Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/42a8a836-8100-4561-9bfc-5462d4161596/e7297b92-13bc-3141-abe3-3ce60a3de965.roa
File: e7297b92-13bc-3141-abe3-3ce60a3de965.roa (raw, json)
Hash identifier: GIwBiSqLnSwFpF88+maLFR0f6yxtuv0P1ek/Jentems=
Subject key identifier: 38:3C:FC:80:2F:76:39:79:81:E2:D3:CD:E2:F9:A4:2F:CD:6F:E2:50
Certificate issuer: /CN=42a8a836-8100-4561-9bfc-5462d4161596
Certificate serial: 010D0C9F43285848897B244BFB4CCE57B45B80C0
Authority key identifier: 6D:F4:C8:7A:66:1C:CA:E4:AF:0C:F8:4A:C5:4A:68:0D:E1:83:3F:5D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/42a8a836-8100-4561-9bfc-5462d4161596.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/42a8a836-8100-4561-9bfc-5462d4161596/e7297b92-13bc-3141-abe3-3ce60a3de965.roa
Signing time: Tue 14 Jan 2025 02:00:39 +0000
ROA not before: Tue 14 Jan 2025 02:00:39 +0000
ROA not after: Mon 14 Apr 2025 01:00:39 +0000
asID: 4474
IP address blocks: 24.51.50.0/23 maxlen: 23
24.72.192.0/21 maxlen: 21
24.72.200.0/22 maxlen: 22
24.223.100.0/22 maxlen: 22
67.215.16.0/20 maxlen: 20
72.21.64.0/20 maxlen: 20
96.31.96.0/19 maxlen: 19
104.36.40.0/22 maxlen: 22
162.248.136.0/22 maxlen: 22
2604:8c00::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:89:7b:24:4b:fb:4c:ce:57:b4:5b:80:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42a8a836-8100-4561-9bfc-5462d4161596
Validity
Not Before: Jan 14 02:00:39 2025 GMT
Not After : Apr 14 01:00:39 2025 GMT
Subject: CN=9e168237-b55b-4159-b65c-705d69bce598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1f:57:80:42:ee:32:88:29:de:62:c2:e5:f6:
0e:34:fc:6d:19:20:0d:1d:d7:f0:59:de:74:ff:94:
8a:54:93:23:a6:4a:da:c5:1f:90:e1:0f:d9:73:86:
f3:7e:f6:9c:99:fd:0c:08:ea:fa:a4:a5:8d:c3:b2:
d3:07:4d:37:2e:ff:6c:17:d3:c3:c2:d2:2f:c7:6e:
57:aa:de:09:af:90:e3:37:f8:2e:72:aa:a5:35:9c:
9f:80:1b:18:ae:ef:55:c1:31:f6:4d:b8:58:eb:cf:
ba:31:56:c7:d5:86:f4:10:ee:4e:2c:02:e1:ff:81:
01:c2:0f:5a:f4:00:03:bf:cd:4c:d5:08:94:75:44:
4a:0e:8b:e0:84:b2:2f:91:b2:70:81:af:f2:08:bc:
fe:44:f2:35:31:09:d4:36:50:e9:3c:a2:80:ee:b2:
a7:39:73:4b:92:e1:3d:c5:e3:02:cf:57:d6:ee:9f:
39:9b:ee:67:39:7c:e6:5f:07:ef:fc:99:96:03:be:
78:bb:ba:54:67:e2:df:bc:8c:dd:c1:d1:d3:4f:79:
8c:13:65:d8:d7:0f:81:75:4f:4f:3d:fc:20:f6:81:
49:dd:11:cc:d6:57:d2:7b:36:cb:be:f0:68:c0:bf:
ac:fe:bc:a3:51:ca:73:4b:ba:85:d2:ef:23:0c:b3:
0d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:3C:FC:80:2F:76:39:79:81:E2:D3:CD:E2:F9:A4:2F:CD:6F:E2:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/42a8a836-8100-4561-9bfc-5462d4161596/e7297b92-13bc-3141-abe3-3ce60a3de965.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/42a8a836-8100-4561-9bfc-5462d4161596/42a8a836-8100-4561-9bfc-5462d4161596.crl
X509v3 Authority Key Identifier:
keyid:6D:F4:C8:7A:66:1C:CA:E4:AF:0C:F8:4A:C5:4A:68:0D:E1:83:3F:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/42a8a836-8100-4561-9bfc-5462d4161596.cer
sbgp-ipAddrBlock: critical
IPv4:
24.51.50.0/23
24.72.192.0-24.72.203.255
24.223.100.0/22
67.215.16.0/20
72.21.64.0/20
96.31.96.0/19
104.36.40.0/22
162.248.136.0/22
IPv6:
2604:8c00::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:ef:e8:3f:16:86:cb:92:7e:70:73:21:d9:58:b0:e7:ca:94:
a4:a0:40:d5:a1:3a:fa:8e:e8:6c:eb:31:16:29:70:54:97:d2:
85:4a:9f:f5:ac:98:f2:7f:fd:f4:25:3d:5a:29:13:97:ee:d9:
d9:40:47:2c:25:0d:bf:32:14:b0:1d:ae:07:13:70:b0:5a:ed:
29:4a:b3:7b:44:9a:f2:36:9f:40:d1:90:1f:0c:23:e3:bc:91:
a6:0a:62:c4:ea:0e:f3:d9:0f:8d:62:da:d0:25:3f:1a:17:9c:
a5:16:1c:39:5f:06:c6:ab:76:40:c4:63:91:64:bb:c1:b4:5c:
73:67:d1:39:e4:4a:c6:67:fe:0d:2f:c1:cd:ce:73:a1:c3:50:
d7:95:ce:62:03:db:b2:eb:d0:fe:52:bc:62:23:39:31:86:92:
25:d8:1f:57:7b:2c:51:8f:d1:d4:9c:c3:52:4e:77:36:92:82:
7d:31:9a:04:40:27:8a:42:a7:59:8c:a1:02:b9:cc:d0:73:57:
6f:05:4f:b9:01:56:41:55:9d:b1:8d:8a:41:69:74:38:4c:f6:
6e:fa:a8:98:fc:62:37:34:0c:65:d8:91:10:d4:68:f4:c2:61:
59:32:f9:c3:dd:4c:0a:b2:e7:df:18:86:c9:85:8d:8e:1a:ca:
90:e3:77:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:53:34 2025 by rpki-client