Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/b916e9c7-17a0-3f66-aa08-e9b5cd6a7d29.roa
File: b916e9c7-17a0-3f66-aa08-e9b5cd6a7d29.roa (raw, json)
Hash identifier: CGJlDvnqYiEDLxgt8sSHxh8HZvK6meavr9sadsBvkZc=
Subject key identifier: 08:D6:36:23:D5:9E:03:0C:87:AB:2C:79:31:AA:04:61:E3:00:81:BF
Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Certificate serial: 010D0C9F432858484D7593E3DA8DCC7BA170BD00
Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/b916e9c7-17a0-3f66-aa08-e9b5cd6a7d29.roa
Signing time: Mon 23 Dec 2024 14:00:51 +0000
ROA not before: Mon 23 Dec 2024 14:00:51 +0000
ROA not after: Sun 23 Mar 2025 13:00:51 +0000
asID: 33059
IP address blocks: 64.92.69.0/24 maxlen: 24
64.92.70.0/24 maxlen: 24
64.92.71.0/24 maxlen: 24
64.92.73.0/24 maxlen: 24
64.92.74.0/24 maxlen: 24
64.92.77.0/24 maxlen: 24
64.92.80.0/24 maxlen: 24
64.92.81.0/24 maxlen: 24
64.92.82.0/24 maxlen: 24
64.92.83.0/24 maxlen: 24
64.92.85.0/24 maxlen: 24
64.92.86.0/24 maxlen: 24
64.92.92.0/24 maxlen: 24
137.239.196.0/24 maxlen: 24
137.239.197.0/24 maxlen: 24
204.174.17.0/24 maxlen: 24
204.174.28.0/24 maxlen: 24
204.174.29.0/24 maxlen: 24
204.174.30.0/24 maxlen: 24
204.174.31.0/24 maxlen: 24
209.35.106.0/24 maxlen: 24
209.35.107.0/24 maxlen: 24
209.35.108.0/24 maxlen: 24
209.35.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4d:75:93:e3:da:8d:cc:7b:a1:70:bd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Validity
Not Before: Dec 23 14:00:51 2024 GMT
Not After : Mar 23 13:00:51 2025 GMT
Subject: CN=6f966f13-fa98-4c34-925b-c316800e7b0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:94:c9:66:05:42:d3:0d:10:ed:08:62:f8:c0:
e1:bf:2e:03:c7:ea:46:8a:b7:59:9f:38:51:e7:8a:
d0:67:fd:42:da:3f:ec:94:a8:e7:bb:81:73:c5:c2:
9d:b1:2f:7d:39:2d:fc:74:a3:7c:a5:40:4d:f3:c1:
a5:f5:02:f1:43:68:5e:f7:8a:d3:86:05:ff:ac:0f:
13:43:70:ef:f3:95:70:a6:65:1b:12:1b:42:89:f8:
4a:8d:de:8f:0c:0e:34:6e:8b:e3:74:06:cd:a9:03:
a1:c8:f1:c9:9e:c6:e5:c5:64:c6:fa:8e:6e:16:1a:
a1:95:a4:5e:28:db:56:89:01:0a:4b:bb:71:01:3e:
2e:91:89:cd:c2:77:a5:be:e7:8c:54:13:b8:13:17:
34:29:4e:a5:00:86:19:79:59:4c:ce:0d:ae:51:e5:
d0:11:8f:39:97:8f:fa:e7:3f:77:93:17:47:08:52:
12:61:81:bb:05:69:96:2d:ce:94:d6:6d:0c:f9:a8:
1a:0e:d5:67:98:06:c0:66:66:ec:03:d6:10:08:e0:
6b:fd:7b:e3:5f:b3:2f:b9:6f:56:2d:67:70:21:bc:
7d:7c:78:ed:54:a3:57:02:df:3e:aa:8a:54:18:9a:
fb:09:08:0c:20:3c:21:15:3d:27:d1:e6:54:56:df:
f6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:D6:36:23:D5:9E:03:0C:87:AB:2C:79:31:AA:04:61:E3:00:81:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/b916e9c7-17a0-3f66-aa08-e9b5cd6a7d29.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
X509v3 Authority Key Identifier:
keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
sbgp-ipAddrBlock: critical
IPv4:
64.92.69.0-64.92.71.255
64.92.73.0-64.92.74.255
64.92.77.0/24
64.92.80.0/22
64.92.85.0-64.92.86.255
64.92.92.0/24
137.239.196.0/23
204.174.17.0/24
204.174.28.0/22
209.35.106.0-209.35.109.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:02:7e:70:92:0d:b5:e7:a9:e5:ea:8d:cc:03:49:62:84:3b:
4e:d0:56:8b:02:dd:e6:08:b0:96:8f:f0:c5:23:24:d3:e8:63:
c9:b5:e1:8c:35:52:e8:38:5c:25:db:b9:07:51:b6:50:bf:0d:
27:48:d9:c8:0c:75:42:fa:e0:96:db:28:9e:23:15:68:3f:86:
dc:71:a7:9d:04:97:cf:20:8c:0b:c0:d8:d8:81:6d:d2:80:c3:
2b:4a:6b:8d:1d:5f:54:96:33:7b:02:d9:cf:a1:30:18:6c:d8:
f2:57:ed:7d:b3:16:12:fc:8e:ef:64:15:78:6d:00:31:c8:b7:
c3:38:91:c4:f6:d1:97:a2:b7:06:92:ef:56:e5:30:76:ec:c9:
0c:31:83:c4:65:57:cd:4b:28:5a:18:13:3c:69:36:ef:26:76:
03:70:18:9d:3b:4c:5f:5a:1e:55:07:3d:ff:7f:ce:1a:08:fa:
17:a2:14:87:d8:ae:1c:b9:f2:db:0c:41:e0:9b:5a:77:36:2e:
30:d6:0e:7f:eb:59:75:3e:e7:64:d6:45:38:d8:23:c0:3e:71:
57:ca:e0:d9:82:b3:62:08:c9:d8:57:69:16:78:6b:50:42:9d:
02:2a:27:f8:df:e8:88:9c:10:8d:1c:80:1a:32:0a:a2:13:4e:
4c:ab:2f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 16:38:35 2025 by rpki-client