Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/a526353f-2ddc-3457-bc41-da1cd1cc0f3c.roa
File: a526353f-2ddc-3457-bc41-da1cd1cc0f3c.roa (raw, json)
Hash identifier: w1DXhL8DiH/s3w5sHLRPEYhtTC7glqHeusCX9s9gXgE=
Subject key identifier: A1:BF:A3:83:52:14:43:3A:ED:2F:A7:CD:BD:8F:93:3D:89:62:B2:F7
Certificate issuer: /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
Certificate serial: 010D0C9F432858480D3FCA615E3341C01C878F00
Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/a526353f-2ddc-3457-bc41-da1cd1cc0f3c.roa
Signing time: Sat 30 Nov 2024 14:00:50 +0000
ROA not before: Sat 30 Nov 2024 14:00:50 +0000
ROA not after: Fri 28 Feb 2025 14:00:50 +0000
asID: 17378
IP address blocks: 208.69.108.0/22 maxlen: 24
208.88.240.0/22 maxlen: 24
209.59.0.0/19 maxlen: 24
209.92.7.0/24 maxlen: 24
209.92.39.0/24 maxlen: 24
209.92.44.0/24 maxlen: 24
209.92.53.0/24 maxlen: 24
209.92.56.0/24 maxlen: 24
209.92.62.0/24 maxlen: 24
209.92.68.0/24 maxlen: 24
209.92.70.0/23 maxlen: 24
209.92.74.0/23 maxlen: 24
209.92.79.0/24 maxlen: 24
209.92.88.0/24 maxlen: 24
209.92.90.0/23 maxlen: 24
209.92.137.0/24 maxlen: 24
209.92.224.0/21 maxlen: 24
209.177.16.0/22 maxlen: 24
216.27.0.0/18 maxlen: 24
216.27.64.0/19 maxlen: 24
216.46.48.0/20 maxlen: 24
216.48.112.0/20 maxlen: 24
216.58.224.0/19 maxlen: 24
216.150.128.0/19 maxlen: 24
216.182.80.0/20 maxlen: 24
216.211.128.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0d:3f:ca:61:5e:33:41:c0:1c:87:8f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
Validity
Not Before: Nov 30 14:00:50 2024 GMT
Not After : Feb 28 14:00:50 2025 GMT
Subject: CN=2cf71325-7ade-4a53-bd28-fddc9d26f680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:00:bf:3d:f6:92:96:1b:06:4d:9e:ec:74:81:
ab:68:6a:48:a4:1f:f6:4a:2c:8f:d8:f0:58:64:59:
ca:31:8c:32:47:17:47:20:b7:56:cc:36:50:5f:96:
f7:f7:5e:61:3c:40:4f:95:81:f5:c0:9a:35:46:18:
87:14:b3:93:d3:1c:2c:6c:9d:b8:c4:2b:12:22:ce:
55:cc:fa:57:db:15:09:03:c7:67:23:28:ca:d3:b0:
53:90:4e:bf:42:75:7c:15:89:f3:ab:8e:94:c4:05:
bf:b4:5b:26:e7:fd:e4:ef:0e:47:8e:90:da:cf:4f:
3d:53:56:1d:cd:e6:95:36:b5:f0:57:e0:0d:b3:c5:
ee:bb:db:b8:52:e4:10:3b:e9:4a:f1:49:36:e3:dc:
1b:99:be:02:5d:90:ae:cd:c4:de:4e:1b:0b:86:2e:
ab:c2:52:4a:0d:0c:af:12:89:a7:45:b5:ce:a1:40:
3e:65:63:47:64:73:5e:df:f2:95:63:d8:15:ba:c3:
7a:19:c1:7d:78:f3:43:1c:06:25:2c:c5:17:a5:de:
3f:f5:28:fb:23:3f:83:13:ef:93:8a:48:90:71:a0:
de:0c:b4:07:95:f9:40:24:d4:8d:6b:3f:8b:21:67:
c4:1a:c3:de:0b:51:9f:0b:3c:75:5c:a7:97:20:e3:
29:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:BF:A3:83:52:14:43:3A:ED:2F:A7:CD:BD:8F:93:3D:89:62:B2:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/a526353f-2ddc-3457-bc41-da1cd1cc0f3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl
X509v3 Authority Key Identifier:
keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
sbgp-ipAddrBlock: critical
IPv4:
208.69.108.0/22
208.88.240.0/22
209.59.0.0/19
209.92.7.0/24
209.92.39.0/24
209.92.44.0/24
209.92.53.0/24
209.92.56.0/24
209.92.62.0/24
209.92.68.0/24
209.92.70.0/23
209.92.74.0/23
209.92.79.0/24
209.92.88.0/24
209.92.90.0/23
209.92.137.0/24
209.92.224.0/21
209.177.16.0/22
216.27.0.0-216.27.95.255
216.46.48.0/20
216.48.112.0/20
216.58.224.0/19
216.150.128.0/19
216.182.80.0/20
216.211.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:09:8e:3d:bd:2d:27:06:49:1f:3e:a0:b9:e1:ee:52:f7:e2:
03:41:7b:c2:1c:4e:d4:ed:db:6e:58:8c:cd:e3:83:09:d4:d8:
6a:d5:f6:9b:9d:98:6a:c7:d4:2e:11:cd:ae:31:c7:9b:93:c5:
b2:b7:f1:a8:0b:34:eb:2c:b1:95:c7:b9:5f:2a:02:2e:64:0f:
63:65:7a:64:a6:0d:a9:7e:a8:60:4f:77:be:61:84:60:0c:42:
c9:c9:2b:14:d3:19:57:4a:14:b5:df:65:29:c7:c2:20:af:86:
f4:ae:ff:a6:ca:f0:db:ae:44:27:18:a5:48:52:4d:a5:98:bf:
cb:ad:62:c3:a4:ee:d4:98:91:0b:ee:3c:51:c0:68:43:f5:69:
df:7d:8c:e3:4d:cb:70:3f:fe:e4:90:76:8c:93:23:80:8d:a7:
59:78:cc:94:5d:37:e8:97:7e:6e:04:36:23:99:87:6e:37:df:
f1:37:ff:4f:c6:0a:75:4e:fa:37:eb:98:95:6c:08:ef:cc:77:
95:4d:d3:c1:eb:8b:07:70:22:03:2c:91:6c:98:f6:84:e8:90:
54:1f:81:bc:ad:74:60:df:04:33:22:8b:a9:3b:69:a4:c6:7c:
05:7a:22:a8:e4:e3:af:82:6e:87:0a:54:86:a3:92:b8:e9:97:
99:7a:03:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:36:10 2025 by rpki-client