Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/c2709bb2-a4fd-3cdf-be31-74b81fdaa856.roa
File: c2709bb2-a4fd-3cdf-be31-74b81fdaa856.roa (raw, json)
Hash identifier: 1w9UTjc8aySk69Fak/19Ddy/timesEh6WcJ9IQfobok=
Subject key identifier: CF:C4:8A:94:45:30:59:5B:A0:23:CF:EA:F9:08:82:EB:1C:C2:BD:97
Certificate issuer: /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
Certificate serial: 010D0C9F4328584847E029CBDA1EEF1FAE0BC980
Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/c2709bb2-a4fd-3cdf-be31-74b81fdaa856.roa
Signing time: Sat 21 Dec 2024 14:00:52 +0000
ROA not before: Sat 21 Dec 2024 14:00:52 +0000
ROA not after: Fri 21 Mar 2025 13:00:52 +0000
asID: 394094
IP address blocks: 72.249.184.0/24 maxlen: 24
173.237.184.0/24 maxlen: 24
174.136.40.0/24 maxlen: 24
174.136.44.0/24 maxlen: 24
174.136.48.0/24 maxlen: 24
207.210.233.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:47:e0:29:cb:da:1e:ef:1f:ae:0b:c9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
Validity
Not Before: Dec 21 14:00:52 2024 GMT
Not After : Mar 21 13:00:52 2025 GMT
Subject: CN=e9371d2d-fe5c-43f9-bc6d-a70c594d47d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b2:0a:92:cc:8e:e6:f3:53:8a:99:91:3c:f5:
0b:29:e4:b8:34:42:6d:c8:ee:21:40:17:77:06:fb:
e4:31:ef:ad:82:d5:5c:e5:63:77:00:95:0e:62:5e:
0c:e9:b5:48:40:c0:1f:99:05:7d:b5:93:ce:b7:47:
6d:c5:b2:33:7d:26:1e:1b:04:95:09:1f:d5:2f:53:
fe:95:94:71:72:c2:39:cf:b8:61:b1:34:4e:a1:f6:
7e:4b:d3:59:15:bf:1d:3f:53:19:78:53:b0:46:b0:
de:71:73:f9:06:0f:df:97:d9:cb:1e:62:e8:0e:e0:
c5:9c:59:d3:63:d0:24:86:b6:29:87:48:a5:a5:6f:
0d:b1:0a:5a:36:93:8c:19:d8:ef:27:9d:10:7e:de:
3c:6b:84:6b:85:ff:2a:5a:8e:f0:59:06:a9:8e:ce:
c8:b1:c0:91:41:bb:1e:f8:72:92:a7:2a:17:48:4d:
ca:20:50:29:18:97:e5:c0:2d:f5:67:3e:ba:d8:80:
61:6f:e0:88:2d:b8:7e:0f:20:ab:1d:93:96:65:e4:
6c:e9:af:9f:78:b3:c2:a4:ba:a0:70:6a:b9:39:63:
55:75:ae:15:ed:05:6b:62:29:2f:01:62:e0:2d:c1:
a6:b1:a8:98:0d:ae:15:8e:3a:b3:20:a3:f9:a1:9f:
b2:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:C4:8A:94:45:30:59:5B:A0:23:CF:EA:F9:08:82:EB:1C:C2:BD:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/c2709bb2-a4fd-3cdf-be31-74b81fdaa856.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl
X509v3 Authority Key Identifier:
keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
sbgp-ipAddrBlock: critical
IPv4:
72.249.184.0/24
173.237.184.0/24
174.136.40.0/24
174.136.44.0/24
174.136.48.0/24
207.210.233.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:0b:b8:ce:0b:dc:9e:27:06:05:3e:ec:3f:7a:99:7e:1c:01:
92:bf:f1:b4:f0:0c:85:33:97:47:e2:4f:93:14:09:78:24:7e:
c7:0d:2e:9a:1d:ed:4f:8c:46:a5:84:d3:e6:ac:46:65:d2:9d:
bc:7c:39:17:b7:11:d4:16:ce:fa:ab:09:fc:39:c7:24:6a:1b:
f6:67:c0:4b:2d:fb:44:19:e6:29:8f:64:23:82:7d:f3:80:0a:
1f:20:93:93:b4:d4:7c:8e:0a:50:a9:3b:dc:78:6f:9d:5b:8e:
ed:34:36:1e:83:b2:7a:7a:d1:ab:ce:94:ff:60:3b:2f:be:65:
60:fc:d7:52:50:fb:89:e5:70:1c:a7:67:f1:8b:58:79:46:23:
9f:29:14:8e:17:22:96:f5:49:c0:03:b5:4c:c4:0b:7d:57:81:
c3:2d:8c:8d:82:7c:f3:76:18:fb:13:55:e3:a1:25:46:e2:28:
96:e3:84:8e:51:bf:76:5b:80:21:31:db:ea:12:74:65:89:a8:
c4:9b:d4:b4:7c:45:58:01:35:f3:c6:45:5f:71:3f:0f:76:5d:
36:9c:e6:2f:53:c1:d7:c4:74:8b:aa:4e:9e:08:e4:4b:b1:0a:
53:19:c0:8f:41:bb:14:bd:1c:40:9f:63:79:73:52:96:15:e1:
2b:8e:0a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:04:36 2025 by rpki-client