Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/15adbe77-05e6-3549-9ecb-ba8deecf4b19.roa
File: 15adbe77-05e6-3549-9ecb-ba8deecf4b19.roa (raw, json)
Hash identifier: Ng3Fsf7e0p2y3HcKFB0aBUeIObO+7b5ChnWsPeeewKU=
Subject key identifier: DA:68:EF:04:02:8A:E5:30:60:92:74:1E:AA:B4:0D:3F:3D:1B:2E:27
Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Certificate serial: 010D0C9F432858484D75940B6E56268912422A80
Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/15adbe77-05e6-3549-9ecb-ba8deecf4b19.roa
Signing time: Mon 23 Dec 2024 14:00:51 +0000
ROA not before: Mon 23 Dec 2024 14:00:51 +0000
ROA not after: Sun 23 Mar 2025 13:00:51 +0000
asID: 25645
IP address blocks: 64.92.64.0/24 maxlen: 24
64.92.65.0/24 maxlen: 24
64.92.72.0/24 maxlen: 24
64.92.75.0/24 maxlen: 24
64.92.76.0/24 maxlen: 24
64.92.78.0/23 maxlen: 23
64.92.84.0/24 maxlen: 24
64.92.87.0/24 maxlen: 24
64.92.88.0/24 maxlen: 24
64.92.89.0/24 maxlen: 24
137.239.192.0/24 maxlen: 24
137.239.193.0/24 maxlen: 24
137.239.195.0/24 maxlen: 24
141.193.230.0/24 maxlen: 24
148.59.63.0/24 maxlen: 24
148.59.139.0/24 maxlen: 24
204.16.52.0/24 maxlen: 24
204.174.16.0/24 maxlen: 24
204.174.18.0/24 maxlen: 24
204.174.19.0/24 maxlen: 24
204.174.20.0/24 maxlen: 24
204.174.21.0/24 maxlen: 24
204.174.22.0/24 maxlen: 24
204.174.23.0/24 maxlen: 24
204.174.24.0/24 maxlen: 24
204.174.27.0/24 maxlen: 24
209.35.105.0/24 maxlen: 24
209.42.160.0/24 maxlen: 24
209.42.161.0/24 maxlen: 24
209.42.163.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4d:75:94:0b:6e:56:26:89:12:42:2a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Validity
Not Before: Dec 23 14:00:51 2024 GMT
Not After : Mar 23 13:00:51 2025 GMT
Subject: CN=2b9a59e2-f2f3-469f-9139-06bb132a5a28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e3:de:e3:c4:cf:7f:c6:91:fc:bd:6b:47:3d:
4e:cb:fd:a6:d9:07:ca:d7:45:5b:b5:d6:87:2c:09:
ed:aa:0c:7d:0a:9e:b6:46:9d:8c:01:1f:3e:33:af:
b3:c9:98:2b:1e:7f:f4:6d:84:03:1c:36:bb:0b:ff:
04:80:3e:cb:d8:bf:83:54:06:61:fe:fd:c7:59:b7:
2b:7c:64:d0:c6:10:c7:7c:66:3c:ea:61:2b:53:bd:
09:c0:07:0f:c1:e4:e5:da:05:1f:b9:01:90:01:09:
cc:dc:e8:3b:28:5e:69:40:2a:69:92:be:7a:61:c1:
b5:38:d8:12:50:d5:02:54:49:ed:2a:c3:c4:b5:64:
e7:ef:3b:6b:df:b6:b0:ef:a8:17:df:f9:77:88:a1:
c4:6c:8e:80:8f:81:ef:44:b0:5d:b8:5d:f3:a6:99:
d0:2a:d2:7a:f2:0f:bd:91:28:a3:56:59:79:b2:f6:
a0:04:eb:f8:0d:92:21:e9:81:ad:40:ea:ee:06:2e:
72:0b:57:36:46:e3:64:14:80:07:e3:f5:d6:e7:90:
4c:e5:7a:ba:8a:68:f0:dd:17:35:07:14:34:a7:ac:
c2:1c:40:c9:91:e4:6e:af:e5:b4:c5:29:e3:84:17:
51:a8:45:db:83:2b:0b:a7:8f:09:da:62:05:e3:24:
21:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:68:EF:04:02:8A:E5:30:60:92:74:1E:AA:B4:0D:3F:3D:1B:2E:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/15adbe77-05e6-3549-9ecb-ba8deecf4b19.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
X509v3 Authority Key Identifier:
keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
sbgp-ipAddrBlock: critical
IPv4:
64.92.64.0/23
64.92.72.0/24
64.92.75.0-64.92.76.255
64.92.78.0/23
64.92.84.0/24
64.92.87.0-64.92.89.255
137.239.192.0/23
137.239.195.0/24
141.193.230.0/24
148.59.63.0/24
148.59.139.0/24
204.16.52.0/24
204.174.16.0/24
204.174.18.0-204.174.24.255
204.174.27.0/24
209.35.105.0/24
209.42.160.0/23
209.42.163.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:14:e6:e2:51:26:9a:6c:c5:87:b7:21:b6:61:31:01:91:3e:
39:7b:9a:67:ac:7a:b7:1a:96:cc:d1:f2:86:ba:c2:3e:47:6d:
54:85:9d:0e:8a:d2:df:38:01:44:f0:b5:01:6f:dc:2c:83:0c:
f1:1e:1e:64:89:bc:67:ad:76:8b:7b:2f:f0:d7:5b:93:08:78:
a0:28:8e:ac:7f:17:50:6d:c2:13:af:3c:1d:96:db:dc:4f:c4:
e6:1e:4b:98:03:f1:8e:4d:97:32:3f:88:2d:02:ee:f7:38:62:
97:45:cd:c3:c5:d0:64:8f:54:ca:41:ec:3e:ab:86:fc:9b:a1:
5a:11:a6:3d:95:06:0b:3c:ca:98:7c:98:e4:ed:8d:8f:e1:b6:
6d:1a:5f:5d:00:35:0f:6e:ca:42:4e:72:cd:04:4b:47:1a:8c:
86:17:3d:e5:a8:17:c1:2e:c8:0b:f5:8a:31:f6:57:13:de:42:
fb:c0:37:fc:3a:f6:52:7e:f6:29:52:e3:53:cc:8f:c9:77:d1:
fa:70:8d:6c:d6:7c:bb:66:93:e6:95:79:82:d9:ae:2e:0d:d5:
85:9c:c1:9a:35:89:d0:7f:ba:94:a3:de:c6:44:5a:7a:a8:9e:
0d:7d:1c:a9:2c:2a:f0:0e:e8:8c:81:10:4e:2a:d2:17:a7:54:
b2:13:79:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:51:05 2025 by rpki-client