Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/066c6b6f-1287-4dc0-9074-6cef3c211c0e/4f89d9d4-dbe8-3d2f-a529-a977e0d57156.roa
File: 4f89d9d4-dbe8-3d2f-a529-a977e0d57156.roa (raw, json)
Hash identifier: la1U+DIpeVYiJAAZO+KWj/swnqTE1saJs8NaPLnFfag=
Subject key identifier: 63:20:B8:43:A7:F0:E7:89:4A:7F:66:38:07:58:6C:F2:66:F7:FD:C4
Certificate issuer: /CN=066c6b6f-1287-4dc0-9074-6cef3c211c0e
Certificate serial: 010D0C9F4328584827C544D2373B34A1ED4ADD00
Authority key identifier: B8:90:E1:34:AE:A8:99:2E:DB:5E:9F:81:06:47:6F:DB:9E:79:5A:75
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/066c6b6f-1287-4dc0-9074-6cef3c211c0e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/066c6b6f-1287-4dc0-9074-6cef3c211c0e/4f89d9d4-dbe8-3d2f-a529-a977e0d57156.roa
Signing time: Tue 10 Dec 2024 02:00:40 +0000
ROA not before: Tue 10 Dec 2024 02:00:40 +0000
ROA not after: Mon 10 Mar 2025 01:00:40 +0000
asID: 46719
IP address blocks: 140.106.208.0/20 maxlen: 24
199.167.132.0/22 maxlen: 24
199.188.240.0/22 maxlen: 24
204.154.240.0/21 maxlen: 24
206.190.228.0/22 maxlen: 24
216.213.112.0/20 maxlen: 24
2600:d000::/28 maxlen: 28
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:c5:44:d2:37:3b:34:a1:ed:4a:dd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=066c6b6f-1287-4dc0-9074-6cef3c211c0e
Validity
Not Before: Dec 10 02:00:40 2024 GMT
Not After : Mar 10 01:00:40 2025 GMT
Subject: CN=f507470e-6474-45d5-8f9f-878562ec7489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:99:d4:e6:18:b9:e4:dc:19:fc:9d:14:d3:4d:
2a:b7:26:68:cb:64:42:2b:cc:95:ba:d0:40:f9:9c:
44:a9:9c:d7:7a:a5:ce:08:09:94:27:52:22:f1:e3:
0b:17:45:aa:7d:73:cf:52:a3:e8:4b:47:f4:b4:28:
0b:1a:4e:46:0b:4a:0a:fc:07:f7:eb:9c:16:ea:89:
3e:18:57:7a:3f:7d:42:e4:08:c7:e5:a8:30:9b:07:
e1:9f:4b:57:ec:4a:80:fa:67:84:bf:d4:35:1e:9c:
98:63:48:6a:a9:94:c8:a7:db:b0:82:bc:28:e0:39:
2c:d2:3a:fb:db:10:41:47:b0:de:b2:2b:5f:f4:08:
d4:0d:8e:09:73:66:d5:e7:d5:bf:0f:79:ba:4a:ff:
1b:32:c3:af:38:f4:a3:e7:1e:b5:09:0c:a2:b4:53:
a5:54:b3:82:d2:3d:86:44:5c:db:4e:7e:8f:9d:26:
65:e6:ba:7f:2a:31:b2:cf:d2:c5:44:fe:ec:6b:c1:
75:7b:55:2d:4a:3b:38:4e:dd:9e:47:cb:61:14:15:
b7:62:18:d0:6b:c6:06:74:fc:a0:a4:3f:eb:8f:21:
9c:b5:3a:29:48:80:f9:69:e8:77:e1:95:73:44:3f:
76:51:e6:33:23:79:44:63:59:08:90:2c:30:60:41:
93:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:20:B8:43:A7:F0:E7:89:4A:7F:66:38:07:58:6C:F2:66:F7:FD:C4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/066c6b6f-1287-4dc0-9074-6cef3c211c0e/4f89d9d4-dbe8-3d2f-a529-a977e0d57156.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/066c6b6f-1287-4dc0-9074-6cef3c211c0e/066c6b6f-1287-4dc0-9074-6cef3c211c0e.crl
X509v3 Authority Key Identifier:
keyid:B8:90:E1:34:AE:A8:99:2E:DB:5E:9F:81:06:47:6F:DB:9E:79:5A:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/066c6b6f-1287-4dc0-9074-6cef3c211c0e.cer
sbgp-ipAddrBlock: critical
IPv4:
140.106.208.0/20
199.167.132.0/22
199.188.240.0/22
204.154.240.0/21
206.190.228.0/22
216.213.112.0/20
IPv6:
2600:d000::/28
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:12:72:ed:1d:43:92:eb:b1:43:24:d5:47:f2:7f:2f:d3:09:
e6:4e:f4:42:2b:eb:a8:db:1f:12:68:56:a8:0a:93:b2:6a:56:
8a:57:3c:54:5c:e6:5c:5c:20:e7:c8:c9:a4:7b:61:3b:7c:0b:
dd:1c:84:86:af:51:70:80:b6:6b:0b:28:30:32:56:20:75:78:
97:37:b1:ff:f3:53:9b:a8:f8:60:7e:d0:bd:a3:2e:59:a6:91:
67:80:d7:d0:e8:0b:aa:dd:54:ba:b5:f5:4b:75:14:80:37:5b:
7a:7e:90:e1:30:16:2d:7e:71:47:f3:dc:16:a5:f5:e9:57:9d:
4f:7e:8e:c9:41:19:5b:2b:a5:e5:7f:3a:45:d4:61:81:c8:16:
0a:2d:cd:7b:8e:1b:45:8d:01:44:79:40:c7:dc:b4:01:45:e1:
5b:bf:2a:be:e2:b1:b0:a2:cb:6b:d4:f6:b4:8c:8a:97:0e:9b:
d1:0a:11:c9:b8:bd:4a:e0:b9:c6:33:74:c9:b9:fe:00:f7:08:
4e:2d:d9:7a:7d:59:83:92:b4:6f:ad:b8:fc:fa:b4:14:d1:96:
4f:bb:7f:fd:91:d2:5e:76:04:46:52:73:f9:05:3b:ee:06:8f:
5b:97:39:bb:75:f0:9c:71:f0:99:79:a6:cf:f8:10:6f:df:3c:
ce:9e:ec:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 12:05:25 2025 by rpki-client