Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/615e35f9-bfe1-4c69-bb32-cd252c125c65/cebb264b-8916-3bf8-971e-9c880ec664a8.roa
File: cebb264b-8916-3bf8-971e-9c880ec664a8.roa (raw, json)
Hash identifier: W7GI/r5wBmQCNfEbn/vnT6c2XeKjuZi2HCyNHrU+ceo=
Subject key identifier: E7:1D:73:BA:F0:10:D7:CA:7B:9A:6B:00:D9:DE:64:50:AA:A3:E7:45
Certificate issuer: /CN=615e35f9-bfe1-4c69-bb32-cd252c125c65
Certificate serial: 010D0C9F43285847FBE4F164D29740860268CC00
Authority key identifier: 7C:F3:67:47:B2:5A:27:B5:5B:BF:CC:83:68:DC:5D:B2:B8:44:D2:C2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/615e35f9-bfe1-4c69-bb32-cd252c125c65.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/615e35f9-bfe1-4c69-bb32-cd252c125c65/cebb264b-8916-3bf8-971e-9c880ec664a8.roa
Signing time: Sun 24 Nov 2024 08:49:08 +0000
ROA not before: Sun 24 Nov 2024 08:49:08 +0000
ROA not after: Sat 22 Feb 2025 08:49:08 +0000
asID: 53698
IP address blocks: 23.174.128.0/24 maxlen: 24
23.174.129.0/24 maxlen: 24
23.175.16.0/24 maxlen: 24
165.140.128.0/23 maxlen: 24
192.33.139.0/24 maxlen: 24
209.209.4.0/22 maxlen: 24
2604:6040::/36 maxlen: 56
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:fb:e4:f1:64:d2:97:40:86:02:68:cc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=615e35f9-bfe1-4c69-bb32-cd252c125c65
Validity
Not Before: Nov 24 08:49:08 2024 GMT
Not After : Feb 22 08:49:08 2025 GMT
Subject: CN=ca2e50a9-31eb-4218-b160-ac4c4a972d3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:99:c5:b8:74:f0:1e:3d:89:4f:d5:1c:1e:24:
e4:aa:cd:2d:b4:a6:0d:34:81:7f:65:b8:bf:96:90:
2c:af:5e:a4:d4:1a:84:91:bb:1e:3a:2d:b3:14:ea:
09:3d:73:89:26:ee:1d:cc:1b:9a:ac:fc:68:cb:1d:
bc:72:b5:b9:09:31:a9:53:86:28:a0:6a:0a:4b:c1:
8f:31:c5:0d:92:c7:d3:35:0c:9b:34:d0:7b:7e:58:
9c:aa:fa:d7:34:31:ac:2f:6b:86:db:11:fe:4f:d1:
5f:58:05:16:97:1a:06:11:5e:0e:63:35:cd:4d:b0:
38:b9:4b:2e:5f:20:88:5d:c3:e9:52:39:e0:3d:03:
39:f9:c0:3a:fa:27:7a:80:3e:32:cd:d5:6d:b7:cf:
95:80:10:5d:1f:3a:29:73:63:ca:3c:5e:d3:cd:d6:
f0:c2:20:a9:a0:8d:96:22:81:78:b8:90:88:20:0c:
62:4d:f7:9f:36:a0:f3:dd:3d:b8:e8:33:22:59:e8:
19:41:3d:51:fc:93:db:11:42:2c:82:09:61:9b:e3:
75:94:1a:bc:1c:68:ef:e0:cb:51:68:0e:0a:41:10:
6b:70:7b:77:93:19:34:2d:a9:8f:5d:44:f7:c8:47:
d8:1a:fb:11:c6:72:8c:7b:de:af:58:7f:68:08:dd:
c9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:1D:73:BA:F0:10:D7:CA:7B:9A:6B:00:D9:DE:64:50:AA:A3:E7:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/615e35f9-bfe1-4c69-bb32-cd252c125c65/cebb264b-8916-3bf8-971e-9c880ec664a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/615e35f9-bfe1-4c69-bb32-cd252c125c65/615e35f9-bfe1-4c69-bb32-cd252c125c65.crl
X509v3 Authority Key Identifier:
keyid:7C:F3:67:47:B2:5A:27:B5:5B:BF:CC:83:68:DC:5D:B2:B8:44:D2:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/615e35f9-bfe1-4c69-bb32-cd252c125c65.cer
sbgp-ipAddrBlock: critical
IPv4:
23.174.128.0/23
23.175.16.0/24
165.140.128.0/23
192.33.139.0/24
209.209.4.0/22
IPv6:
2604:6040::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:b7:b2:9e:70:38:fe:dc:85:04:59:9e:a5:e1:c0:dc:8e:84:
02:4f:3d:aa:3f:b3:fd:54:e0:8d:9a:3b:ab:23:2b:c4:ae:ed:
0d:9d:e0:05:f5:ee:6b:69:d5:46:89:9f:be:6e:e4:ca:79:ee:
07:60:cb:5f:a6:01:4a:e7:7e:00:1f:c4:cf:cd:7e:0d:76:56:
e0:42:eb:ca:70:45:ed:55:13:76:d8:c1:2f:fb:97:d8:5c:fa:
2b:1a:e4:88:9c:c0:88:a9:a7:c4:43:4e:5e:09:7e:25:b8:06:
0b:f9:43:f0:db:0f:62:e3:46:31:c6:92:76:af:9f:b4:6b:e2:
bc:73:80:a7:8d:84:fd:c4:33:79:70:d7:c9:41:28:bd:f5:93:
3b:51:65:47:a1:c5:40:99:b9:45:33:cb:ea:30:8d:b6:fe:a2:
0c:dc:e3:e8:fe:03:06:87:e5:3e:80:6c:de:76:15:71:04:43:
66:eb:ab:ec:7a:cb:c8:59:ae:76:f8:b6:69:9a:f0:a7:42:85:
0a:b6:ca:c9:52:1e:f2:57:c6:ec:26:b9:85:d1:98:bb:4c:54:
2d:71:96:34:5b:00:76:f2:7d:9e:4d:e9:71:52:9b:49:db:e6:
41:65:dd:43:5b:a8:f0:12:e3:e7:cc:79:1d:e4:c1:7a:f6:4d:
e4:9b:d5:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:15:22 2025 by rpki-client