Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/e165df65-1e67-38a3-9403-e310e854e08d.roa
File: e165df65-1e67-38a3-9403-e310e854e08d.roa (raw, json)
Hash identifier: gP7esoEMNsVMZYg6txWZVMvos5y5PACwMZr64ggHQFE=
Subject key identifier: E1:EC:B5:BD:4F:BC:AE:FE:FA:52:01:E8:8A:BB:37:18:83:F8:A8:4E
Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial: 010D0C9F4328584839EAC79BE67D9B3968E2B700
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/e165df65-1e67-38a3-9403-e310e854e08d.roa
Signing time: Mon 16 Dec 2024 14:00:51 +0000
ROA not before: Mon 16 Dec 2024 14:00:51 +0000
ROA not after: Sun 16 Mar 2025 13:00:51 +0000
asID: 13347
IP address blocks: 45.58.251.0/24 maxlen: 24
69.91.162.0/24 maxlen: 24
69.91.163.0/24 maxlen: 24
69.91.164.0/24 maxlen: 24
69.91.167.0/24 maxlen: 24
69.91.174.0/24 maxlen: 24
69.91.175.0/24 maxlen: 24
69.91.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:39:ea:c7:9b:e6:7d:9b:39:68:e2:b7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Validity
Not Before: Dec 16 14:00:51 2024 GMT
Not After : Mar 16 13:00:51 2025 GMT
Subject: CN=7cc26f12-c56e-4738-b76d-c4d7941cf42e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e1:84:3e:41:6f:b3:6b:73:a3:7a:cf:5b:9b:
c7:de:12:89:78:66:45:55:a7:f1:13:5c:33:ba:f2:
60:95:c9:57:61:a9:89:95:82:fb:9f:cf:bb:1c:fc:
34:1e:db:57:0b:61:56:95:94:81:17:12:c4:3b:2d:
f4:9e:d0:96:b7:c8:07:96:1b:d8:1b:4e:15:c4:38:
21:a9:bb:b5:83:42:70:7e:ca:0c:21:27:8f:bb:0f:
81:78:26:b2:fb:98:2d:cf:d2:0c:76:88:a5:4e:06:
59:a8:2c:fa:1c:d6:53:6e:3b:1f:b0:1a:23:c6:e0:
2d:b2:30:36:c2:00:fe:2e:64:8a:2d:e7:81:4d:ce:
69:44:11:49:82:12:d0:80:6f:ab:0d:3e:d6:d4:dd:
4b:44:4c:12:f6:91:5e:3a:cb:5d:5d:3f:67:72:4b:
f4:96:a1:c1:26:f3:29:1a:bc:b6:56:46:0a:50:9e:
12:5a:bb:bf:ac:40:5c:60:ac:56:c1:dc:b3:3b:7a:
8c:f7:2a:ba:ec:17:18:1d:1c:58:76:f5:cd:ba:4e:
4a:0c:d2:c7:e0:14:e2:75:15:80:66:f1:44:f2:2e:
2e:c8:78:61:22:fd:4f:a3:7f:e4:2f:4c:a7:3f:da:
69:a4:4e:25:6f:7b:3d:50:84:8d:5a:4b:af:51:ce:
2a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:EC:B5:BD:4F:BC:AE:FE:FA:52:01:E8:8A:BB:37:18:83:F8:A8:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/e165df65-1e67-38a3-9403-e310e854e08d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
X509v3 Authority Key Identifier:
keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
sbgp-ipAddrBlock: critical
IPv4:
45.58.251.0/24
69.91.162.0-69.91.164.255
69.91.167.0/24
69.91.174.0/23
69.91.186.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:bf:49:90:20:11:f2:09:91:86:f2:39:a6:00:29:ed:73:6e:
08:e2:75:10:ec:92:28:3f:f8:83:4b:b1:05:e3:84:ad:33:13:
bd:b8:1d:be:09:66:a5:ce:a5:29:95:2a:06:e7:dd:37:1e:d3:
f8:a1:45:39:e6:3f:ec:57:1b:61:b9:02:0a:de:71:6d:59:8f:
36:35:41:53:8b:8e:39:5c:1c:83:38:1d:c0:97:23:a9:af:79:
31:cd:1d:b3:af:f3:b8:55:b7:de:d4:22:e5:f2:d8:98:47:f3:
2c:c8:3a:23:49:61:13:bf:ec:ab:47:50:db:ef:e2:b4:b3:af:
6b:11:23:4a:09:a1:cf:d5:d6:25:ec:95:50:66:d7:d2:0f:3e:
e0:f2:43:33:b8:40:9b:78:36:bd:72:06:05:f2:89:79:31:1e:
10:fc:c6:e9:1f:94:d6:c4:83:8f:75:91:1a:be:d4:61:c4:d4:
8f:81:a9:37:9a:68:5a:04:74:d7:8f:ce:95:3d:e3:e6:c0:fb:
13:6b:30:39:a4:02:c1:47:21:ce:44:3d:91:5d:d9:3c:96:03:
f8:a3:be:21:7f:9d:46:e3:99:f5:d6:64:d7:f8:83:e9:57:cb:
1b:b7:07:2a:f2:5c:fd:78:d2:52:1d:46:f6:07:ca:66:33:f8:
51:0b:c4:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:45:27 2025 by rpki-client