Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e377161-8215-4a85-9659-ebe2f78f6029/f1c711da-f605-3f6f-a69a-2cccda2a1486.roa
File: f1c711da-f605-3f6f-a69a-2cccda2a1486.roa (raw, json)
Hash identifier: l8jVA63yT8d/2vfzpJfqI3qdIAuZY6Fg0Ls9Yqojf7M=
Subject key identifier: 20:F6:74:F5:C3:5F:7D:25:0C:AD:A5:91:29:D2:FA:8F:B1:BA:40:AD
Certificate issuer: /CN=2e377161-8215-4a85-9659-ebe2f78f6029
Certificate serial: 010D0C9F43285848143A6A75D1CB68E671B39C00
Authority key identifier: 01:6E:66:D3:27:17:81:4E:BF:ED:E9:D9:3D:DC:6A:B2:A9:17:F6:4A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e377161-8215-4a85-9659-ebe2f78f6029.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e377161-8215-4a85-9659-ebe2f78f6029/f1c711da-f605-3f6f-a69a-2cccda2a1486.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 26873
IP address blocks: 69.89.160.0/20 maxlen: 20
69.89.160.0/24 maxlen: 24
69.89.161.0/24 maxlen: 24
69.89.162.0/24 maxlen: 24
69.89.163.0/24 maxlen: 24
69.89.164.0/24 maxlen: 24
69.89.165.0/24 maxlen: 24
69.89.166.0/24 maxlen: 24
69.89.167.0/24 maxlen: 24
69.89.168.0/22 maxlen: 22
69.89.173.0/24 maxlen: 24
69.89.174.0/24 maxlen: 24
69.89.175.0/24 maxlen: 24
69.164.224.0/20 maxlen: 20
69.164.224.0/21 maxlen: 21
69.164.232.0/21 maxlen: 21
2607:f960::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:6a:75:d1:cb:68:e6:71:b3:9c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e377161-8215-4a85-9659-ebe2f78f6029
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=794e47c0-d463-49e2-9738-e65ab28bbf2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:eb:74:63:31:97:43:3c:7d:31:89:5b:19:aa:
16:c3:51:5a:59:d7:9b:9d:f4:3e:3b:00:c6:01:4d:
e1:23:70:94:ff:4d:6a:5a:3f:50:cd:58:40:0c:1b:
df:37:60:a4:9f:5b:58:d6:fd:d4:a3:da:75:8f:bc:
da:61:c1:9a:ae:c2:16:f0:00:a3:8a:ec:36:31:94:
d4:d7:7a:e5:c3:3c:ae:e4:8d:20:83:ae:ac:e7:88:
25:ab:90:39:50:fd:08:00:2f:fe:44:f7:fc:9b:8b:
3d:63:25:b6:69:41:3c:ac:36:db:1c:0a:aa:7d:21:
a0:d3:c2:11:39:c8:cd:54:ae:10:69:dc:3b:e3:1e:
86:ba:54:bb:94:0c:21:c0:27:c6:9f:ce:b2:82:25:
66:bf:f6:f2:4f:43:75:9e:a1:98:1f:4e:cc:bd:d4:
af:2f:e6:9a:35:ad:a4:99:6a:89:ee:9c:af:25:26:
39:d4:ff:f9:d9:62:8a:1b:02:18:35:ae:39:a7:42:
b4:71:51:fe:d5:c8:3c:ec:a5:8e:d6:94:65:6c:10:
0a:eb:b2:8c:a7:27:f9:c5:a3:54:4f:77:f2:08:64:
24:33:24:7a:3b:da:cd:e9:eb:c7:96:4d:bd:d0:42:
ef:e7:04:c0:bb:66:d4:55:4f:0b:90:52:89:92:9a:
88:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F6:74:F5:C3:5F:7D:25:0C:AD:A5:91:29:D2:FA:8F:B1:BA:40:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e377161-8215-4a85-9659-ebe2f78f6029/f1c711da-f605-3f6f-a69a-2cccda2a1486.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e377161-8215-4a85-9659-ebe2f78f6029/2e377161-8215-4a85-9659-ebe2f78f6029.crl
X509v3 Authority Key Identifier:
keyid:01:6E:66:D3:27:17:81:4E:BF:ED:E9:D9:3D:DC:6A:B2:A9:17:F6:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e377161-8215-4a85-9659-ebe2f78f6029.cer
sbgp-ipAddrBlock: critical
IPv4:
69.89.160.0/20
69.164.224.0/20
IPv6:
2607:f960::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:89:76:05:d2:5b:b0:b7:e2:e8:6c:1b:43:6a:af:9f:0d:5f:
ff:94:16:90:cb:ec:7f:e1:cf:41:46:7e:c7:0b:d3:ec:cf:e5:
46:d3:bf:e2:1e:89:e9:1e:0c:eb:1e:61:b4:4d:bb:e0:a3:48:
0d:d0:1d:25:81:06:b1:e0:f7:4a:f5:a8:84:51:58:4c:9e:30:
61:d3:b5:69:0a:b5:53:87:06:5d:de:ea:ec:36:b9:85:7b:9d:
39:da:9f:94:e5:91:57:48:7f:06:50:23:61:21:b3:c3:3a:1d:
04:4a:ab:dc:33:45:fa:f3:c6:e4:fa:e5:e9:97:26:af:17:d3:
ba:5e:e8:60:6d:e9:d5:fa:db:df:0e:be:d9:eb:9f:66:ef:f3:
1b:a6:49:d7:29:96:0c:36:1d:6d:f9:6b:72:5b:7d:d8:88:85:
ef:98:b9:3f:72:40:7c:d9:30:a0:c4:73:ba:ea:de:32:f9:32:
27:a8:4c:2c:db:6c:f1:a2:6a:c1:f8:ba:fb:f0:f1:75:c5:0d:
27:04:0d:b8:43:bb:36:e3:67:17:68:73:3d:b6:e8:b8:83:fa:
46:4e:91:2f:b0:fb:16:7d:44:b2:40:2a:c4:c8:93:2a:69:5a:
0c:5f:26:6b:7e:f5:db:72:cb:5b:30:0b:a4:e0:dd:b7:49:44:
7d:6e:4e:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:12:26 2025 by rpki-client