Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e/632ef3ad-4ab4-3cd5-ae6e-1c9aaa4e3555.roa
File: 632ef3ad-4ab4-3cd5-ae6e-1c9aaa4e3555.roa (raw, json)
Hash identifier: 2K4UHoTOfthHPvkgNK7KwgWg/PnugN+FmrXIMq5r0Iw=
Subject key identifier: 8F:57:7B:29:46:5A:FC:BD:BD:E3:A3:B4:9C:5E:98:8D:14:46:7C:D8
Certificate issuer: /CN=530ba529-ac94-44aa-8a24-334da5fccb1e
Certificate serial: 010D0C9F432858484EDACB26AC57F5A4F7C48B00
Authority key identifier: E2:70:AF:2A:32:F0:30:09:13:CF:91:AB:C2:55:00:27:FA:B8:C1:31
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e/632ef3ad-4ab4-3cd5-ae6e-1c9aaa4e3555.roa
Signing time: Tue 24 Dec 2024 02:00:38 +0000
ROA not before: Tue 24 Dec 2024 02:00:38 +0000
ROA not after: Mon 24 Mar 2025 01:00:38 +0000
asID: 19237
IP address blocks: 64.6.96.0/20 maxlen: 20
64.57.64.0/19 maxlen: 19
64.255.0.0/18 maxlen: 18
66.37.0.0/19 maxlen: 19
69.5.160.0/19 maxlen: 19
74.119.64.0/21 maxlen: 21
204.10.137.0/24 maxlen: 24
204.10.138.0/23 maxlen: 23
204.10.140.0/22 maxlen: 22
208.92.160.0/21 maxlen: 21
216.17.96.0/20 maxlen: 20
216.239.129.0/24 maxlen: 24
216.239.130.0/23 maxlen: 23
216.239.132.0/22 maxlen: 22
216.239.136.0/21 maxlen: 21
2607:fe90::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4e:da:cb:26:ac:57:f5:a4:f7:c4:8b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=530ba529-ac94-44aa-8a24-334da5fccb1e
Validity
Not Before: Dec 24 02:00:38 2024 GMT
Not After : Mar 24 01:00:38 2025 GMT
Subject: CN=1dcc6197-c251-4b18-b545-bcd4f46941e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:10:3b:10:ab:78:e4:dd:53:0b:4c:b5:12:13:
91:6f:14:19:0e:2a:fb:fe:f1:73:e7:42:d9:4d:e8:
ba:ba:04:73:4e:53:f2:e8:20:74:45:42:89:09:10:
a8:1f:9c:f1:19:34:34:a3:5c:04:2f:49:ce:f3:9c:
c6:98:3f:e0:60:d5:c3:e9:df:79:91:f6:34:52:20:
78:f0:62:57:1a:cb:35:b9:b4:77:cf:4e:e3:50:5a:
fb:4d:39:88:17:b1:72:ce:47:46:3d:b5:1b:8c:d0:
b3:3d:47:98:4e:9a:86:36:23:ec:28:f0:3d:26:ac:
99:82:59:a4:94:68:d8:33:53:23:a8:fb:08:55:23:
ba:a6:c1:ef:bd:bf:82:db:30:8c:12:f7:53:c6:82:
36:31:47:0d:0c:a1:bb:8f:59:36:80:38:8f:65:39:
95:a2:53:5e:ca:21:29:dc:8c:38:c9:9c:65:f7:75:
a6:82:b1:4f:6e:6b:19:6e:a2:9a:76:3c:28:46:a4:
3e:86:73:6e:e5:5f:1f:d2:fa:a9:0f:0b:0a:34:45:
e3:4a:39:4b:73:5d:f5:1b:2f:c1:79:76:71:04:ce:
e6:61:5f:03:d4:9b:91:df:f3:5c:0c:9d:d6:a1:4d:
34:21:c6:b5:85:b2:33:61:50:b7:d9:85:0e:74:95:
07:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:57:7B:29:46:5A:FC:BD:BD:E3:A3:B4:9C:5E:98:8D:14:46:7C:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e/632ef3ad-4ab4-3cd5-ae6e-1c9aaa4e3555.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e/530ba529-ac94-44aa-8a24-334da5fccb1e.crl
X509v3 Authority Key Identifier:
keyid:E2:70:AF:2A:32:F0:30:09:13:CF:91:AB:C2:55:00:27:FA:B8:C1:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e.cer
sbgp-ipAddrBlock: critical
IPv4:
64.6.96.0/20
64.57.64.0/19
64.255.0.0/18
66.37.0.0/19
69.5.160.0/19
74.119.64.0/21
204.10.137.0-204.10.143.255
208.92.160.0/21
216.17.96.0/20
216.239.129.0-216.239.143.255
IPv6:
2607:fe90::/33
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:2e:6a:83:e4:a3:56:70:c7:c5:ad:34:19:31:56:a5:ce:0e:
e7:dd:7c:10:54:07:b7:85:20:f2:fe:fa:ac:88:fb:89:3f:fb:
82:f9:65:e5:69:08:ff:17:3f:dd:5f:a4:63:2b:11:85:76:0a:
32:18:18:25:fe:c8:20:a6:09:db:7a:7a:3b:48:84:81:9e:c8:
98:4e:38:41:9b:46:f6:8b:34:fb:93:37:c0:14:05:d0:79:2a:
03:0f:71:e1:0c:a7:6a:49:7b:c1:61:e6:1f:10:bf:67:9c:bc:
a5:c8:76:0f:99:9e:d9:e9:9e:4e:3c:a9:e3:6c:9e:57:62:01:
e1:26:1d:d5:d1:4a:c4:34:a9:15:0b:8a:40:66:13:2d:9c:fb:
07:b5:54:86:18:7e:0a:f8:fe:3e:62:48:d5:f8:0a:0f:e5:09:
a4:54:01:3b:ef:98:e0:95:53:7b:ff:ee:45:91:5b:65:ac:11:
62:89:77:07:41:64:73:a2:bc:f2:5c:be:b3:bc:ee:ab:0c:16:
18:22:50:10:5a:dd:9a:d7:c6:2a:7a:6a:ff:ba:d5:8c:7f:2a:
3e:04:86:f9:12:56:45:18:ab:45:d3:f7:a7:f9:e7:03:33:1b:
b5:87:68:92:4c:97:7f:8e:8d:17:68:29:4f:7a:b4:ec:7f:68:
f0:a6:47:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:02:46 2025 by rpki-client