Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/edecac80-d7c3-48ad-8738-ec98e8c08265/72a9b18c-829a-370b-bfe9-a7a7bf304280.roa
File: 72a9b18c-829a-370b-bfe9-a7a7bf304280.roa (raw, json)
Hash identifier: pMaklBEMSOsJXguS8fI6hUKLAiPUd4jccOap3w4Hvyo=
Subject key identifier: E4:09:5C:A5:86:A3:1C:87:53:07:5D:87:AF:C4:E7:D3:2D:F8:68:20
Certificate issuer: /CN=edecac80-d7c3-48ad-8738-ec98e8c08265
Certificate serial: 010D0C9F432858483025407263A9FD66B6326280
Authority key identifier: 2E:20:36:CA:D5:38:06:D3:8E:AD:50:81:EA:65:9C:73:93:A2:0D:09
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/edecac80-d7c3-48ad-8738-ec98e8c08265.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/edecac80-d7c3-48ad-8738-ec98e8c08265/72a9b18c-829a-370b-bfe9-a7a7bf304280.roa
Signing time: Fri 13 Dec 2024 02:00:39 +0000
ROA not before: Fri 13 Dec 2024 02:00:39 +0000
ROA not after: Thu 13 Mar 2025 01:00:39 +0000
asID: 394475
IP address blocks: 204.246.32.0/21 maxlen: 24
209.35.178.0/24 maxlen: 24
209.35.181.0/24 maxlen: 24
209.35.182.0/24 maxlen: 24
209.35.183.0/24 maxlen: 24
216.185.192.0/20 maxlen: 24
2605:bf40::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:30:25:40:72:63:a9:fd:66:b6:32:62:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edecac80-d7c3-48ad-8738-ec98e8c08265
Validity
Not Before: Dec 13 02:00:39 2024 GMT
Not After : Mar 13 01:00:39 2025 GMT
Subject: CN=2d5d0e0f-2e2e-4011-885a-d08fd123530a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c9:79:35:66:1e:e3:14:33:bb:7d:5f:3b:5c:
ea:57:c6:53:a3:50:ec:db:ee:5b:64:54:8c:ab:ff:
9a:9b:74:80:39:8f:d9:05:4e:9e:5a:3b:29:f0:9b:
6b:d3:5c:ee:b8:67:05:8d:38:27:61:2f:e3:e4:e5:
1f:0b:09:0e:50:bd:47:88:ee:2a:cd:0b:5d:d2:e9:
d0:b5:92:47:c1:53:64:5d:06:c2:90:a5:3d:76:63:
b1:31:10:ca:5c:40:04:1c:a5:43:bd:5e:51:1b:f1:
94:d4:8e:16:e3:af:15:35:d2:47:d6:84:59:d1:29:
a8:f7:05:93:3c:b7:1c:c6:01:a5:f5:b7:2f:52:30:
aa:8e:8f:c7:00:1f:3b:7a:3f:5a:6c:4e:93:79:32:
a5:d0:7b:9a:5f:af:97:d2:01:06:7d:f1:22:3b:da:
d7:93:b4:f7:6b:df:53:7d:20:8e:03:f5:99:2b:6e:
89:79:ef:06:82:61:84:48:7e:9d:0c:d3:56:78:bc:
f9:2a:26:d3:b7:3f:ac:ad:bf:6e:64:6e:93:dd:58:
8b:f0:d0:0c:34:54:48:c4:65:80:0b:a9:66:57:fe:
fc:08:45:c5:1f:75:a1:9b:d9:c4:a5:6b:48:60:dc:
02:e4:7e:f0:ba:eb:66:37:af:7f:02:63:13:aa:81:
55:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:09:5C:A5:86:A3:1C:87:53:07:5D:87:AF:C4:E7:D3:2D:F8:68:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/edecac80-d7c3-48ad-8738-ec98e8c08265/72a9b18c-829a-370b-bfe9-a7a7bf304280.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/edecac80-d7c3-48ad-8738-ec98e8c08265/edecac80-d7c3-48ad-8738-ec98e8c08265.crl
X509v3 Authority Key Identifier:
keyid:2E:20:36:CA:D5:38:06:D3:8E:AD:50:81:EA:65:9C:73:93:A2:0D:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/edecac80-d7c3-48ad-8738-ec98e8c08265.cer
sbgp-ipAddrBlock: critical
IPv4:
204.246.32.0/21
209.35.178.0/24
209.35.181.0-209.35.183.255
216.185.192.0/20
IPv6:
2605:bf40::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:0e:cc:b6:ac:be:91:4b:cd:03:b8:c1:b7:9b:fb:e4:82:13:
03:57:ab:89:26:c5:b0:3f:b3:22:51:7c:63:30:8e:b8:ac:d9:
78:19:f0:da:72:fb:ca:10:d7:4c:2a:00:fd:a9:c2:bc:39:19:
33:8f:0f:3c:65:3c:6d:1e:72:6e:0b:08:e1:1e:43:a2:ee:ed:
6d:95:d0:53:4e:aa:63:db:01:7d:0a:af:4a:30:80:80:a4:96:
03:4a:2b:6a:72:2b:2b:b1:ac:da:4d:14:78:fb:2e:bd:41:6b:
22:40:8e:fe:08:bc:49:6c:3b:68:94:44:72:9e:4c:1c:3d:5d:
60:73:30:25:1b:9e:4a:a6:06:07:92:f5:5d:52:bb:33:b0:be:
ce:c8:62:2e:6c:4c:db:0a:16:da:a0:06:e7:58:1b:68:af:53:
33:13:88:0a:49:02:6c:67:d0:ea:07:06:cb:21:f6:97:53:2a:
03:f3:68:a2:49:8a:84:63:b1:08:42:81:57:6e:d9:d8:d6:59:
9c:d9:23:80:23:ed:d1:d8:b7:8e:a6:cd:1a:90:1a:b4:2d:51:
08:1a:aa:29:21:8a:b4:bb:6f:c1:a1:c8:ea:23:0b:b8:5c:fe:
49:94:46:f8:51:ee:21:86:72:fc:07:ef:d3:43:76:e2:4f:ce:
79:04:94:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:47:08 2025 by rpki-client