Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8/8457e11b-32d1-34c0-81ea-624f8e85267e.roa
File: 8457e11b-32d1-34c0-81ea-624f8e85267e.roa (raw, json)
Hash identifier: DiG24zL6f5c6gc1r3Gd5pkocIUhbOWPR41Q3HqRke8I=
Subject key identifier: 8A:D0:62:64:BC:DA:A3:D6:F6:6A:E3:83:68:3F:5E:2F:72:AC:4B:0B
Certificate issuer: /CN=7ff6878d-3b7e-4c67-a91a-e21f1042f9e8
Certificate serial: 010D0C9F4328584817051303B1A97003E763ED80
Authority key identifier: 48:84:03:73:7A:40:DD:51:C9:F1:4B:CD:11:48:90:6D:E1:DD:0C:9D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8/8457e11b-32d1-34c0-81ea-624f8e85267e.roa
Signing time: Wed 04 Dec 2024 02:00:39 +0000
ROA not before: Wed 04 Dec 2024 02:00:39 +0000
ROA not after: Tue 04 Mar 2025 02:00:39 +0000
asID: 55254
IP address blocks: 72.46.80.0/22 maxlen: 24
104.37.112.0/22 maxlen: 24
162.211.184.0/22 maxlen: 24
168.100.192.0/19 maxlen: 24
172.96.20.0/22 maxlen: 24
205.201.30.0/23 maxlen: 24
205.220.192.0/20 maxlen: 24
216.10.232.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:17:05:13:03:b1:a9:70:03:e7:63:ed:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ff6878d-3b7e-4c67-a91a-e21f1042f9e8
Validity
Not Before: Dec 4 02:00:39 2024 GMT
Not After : Mar 4 02:00:39 2025 GMT
Subject: CN=3d644b36-125f-4a55-9526-d5e72275724f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ef:d0:47:c1:94:de:bf:68:4c:d2:8e:19:03:
1a:fe:10:60:0c:91:11:62:f0:eb:a9:58:71:53:84:
5d:8c:0c:d5:4e:b8:2b:10:f5:e5:9c:25:d5:1e:e1:
01:aa:1d:ba:ae:44:78:c6:dd:60:4b:71:c2:09:f1:
36:c4:87:25:03:9b:b9:fe:d2:b6:cd:77:e3:65:41:
b2:19:b7:bd:7d:71:2f:56:43:5d:31:79:23:dc:14:
88:52:4a:8e:39:bf:14:c6:4c:0d:4c:56:d7:9c:c6:
df:33:b6:f2:62:a5:5f:18:a2:07:d1:7a:8e:97:f1:
0e:31:0b:03:62:42:fd:26:46:7f:e8:3c:b1:90:cd:
57:9d:64:2f:2a:96:d5:40:6f:d7:1e:93:71:04:5a:
ab:e4:b6:5d:36:83:42:4c:b0:55:2c:35:90:f0:82:
6a:00:a8:f1:6e:6f:2a:18:72:4c:04:10:cb:f3:c3:
d1:2e:d7:bb:1b:c9:41:65:ad:73:d4:6a:37:4c:3f:
84:a5:66:21:27:f2:05:55:48:3d:22:10:00:29:d7:
ee:67:80:bf:6f:e0:34:92:77:e0:1a:2f:59:2d:02:
63:ec:f7:47:81:13:21:1c:07:94:b8:1d:93:5b:40:
6f:f7:e8:2c:54:f5:81:37:4e:26:dd:5a:62:98:6e:
af:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:D0:62:64:BC:DA:A3:D6:F6:6A:E3:83:68:3F:5E:2F:72:AC:4B:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8/8457e11b-32d1-34c0-81ea-624f8e85267e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8.crl
X509v3 Authority Key Identifier:
keyid:48:84:03:73:7A:40:DD:51:C9:F1:4B:CD:11:48:90:6D:E1:DD:0C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8.cer
sbgp-ipAddrBlock: critical
IPv4:
72.46.80.0/22
104.37.112.0/22
162.211.184.0/22
168.100.192.0/19
172.96.20.0/22
205.201.30.0/23
205.220.192.0/20
216.10.232.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:f6:77:a1:96:41:7a:2a:9d:ae:79:74:76:c0:ee:c3:a6:b0:
bc:21:e6:18:9a:f7:97:7b:36:78:e4:64:99:a9:ee:79:92:ae:
0f:16:e0:53:1b:59:d3:92:52:25:70:0a:24:d9:27:70:37:64:
6d:11:1e:98:a3:8c:c7:d5:33:b7:ec:0a:d5:a7:f9:5f:5f:c3:
b6:d6:0f:47:b1:98:85:bf:0f:9f:e1:1c:cb:9e:f4:63:6f:a1:
c6:21:be:47:39:8b:2d:6d:a5:f8:fd:f7:d9:f7:79:0f:d2:e4:
c9:e6:4e:55:21:6a:31:8e:32:83:4b:2d:c2:d5:44:77:56:70:
52:cb:7d:cd:09:cb:01:11:a2:22:fa:c9:69:62:ae:88:5e:39:
62:c8:a0:8c:62:0f:a8:12:5f:93:5b:49:4f:06:aa:8b:4a:a7:
57:61:3d:9f:2b:35:39:1e:67:19:1b:9f:89:6c:44:fd:f9:ac:
68:92:a6:ef:95:ad:22:e3:40:93:bc:1f:88:02:df:9d:5d:84:
a9:ac:c8:15:d4:af:69:69:f0:83:28:c3:e1:77:11:d4:79:5d:
b9:94:21:91:59:6a:40:14:58:4c:bc:dd:de:75:1a:d6:72:92:
a4:8e:72:09:f6:d2:3e:f4:ed:c3:fe:40:d1:21:ca:38:fc:ca:
5d:dc:c9:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:22:59 2025 by rpki-client