Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/30450a7f-da8e-3c76-bfb6-08f35d7daddf.roa
File: 30450a7f-da8e-3c76-bfb6-08f35d7daddf.roa (raw, json)
Hash identifier: E/5VSrqLxaqr1yAJzLixOGpNBVJUwWxZckyAQ53AbT4=
Subject key identifier: 67:13:D9:55:D1:C3:AA:A4:F7:0D:99:FD:B5:2D:2C:0E:B2:24:B3:A9
Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial: 010D0C9F43285848159FDDFF86CD02B849131680
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/30450a7f-da8e-3c76-bfb6-08f35d7daddf.roa
Signing time: Tue 03 Dec 2024 14:00:52 +0000
ROA not before: Tue 03 Dec 2024 14:00:52 +0000
ROA not after: Mon 03 Mar 2025 14:00:52 +0000
asID: 135377
IP address blocks: 23.91.96.0/22 maxlen: 24
23.91.100.0/23 maxlen: 24
23.236.126.0/24 maxlen: 24
23.248.162.0/23 maxlen: 24
23.248.174.0/23 maxlen: 24
23.248.184.0/23 maxlen: 24
45.40.56.0/23 maxlen: 24
45.43.36.0/23 maxlen: 24
45.43.52.0/22 maxlen: 24
45.43.56.0/21 maxlen: 24
104.218.162.0/23 maxlen: 24
104.218.164.0/22 maxlen: 24
107.150.96.0/19 maxlen: 24
107.150.126.0/23 maxlen: 24
107.155.15.0/24 maxlen: 24
107.155.43.0/24 maxlen: 24
107.155.45.0/24 maxlen: 24
107.155.48.0/24 maxlen: 24
107.155.50.0/24 maxlen: 24
107.155.55.0/24 maxlen: 24
107.155.56.0/24 maxlen: 24
107.155.60.0/24 maxlen: 24
128.1.38.0/23 maxlen: 24
128.1.40.0/21 maxlen: 24
128.1.48.0/23 maxlen: 24
128.1.79.0/24 maxlen: 24
128.1.131.0/24 maxlen: 24
128.1.132.0/22 maxlen: 24
128.1.136.0/23 maxlen: 24
128.1.138.0/24 maxlen: 24
128.14.224.0/20 maxlen: 24
169.197.113.0/24 maxlen: 24
172.96.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:15:9f:dd:ff:86:cd:02:b8:49:13:16:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Validity
Not Before: Dec 3 14:00:52 2024 GMT
Not After : Mar 3 14:00:52 2025 GMT
Subject: CN=4d15957c-b283-48b0-99e4-068f7d3b27a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c8:c8:74:1d:52:bd:75:2e:a3:81:6d:26:3d:
e9:c6:54:dc:19:a2:cf:00:76:35:14:ae:64:4a:c6:
85:a8:65:6e:97:b1:6d:9b:54:4b:5b:a0:fb:8a:06:
77:62:96:43:fe:15:62:15:58:86:69:bb:d2:5f:08:
a5:bc:77:49:5e:5c:45:26:32:31:74:b9:ba:ec:e6:
34:e4:77:44:ec:85:15:3f:dd:a4:29:fc:ae:5b:a6:
fd:46:8d:ae:28:b7:5c:fe:ea:75:14:0a:dd:2b:24:
a4:aa:96:27:83:18:25:a0:2f:b6:4c:89:92:07:fa:
e6:ad:c8:70:3e:2c:da:cf:a2:10:20:b6:d2:17:ac:
db:ad:60:63:42:80:8c:38:d5:a4:6f:3e:ab:1e:94:
ed:1e:16:4d:37:a7:3e:49:40:bf:d8:d6:c0:32:1d:
49:16:84:47:62:01:69:fb:13:83:85:29:cc:0a:77:
13:41:96:47:f2:78:6f:68:0e:e6:bd:5b:0d:6e:c0:
5a:2c:84:1d:d8:90:8c:2e:5c:80:e2:82:76:ef:77:
f3:11:46:d0:62:04:74:60:30:47:96:05:20:54:d6:
b8:0a:3a:0f:47:61:a1:8a:4d:17:ba:f5:b4:cc:13:
9f:ca:6f:d9:11:24:e8:da:fb:9e:65:bf:e2:e5:ae:
df:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:13:D9:55:D1:C3:AA:A4:F7:0D:99:FD:B5:2D:2C:0E:B2:24:B3:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/30450a7f-da8e-3c76-bfb6-08f35d7daddf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
X509v3 Authority Key Identifier:
keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
sbgp-ipAddrBlock: critical
IPv4:
23.91.96.0-23.91.101.255
23.236.126.0/24
23.248.162.0/23
23.248.174.0/23
23.248.184.0/23
45.40.56.0/23
45.43.36.0/23
45.43.52.0-45.43.63.255
104.218.162.0-104.218.167.255
107.150.96.0/19
107.155.15.0/24
107.155.43.0/24
107.155.45.0/24
107.155.48.0/24
107.155.50.0/24
107.155.55.0-107.155.56.255
107.155.60.0/24
128.1.38.0-128.1.49.255
128.1.79.0/24
128.1.131.0-128.1.138.255
128.14.224.0/20
169.197.113.0/24
172.96.124.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:28:d8:51:cd:e5:27:b0:cc:f1:08:16:93:9b:8d:f6:8e:94:
e9:0e:3d:9c:f0:02:5f:00:c1:2d:d5:56:1b:45:1f:04:f2:f9:
b9:dc:e1:3f:a1:e5:4e:64:d3:f2:0e:7f:99:fe:97:ac:4c:5a:
eb:a9:e4:c6:6c:31:26:31:10:98:c4:b3:3e:3d:c6:a9:5b:8d:
95:f5:5d:cf:12:ab:a9:69:c8:17:37:b4:c7:ae:94:87:cc:6d:
12:9e:75:98:84:c4:cb:3b:69:70:fb:1e:81:79:93:2c:e3:e3:
ed:5c:0f:be:cf:45:6e:66:b5:bc:c6:af:25:ec:cf:c6:cc:15:
22:32:bf:7e:db:d6:31:04:04:65:e4:69:58:df:20:d3:b9:d6:
ed:c2:03:99:72:47:88:2f:e9:72:68:26:3a:4d:d6:51:f5:33:
35:59:73:d4:c4:bd:e0:7f:f7:f3:47:c3:4a:56:e6:0d:f5:e0:
6d:40:d8:56:85:06:0f:e6:af:1c:af:fa:12:58:e3:6b:34:86:
69:52:00:fd:c9:fd:f2:00:ee:25:77:3e:65:b3:43:35:1a:cc:
9b:90:37:a8:6e:15:63:e2:d1:a8:b0:5f:fc:fd:5a:6a:41:ff:
e4:15:a8:2a:f8:85:6d:34:61:5d:dd:6a:9d:24:c5:ca:a1:af:
8f:f5:70:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 21:33:27 2025 by rpki-client