Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963/25e93338-0441-3306-b1a8-28fe60a47de0.roa
File: 25e93338-0441-3306-b1a8-28fe60a47de0.roa (raw, json)
Hash identifier: +J2u1hjJGWNjKRAzCTMto8GoYq8q2L7pTBnz67s3IT0=
Subject key identifier: E9:27:E7:FC:0B:F7:45:1D:08:5D:23:91:1A:B8:DF:0A:B8:F3:A8:7F
Certificate issuer: /CN=c86c353d-2ae4-4a28-8df7-0a906b7c6963
Certificate serial: 010D0C9F432858487FB5E2E7108FE5392F46C100
Authority key identifier: E3:D9:E1:82:0A:F3:9C:25:6C:EB:1B:B0:32:69:BE:7F:24:FD:7E:F5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963/25e93338-0441-3306-b1a8-28fe60a47de0.roa
Signing time: Fri 10 Jan 2025 14:00:51 +0000
ROA not before: Fri 10 Jan 2025 14:00:51 +0000
ROA not after: Thu 10 Apr 2025 13:00:51 +0000
asID: 33125
IP address blocks: 66.97.96.0/20 maxlen: 24
204.9.152.0/21 maxlen: 24
204.11.128.0/21 maxlen: 24
204.15.24.0/21 maxlen: 24
204.15.104.0/21 maxlen: 24
207.200.224.0/19 maxlen: 24
2604:9540::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7f:b5:e2:e7:10:8f:e5:39:2f:46:c1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c86c353d-2ae4-4a28-8df7-0a906b7c6963
Validity
Not Before: Jan 10 14:00:51 2025 GMT
Not After : Apr 10 13:00:51 2025 GMT
Subject: CN=628e6d30-5d7f-4e02-8a33-6831617ee68e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b0:ff:d1:97:ea:28:84:ed:21:90:36:c9:f0:
76:b8:3c:47:b9:77:e8:5c:62:87:08:33:48:c2:97:
89:d1:13:0b:7f:14:ba:09:b0:bd:8a:c8:77:d7:90:
45:07:17:da:51:e5:59:fc:d7:30:40:4f:27:92:11:
a3:a7:52:62:d0:b4:92:0e:dc:8a:2a:30:da:40:06:
f6:34:fe:6f:db:91:2b:52:7f:16:2a:42:88:ba:20:
31:98:f8:0f:fa:8e:b3:72:7c:d4:d8:e7:6d:e9:d5:
76:99:a0:61:e4:c2:53:d8:80:13:79:77:e1:bd:73:
76:14:c6:ba:7b:6e:1d:6d:f9:2c:17:82:35:60:42:
de:10:98:84:98:bc:a3:3b:1a:f1:d9:79:48:a9:92:
b2:66:81:f2:1a:af:fc:e6:95:ee:c6:32:0c:16:dc:
fc:a3:fc:93:cf:46:aa:07:da:68:7d:df:34:29:17:
99:da:a5:57:5c:96:32:50:a6:60:73:57:e6:67:27:
cb:1b:7e:51:d9:63:7a:23:e7:24:61:61:54:59:2f:
65:30:4e:ff:6d:1e:ea:16:e1:2f:aa:b6:ad:10:91:
b2:46:60:9e:d6:9e:8c:0c:aa:ee:eb:40:3f:2a:0b:
79:4a:22:c5:dd:d9:72:82:59:ef:61:9d:a8:3e:53:
ab:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:27:E7:FC:0B:F7:45:1D:08:5D:23:91:1A:B8:DF:0A:B8:F3:A8:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963/25e93338-0441-3306-b1a8-28fe60a47de0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963/c86c353d-2ae4-4a28-8df7-0a906b7c6963.crl
X509v3 Authority Key Identifier:
keyid:E3:D9:E1:82:0A:F3:9C:25:6C:EB:1B:B0:32:69:BE:7F:24:FD:7E:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963.cer
sbgp-ipAddrBlock: critical
IPv4:
66.97.96.0/20
204.9.152.0/21
204.11.128.0/21
204.15.24.0/21
204.15.104.0/21
207.200.224.0/19
IPv6:
2604:9540::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:2e:12:12:64:48:4f:ce:82:eb:b8:fb:e9:43:f3:2c:d3:f4:
1e:0d:d2:f2:e8:cf:34:1b:12:6a:ae:21:dc:b4:8b:11:bc:04:
40:10:91:17:f3:a0:19:c6:8e:09:20:71:cf:27:4a:9b:eb:09:
b5:d3:0e:6e:83:1e:d7:c4:1e:f5:24:b1:b9:04:68:e0:53:cb:
a4:5d:2b:3b:b7:87:63:ea:73:9a:8c:bc:87:d7:45:2a:f5:f6:
a0:46:32:1e:74:2a:4e:a0:a4:c3:89:b8:96:d5:6d:48:2b:04:
68:73:53:69:3b:7e:bb:fb:36:e7:ef:39:2e:14:61:08:18:74:
fa:39:99:71:86:af:b4:25:cf:a6:3e:a4:f6:35:a3:ac:69:1b:
2a:3c:7f:f0:ce:5e:b2:12:86:a0:83:30:9c:0a:95:47:d3:06:
c2:3b:41:f1:4d:1d:7d:ae:b9:92:dd:5f:47:e0:ca:0c:5b:fe:
77:2e:ec:9a:96:74:85:5d:1c:34:62:ee:96:23:d2:a9:1d:a1:
57:6b:10:4e:5f:2b:9f:fe:f8:76:77:fc:ce:07:e1:b6:71:ec:
16:8a:8f:c7:29:99:fe:5b:64:35:02:a1:1b:a9:0e:99:30:cb:
73:28:2f:9a:4b:38:56:28:4e:32:99:29:d6:5a:19:40:ec:fd:
72:40:66:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:32:13 2025 by rpki-client