Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/b009589d-c2ae-3e7c-ae62-0db5040f93ee.roa
File: b009589d-c2ae-3e7c-ae62-0db5040f93ee.roa (raw, json)
Hash identifier: W9aZjojk7QJclnEq7O2DwTQ8CCtpmY2onxPM4C2XV9A=
Subject key identifier: 1A:1D:60:3B:F4:1E:F6:D0:B6:82:B9:13:82:9F:28:E6:12:EB:29:99
Certificate issuer: /CN=dbc41d55-9cbd-403e-9fa7-a3334f1ede3d
Certificate serial: 010D0C9F432858487755DDF974A75C7FE5F09B80
Authority key identifier: BD:09:90:7A:2D:9A:2F:56:65:B6:16:4C:EC:24:63:8A:F2:D2:09:9C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/b009589d-c2ae-3e7c-ae62-0db5040f93ee.roa
Signing time: Tue 07 Jan 2025 14:00:53 +0000
ROA not before: Tue 07 Jan 2025 14:00:53 +0000
ROA not after: Mon 07 Apr 2025 13:00:53 +0000
asID: 19905
IP address blocks: 198.174.212.0/23 maxlen: 24
198.174.214.0/23 maxlen: 24
204.221.17.0/24 maxlen: 24
204.221.18.0/23 maxlen: 24
204.221.144.0/22 maxlen: 24
206.9.80.0/24 maxlen: 24
206.145.178.0/23 maxlen: 24
206.145.224.0/23 maxlen: 24
206.146.48.0/22 maxlen: 24
209.32.64.0/21 maxlen: 24
209.32.112.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:77:55:dd:f9:74:a7:5c:7f:e5:f0:9b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbc41d55-9cbd-403e-9fa7-a3334f1ede3d
Validity
Not Before: Jan 7 14:00:53 2025 GMT
Not After : Apr 7 13:00:53 2025 GMT
Subject: CN=9289eaf3-199c-446f-a1a5-81deebd392e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:87:bd:8e:25:d0:45:3d:15:6b:91:19:6c:59:
cb:2a:1a:e1:e8:c1:27:4b:56:f4:f6:3f:6f:5b:20:
38:c6:8e:bf:5d:a7:b4:58:15:d3:71:80:ae:b2:19:
b2:91:d1:6a:6f:9e:71:a4:c1:7e:ef:fd:3e:fc:bd:
e3:72:c5:2f:16:ee:0b:cf:6d:69:fc:9a:90:2f:43:
24:40:43:5f:30:d1:f2:c7:b8:58:d6:9d:e2:80:87:
c1:a4:97:7c:d8:15:82:ae:55:96:74:60:fe:11:f1:
53:99:29:99:2a:8c:56:d2:b2:fb:f8:d0:e0:d6:42:
a7:fc:bf:bf:39:2c:9e:32:0c:34:e8:65:d1:0b:46:
94:92:17:a9:d4:ca:b2:97:be:2a:d4:d6:7a:35:33:
df:28:05:48:50:3a:56:fc:53:02:39:7f:83:c2:67:
bb:ce:aa:a1:72:71:53:e4:af:01:2f:26:68:e2:e4:
6c:8c:81:59:d4:b5:66:b4:8b:6a:db:e8:92:e9:1d:
9a:6e:4b:87:14:3a:42:13:35:fa:20:8f:c8:27:9d:
26:91:60:f8:f3:71:49:52:9b:68:5f:18:79:2e:c0:
34:34:40:67:52:8f:72:1a:86:16:38:c3:b6:88:c6:
a8:68:a5:f9:f7:9e:76:47:e2:d1:5a:4c:62:d3:bb:
9d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:1D:60:3B:F4:1E:F6:D0:B6:82:B9:13:82:9F:28:E6:12:EB:29:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/b009589d-c2ae-3e7c-ae62-0db5040f93ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.crl
X509v3 Authority Key Identifier:
keyid:BD:09:90:7A:2D:9A:2F:56:65:B6:16:4C:EC:24:63:8A:F2:D2:09:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer
sbgp-ipAddrBlock: critical
IPv4:
198.174.212.0/22
204.221.17.0-204.221.19.255
204.221.144.0/22
206.9.80.0/24
206.145.178.0/23
206.145.224.0/23
206.146.48.0/22
209.32.64.0/21
209.32.112.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:95:51:15:0f:d4:44:62:d8:97:80:c6:2e:d2:21:d6:7f:72:
21:ff:89:2f:b2:20:d6:bf:ef:a1:58:49:e7:74:6a:a1:41:ce:
d2:03:18:97:0c:02:e2:10:f2:d8:eb:58:5f:07:2a:6c:d4:ca:
b9:e5:53:7f:ad:a6:b6:3c:f8:5d:95:68:bf:21:bb:ea:45:a5:
b5:07:d1:24:26:24:07:8d:58:0f:ea:c0:8d:03:9a:82:4e:c3:
8e:41:a9:24:03:c6:67:85:31:60:c1:67:81:9d:82:dc:9b:86:
e9:72:01:6b:dc:f5:44:ba:ed:bf:b9:15:23:54:1a:4d:a2:e4:
3d:e9:2c:dd:f5:b5:ae:cc:40:3c:51:7b:3c:db:41:db:62:88:
c8:b1:be:8a:7c:f1:7a:4c:d9:7b:18:58:62:9a:3c:78:ea:6b:
22:3d:8d:ae:41:c8:f7:19:95:88:08:10:ae:6a:8e:6e:27:4b:
58:fb:8f:fa:6e:06:c6:74:8b:b9:5e:7e:76:7f:b0:ce:e0:ee:
f2:44:5e:47:1b:76:41:8a:1a:8a:76:86:e6:18:54:7d:b6:33:
26:1f:9d:34:3f:30:be:f8:2e:81:9d:e5:4b:93:da:f9:cf:46:
77:e0:35:6f:1b:a8:5c:d1:d9:fa:c1:04:30:3a:4f:12:e0:96:
fc:8e:95:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:47:04 2025 by rpki-client