Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc/ed27bdcf-9db7-396d-9f50-4784ec12e9d0.roa
File: ed27bdcf-9db7-396d-9f50-4784ec12e9d0.roa (raw, json)
Hash identifier: VYfowL/gz8PBCGUcHWVMbNvfQoHpxRulj1dqRkwYsMQ=
Subject key identifier: 11:6F:0B:AD:5C:9B:21:BB:8E:CB:35:70:15:9B:69:7C:AE:6F:05:38
Certificate issuer: /CN=7a7abeff-feac-4cc9-9077-866f0bb1b8cc
Certificate serial: 010D0C9F432858483F802A7FA71666FA27DC8FA0
Authority key identifier: FB:BF:7E:3A:E5:BD:B2:6B:C2:DD:40:13:1B:AE:F1:45:BE:AC:12:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc/ed27bdcf-9db7-396d-9f50-4784ec12e9d0.roa
Signing time: Wed 18 Dec 2024 14:00:52 +0000
ROA not before: Wed 18 Dec 2024 14:00:52 +0000
ROA not after: Tue 18 Mar 2025 13:00:52 +0000
asID: 19108
IP address blocks: 24.224.36.0/23 maxlen: 24
24.224.44.0/24 maxlen: 24
24.224.55.0/24 maxlen: 24
24.224.56.0/24 maxlen: 24
24.224.58.0/23 maxlen: 24
24.224.60.0/22 maxlen: 24
24.245.72.0/22 maxlen: 24
64.234.0.0/23 maxlen: 24
64.234.8.0/24 maxlen: 24
64.234.16.0/24 maxlen: 24
64.234.30.0/23 maxlen: 24
64.234.34.0/24 maxlen: 24
64.234.47.0/24 maxlen: 24
64.234.55.0/24 maxlen: 24
64.234.67.0/24 maxlen: 24
64.234.68.0/24 maxlen: 24
64.234.74.0/24 maxlen: 24
64.234.78.0/24 maxlen: 24
67.21.185.0/24 maxlen: 24
69.59.64.0/24 maxlen: 24
69.59.73.0/24 maxlen: 24
69.59.82.0/24 maxlen: 24
69.59.104.0/24 maxlen: 24
208.91.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3f:80:2a:7f:a7:16:66:fa:27:dc:8f:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a7abeff-feac-4cc9-9077-866f0bb1b8cc
Validity
Not Before: Dec 18 14:00:52 2024 GMT
Not After : Mar 18 13:00:52 2025 GMT
Subject: CN=60e54e21-1374-47aa-acfc-5c97e8f369ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:2d:a6:4f:23:f0:d6:f8:da:1c:99:9f:18:da:
8e:b0:25:03:62:47:64:ba:06:ca:1c:61:10:75:8f:
bf:04:cb:3b:dc:c7:e0:54:74:75:eb:25:c2:9c:f5:
da:06:80:a1:46:39:33:cb:19:b5:a8:86:05:9c:a0:
e7:b5:7c:e0:d1:4c:dc:c0:fc:7a:6f:17:f0:fe:56:
e9:ea:79:d8:b8:5a:06:0d:c0:3d:59:0a:50:31:af:
b2:c3:b6:d4:30:c0:1e:d6:0a:e9:1d:23:26:74:bd:
93:26:ec:9d:26:eb:48:f5:f8:94:81:75:3c:ac:b9:
86:0e:5d:16:39:e0:e3:b9:b7:1b:98:3c:7a:6a:9c:
0e:14:ec:2d:5a:2b:71:03:a2:e2:13:4b:ca:14:1c:
e7:e2:0c:15:31:c6:da:63:0e:f9:17:82:52:8c:b8:
87:22:87:c1:cc:9a:40:49:e0:31:36:07:b8:b1:d1:
0d:8c:73:10:04:77:59:aa:fa:f2:55:84:3e:cb:e6:
1e:fc:b1:a9:b5:4e:0d:60:18:ec:cf:dc:4e:cd:14:
fc:78:35:78:cc:c7:26:e8:6b:33:5d:e4:2d:6b:f5:
38:5d:9f:57:cc:7a:52:48:ec:63:6d:cd:3b:b9:be:
32:7c:e5:ff:c8:9f:95:1d:e9:de:93:2e:12:b9:60:
52:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:6F:0B:AD:5C:9B:21:BB:8E:CB:35:70:15:9B:69:7C:AE:6F:05:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc/ed27bdcf-9db7-396d-9f50-4784ec12e9d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc/7a7abeff-feac-4cc9-9077-866f0bb1b8cc.crl
X509v3 Authority Key Identifier:
keyid:FB:BF:7E:3A:E5:BD:B2:6B:C2:DD:40:13:1B:AE:F1:45:BE:AC:12:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc.cer
sbgp-ipAddrBlock: critical
IPv4:
24.224.36.0/23
24.224.44.0/24
24.224.55.0-24.224.56.255
24.224.58.0-24.224.63.255
24.245.72.0/22
64.234.0.0/23
64.234.8.0/24
64.234.16.0/24
64.234.30.0/23
64.234.34.0/24
64.234.47.0/24
64.234.55.0/24
64.234.67.0-64.234.68.255
64.234.74.0/24
64.234.78.0/24
67.21.185.0/24
69.59.64.0/24
69.59.73.0/24
69.59.82.0/24
69.59.104.0/24
208.91.57.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:ee:aa:b6:1a:3a:fc:0a:6d:26:87:e2:9e:78:2e:47:7c:c9:
1b:83:98:b8:d7:d7:8a:b0:a1:46:a0:a2:b7:54:4f:52:87:8b:
0e:2e:10:d1:1f:ed:ca:a9:7d:09:d6:fe:05:00:0e:b9:ec:9c:
04:59:03:10:c2:0c:7b:5b:57:9c:79:13:d1:a1:c6:7a:bc:7a:
06:7c:df:c5:2d:4f:e5:0e:30:66:eb:ce:88:e6:2e:09:5d:29:
fb:50:05:85:b5:e6:ba:5d:17:11:6b:ef:df:48:8f:a5:cd:1b:
08:dd:6e:86:03:c3:21:38:87:0b:9d:d8:d9:ad:3c:3f:e6:04:
70:30:4d:2d:92:f8:b6:0d:02:7e:87:6d:0d:d2:44:b2:95:38:
48:a1:2b:0c:ea:42:49:90:a0:8e:08:3e:61:20:dc:3e:df:f6:
d8:7a:c9:15:8b:e7:bd:01:02:41:4c:f2:30:57:25:cf:ea:a2:
19:87:bc:97:a5:4f:e2:f8:93:cb:c9:8e:56:58:7c:d3:55:7d:
23:60:27:2e:a2:3e:ef:5f:d8:6a:21:1c:ba:cc:fa:07:97:18:
41:12:8a:81:96:cb:2c:38:f0:a5:05:0e:84:6f:58:f0:35:1d:
89:11:7f:b2:01:52:6a:01:f2:4a:10:7a:d1:89:89:fc:b6:95:
34:d2:60:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:25:40 2025 by rpki-client