Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a24ab18f-7bd4-439d-a6af-f2605cf8130e/385d9e3e-e5e1-352e-8d3e-747a4e1a6f2d.roa
File: 385d9e3e-e5e1-352e-8d3e-747a4e1a6f2d.roa (raw, json)
Hash identifier: 4AzZwEaJ7b/LeK7WGF2ZQBk8v77Dz8VY80pSCFS2QJQ=
Subject key identifier: C8:A8:79:E4:D7:6A:EF:A5:3D:81:34:38:29:42:8A:E3:46:F1:BB:9F
Certificate issuer: /CN=a24ab18f-7bd4-439d-a6af-f2605cf8130e
Certificate serial: 010D0C9F43285848960B5A476EBFE2376A9364C0
Authority key identifier: 39:1B:BF:E7:09:A9:F5:C4:B0:EB:5F:F3:8F:5D:DC:74:FB:F6:55:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a24ab18f-7bd4-439d-a6af-f2605cf8130e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a24ab18f-7bd4-439d-a6af-f2605cf8130e/385d9e3e-e5e1-352e-8d3e-747a4e1a6f2d.roa
Signing time: Sat 18 Jan 2025 14:00:52 +0000
ROA not before: Sat 18 Jan 2025 14:00:52 +0000
ROA not after: Fri 18 Apr 2025 13:00:52 +0000
asID: 396226
IP address blocks: 66.146.226.0/23 maxlen: 24
148.59.145.0/24 maxlen: 24
173.231.64.0/23 maxlen: 24
173.231.68.0/22 maxlen: 24
199.193.59.0/24 maxlen: 24
200.50.128.0/21 maxlen: 24
209.142.72.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:96:0b:5a:47:6e:bf:e2:37:6a:93:64:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a24ab18f-7bd4-439d-a6af-f2605cf8130e
Validity
Not Before: Jan 18 14:00:52 2025 GMT
Not After : Apr 18 13:00:52 2025 GMT
Subject: CN=09cc7c09-ca31-4eea-bf2c-8c8371c785c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:25:f0:68:76:a2:e1:09:9e:50:56:62:69:2f:
59:d4:b7:8d:42:de:65:d5:ba:73:29:ca:14:da:c8:
d5:87:52:58:a8:c0:8b:83:ad:d3:60:0f:9a:70:15:
f2:ce:a1:03:47:bd:7c:a5:a7:1d:9a:d8:95:0f:12:
49:94:91:f7:c0:56:e0:bb:d3:7a:b0:3a:85:df:b4:
7d:6d:82:ec:f1:47:5b:41:a4:43:39:1b:6e:73:cb:
71:ef:89:f0:16:14:6d:4a:25:62:e7:2d:ae:ab:0c:
72:bc:a9:f9:60:80:08:e9:1d:1e:71:9c:06:f8:23:
e1:53:b6:47:ce:cd:ab:8b:b0:7c:ad:60:cf:c9:a9:
1d:a1:85:c5:c3:3b:14:9d:f7:e4:d4:5d:77:af:de:
ff:7b:4f:63:c7:05:ae:ef:93:0a:dd:c2:18:12:3e:
78:45:50:b7:01:e2:c6:57:1d:fa:85:24:6e:f0:07:
07:77:b1:94:02:b1:f8:f8:6d:49:04:ba:9c:91:e8:
96:44:9f:90:fd:2a:ce:f4:2e:7f:e3:58:a5:e8:00:
1a:14:cd:8a:4c:5d:5e:ab:d0:91:ab:a6:f8:10:cc:
eb:f5:9d:5d:39:a7:17:74:09:fb:1a:dd:48:02:32:
e4:36:4f:b1:8b:6d:8c:d6:5e:c4:75:68:2a:9b:6d:
50:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:A8:79:E4:D7:6A:EF:A5:3D:81:34:38:29:42:8A:E3:46:F1:BB:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a24ab18f-7bd4-439d-a6af-f2605cf8130e/385d9e3e-e5e1-352e-8d3e-747a4e1a6f2d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a24ab18f-7bd4-439d-a6af-f2605cf8130e/a24ab18f-7bd4-439d-a6af-f2605cf8130e.crl
X509v3 Authority Key Identifier:
keyid:39:1B:BF:E7:09:A9:F5:C4:B0:EB:5F:F3:8F:5D:DC:74:FB:F6:55:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a24ab18f-7bd4-439d-a6af-f2605cf8130e.cer
sbgp-ipAddrBlock: critical
IPv4:
66.146.226.0/23
148.59.145.0/24
173.231.64.0/23
173.231.68.0/22
199.193.59.0/24
200.50.128.0/21
209.142.72.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:6f:8c:bd:08:a3:46:6e:42:0e:d9:b6:23:3b:d7:bc:c1:65:
00:fc:b9:7e:19:0c:49:c4:0b:33:f2:b3:b9:84:70:70:9e:97:
ff:cb:ae:95:36:9e:85:a8:70:d4:95:ee:30:12:9f:c7:57:bb:
4f:91:d6:69:c6:aa:0c:47:91:f3:f0:3e:a4:ae:cb:3c:ee:ca:
e5:a3:4f:8b:9d:98:f3:a4:70:87:90:52:9a:2f:de:36:12:9d:
47:a8:5d:e3:b9:f8:18:78:e7:22:9d:b1:4b:85:f1:55:07:f8:
68:35:4b:6b:fb:2b:0e:8a:f2:98:31:52:ab:f3:e4:28:fa:65:
71:eb:5d:f5:15:c0:a1:1b:f7:2a:d0:90:91:42:27:4b:c8:29:
14:f6:d2:dc:a4:a0:ac:aa:ea:2a:fe:89:59:a7:05:95:4b:bb:
f3:ad:0b:b1:31:ca:8e:f8:12:2d:bc:f2:f0:b7:7c:6d:f8:5e:
d1:49:06:db:39:6d:d6:af:57:a9:3c:e4:66:e5:e3:d9:50:68:
a6:2d:53:41:05:15:a6:f6:71:d2:41:4a:cd:a2:57:b1:64:69:
11:6a:de:81:ce:fe:64:df:88:5a:33:bf:9f:dd:57:33:47:f0:
f3:75:40:07:43:77:ac:2f:b8:82:c3:0b:2c:6f:d8:41:7f:21:
33:df:aa:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 14:01:03 2025 by rpki-client