d-ae650cfc798a.roa
File: cd9eef01-ff5f-3461-982d-ae650cfc798a.roa (raw, json)
Hash identifier: IobySYznyzW80a2FeM5vQ/gF+Kax8wo7nnZPN+krWeo=
Subject key identifier: 32:CB:51:B5:B8:53:E6:25:1C:2D:68:B9:7A:2F:6A:91:41:4C:23:C7
Certificate issuer: /CN=063abcef-47ff-4267-9198-eb628aba7842
Certificate serial: 010D0C9F432858481F6534A837A888F63048E680
Authority key identifier: 2D:3F:AD:6D:5B:1F:E5:FE:7F:3E:DB:22:2B:0E:F6:CC:CD:68:7D:C2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/cd9eef01-ff5f-3461-982d-ae650cfc798a.roa
Signing time: Sat 07 Dec 2024 02:00:39 +0000
ROA not before: Sat 07 Dec 2024 02:00:39 +0000
ROA not after: Fri 07 Mar 2025 02:00:39 +0000
asID: 46455
IP address blocks: 74.214.0.0/20 maxlen: 24
146.12.128.0/19 maxlen: 24
146.12.192.0/20 maxlen: 24
158.247.32.0/20 maxlen: 24
195.85.64.0/23 maxlen: 24
195.85.118.0/23 maxlen: 24
206.82.96.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1f:65:34:a8:37:a8:88:f6:30:48:e6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=063abcef-47ff-4267-9198-eb628aba7842
Validity
Not Before: Dec 7 02:00:39 2024 GMT
Not After : Mar 7 02:00:39 2025 GMT
Subject: CN=e3966803-6684-403b-aaa0-b27adee2376e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cc:33:a7:7b:35:43:38:1f:b9:80:18:3f:92:
e3:6c:5e:be:f5:7f:f6:3e:9c:8c:e7:78:5e:08:f6:
d0:5c:d1:1a:af:ff:2a:9b:13:57:82:b0:93:e6:ae:
2d:52:ff:74:00:9d:3d:cd:7a:ca:87:41:b9:fb:60:
84:13:df:7d:99:e6:33:e2:38:2d:a7:c4:dd:10:80:
18:4c:29:1e:93:d9:b7:88:ef:8d:ef:29:c0:b9:d2:
18:ad:20:ea:a9:30:70:8a:19:9a:74:3d:b0:aa:73:
51:e3:e8:b1:2d:8f:22:5c:3e:93:60:90:41:ed:2d:
00:a8:45:f8:5e:de:e4:dd:25:72:96:f5:45:9c:50:
9b:30:1a:3d:a9:05:d2:35:60:08:08:11:7b:c8:6e:
1f:d5:1d:66:03:d1:b2:32:95:84:7c:24:96:41:bc:
06:d7:58:d1:42:0f:10:08:1a:f0:0b:89:4f:4c:eb:
a8:e1:92:8b:f6:35:16:97:11:ec:e7:87:a7:24:7e:
db:b6:2d:c3:eb:16:0c:74:db:a4:3f:38:a0:6e:89:
08:05:af:f5:9a:1c:69:5e:88:84:4f:aa:ff:56:13:
69:36:f4:ac:86:cc:1b:c4:dc:7b:4e:30:22:83:c0:
59:6c:ca:ca:0e:15:f4:c4:dc:e4:53:71:93:05:4e:
79:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:CB:51:B5:B8:53:E6:25:1C:2D:68:B9:7A:2F:6A:91:41:4C:23:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/cd9eef01-ff5f-3461-982d-ae650cfc798a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/063abcef-47ff-4267-9198-eb628aba7842.crl
X509v3 Authority Key Identifier:
keyid:2D:3F:AD:6D:5B:1F:E5:FE:7F:3E:DB:22:2B:0E:F6:CC:CD:68:7D:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842.cer
sbgp-ipAddrBlock: critical
IPv4:
74.214.0.0/20
146.12.128.0/19
146.12.192.0/20
158.247.32.0/20
195.85.64.0/23
195.85.118.0/23
206.82.96.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:5d:fd:3b:c5:54:85:8e:b4:75:ce:7a:5a:36:79:77:c1:3c:
cf:04:34:82:ff:d3:22:b5:51:42:ef:be:d3:56:0e:70:a8:58:
4b:b4:27:9d:90:2b:5e:9b:38:81:f5:c7:2d:1a:7d:d4:b0:9a:
4e:d6:d8:88:f3:4f:1b:d3:f0:2c:b1:5e:b7:ef:94:40:3c:68:
4d:d5:37:6f:5b:57:eb:b9:30:c0:a6:be:30:6a:8b:76:2f:c2:
05:b7:d3:00:6c:51:74:10:29:10:82:64:d4:6b:39:1f:63:5f:
fc:a1:8b:d4:d1:db:b0:55:66:17:1d:db:f6:aa:43:cd:5e:35:
9b:49:78:6a:48:34:cd:dc:e3:96:5a:f7:fd:36:4b:01:96:00:
94:22:64:39:62:2d:0d:27:03:d8:54:5d:73:84:a7:80:b1:b3:
05:bd:03:e3:ee:05:92:ef:0c:a6:0b:fc:df:17:4e:0a:46:46:
dc:8a:5d:7c:30:80:84:a6:bf:19:06:8f:9c:b5:b2:b3:91:79:
be:db:1f:06:bd:b9:12:a1:0b:40:c2:31:f0:67:8b:3b:4b:90:
de:9e:63:e9:94:3f:c8:c0:1b:d2:bc:cf:e8:cb:af:1a:9f:9e:
e9:6e:bf:02:4c:b1:89:1b:27:1e:41:ec:8a:f7:28:ee:a0:96:
b1:65:44:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 01:01:28 2025 by rpki-client