Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/5dcb2bbc-de72-3c43-ac94-c549600f1f87.roa
File: 5dcb2bbc-de72-3c43-ac94-c549600f1f87.roa (raw, json)
Hash identifier: 07SMDjcURsU1cHxU72+TQ3Y0+TyYeyZksVdO8AKI/9o=
Subject key identifier: 9A:07:DD:B0:63:8D:80:91:F7:EE:AE:30:BF:6B:14:35:30:39:E7:CF
Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial: 010D0C9F43285848159FDDD42A48F9657937D700
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/5dcb2bbc-de72-3c43-ac94-c549600f1f87.roa
Signing time: Tue 03 Dec 2024 14:00:52 +0000
ROA not before: Tue 03 Dec 2024 14:00:52 +0000
ROA not after: Mon 03 Mar 2025 14:00:52 +0000
asID: 21859
IP address blocks: 23.91.96.0/20 maxlen: 24
23.236.96.0/20 maxlen: 24
23.236.112.0/20 maxlen: 24
23.248.160.0/19 maxlen: 24
23.251.96.0/19 maxlen: 24
45.40.48.0/20 maxlen: 24
45.43.32.0/19 maxlen: 24
45.43.59.0/24 maxlen: 24
65.255.32.0/20 maxlen: 24
69.28.48.0/20 maxlen: 24
104.218.160.0/21 maxlen: 24
104.254.112.0/21 maxlen: 24
107.150.96.0/19 maxlen: 24
107.150.113.0/24 maxlen: 24
107.151.128.0/18 maxlen: 24
107.155.0.0/18 maxlen: 24
128.1.0.0/16 maxlen: 24
128.1.42.0/24 maxlen: 24
128.14.0.0/16 maxlen: 24
162.221.4.0/22 maxlen: 24
162.221.192.0/21 maxlen: 24
169.197.96.0/19 maxlen: 24
172.81.120.0/21 maxlen: 24
172.96.112.0/20 maxlen: 24
192.254.80.0/20 maxlen: 24
199.91.72.0/22 maxlen: 24
199.190.44.0/22 maxlen: 24
199.245.56.0/21 maxlen: 24
208.81.200.0/22 maxlen: 24
209.177.80.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:15:9f:dd:d4:2a:48:f9:65:79:37:d7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Validity
Not Before: Dec 3 14:00:52 2024 GMT
Not After : Mar 3 14:00:52 2025 GMT
Subject: CN=7587da35-3dce-454b-bb8e-fe35faaca361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:2f:90:b6:37:40:9b:9b:44:ec:ab:e9:e0:6a:
2c:2d:05:62:39:82:dd:2b:e6:b7:c3:98:1a:96:d6:
a4:ab:7a:d9:87:9c:b0:67:0b:d7:d7:2c:8d:83:74:
54:df:f1:57:b1:6e:77:e3:27:47:aa:3d:01:cb:f6:
02:c9:59:bf:3b:a2:b5:47:32:7e:27:1d:c6:64:ce:
98:10:53:a2:8d:8b:c2:3f:a8:59:00:30:e3:8e:01:
4d:f3:bd:82:2b:59:5b:4b:84:a1:29:e2:89:6e:35:
0e:96:36:25:60:42:b0:6b:d4:da:e6:97:b7:07:45:
f2:99:5a:3c:2f:fd:9e:6c:57:99:ac:7d:78:cb:17:
13:3b:a3:fa:2e:7e:1b:03:f3:1e:6b:6e:42:73:6b:
e1:03:a8:b3:e1:6d:25:4e:0e:00:7f:35:e0:fe:96:
00:e6:26:49:27:62:d4:21:3d:bd:a2:db:90:57:26:
c2:72:a5:6f:36:6e:c3:a6:37:d8:af:7f:bf:90:62:
3c:14:46:49:58:2a:43:a8:49:c3:46:81:c0:5f:e6:
c5:bb:b3:91:35:ac:51:a1:19:0e:01:e1:7a:67:e7:
59:b7:8d:01:74:9e:51:f8:37:30:a0:5e:09:0a:10:
ed:84:dc:b3:6a:f7:3b:dc:35:34:15:48:70:86:a6:
4f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:07:DD:B0:63:8D:80:91:F7:EE:AE:30:BF:6B:14:35:30:39:E7:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/5dcb2bbc-de72-3c43-ac94-c549600f1f87.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
X509v3 Authority Key Identifier:
keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
sbgp-ipAddrBlock: critical
IPv4:
23.91.96.0/20
23.236.96.0/19
23.248.160.0/19
23.251.96.0/19
45.40.48.0/20
45.43.32.0/19
65.255.32.0/20
69.28.48.0/20
104.218.160.0/21
104.254.112.0/21
107.150.96.0/19
107.151.128.0/18
107.155.0.0/18
128.1.0.0/16
128.14.0.0/16
162.221.4.0/22
162.221.192.0/21
169.197.96.0/19
172.81.120.0/21
172.96.112.0/20
192.254.80.0/20
199.91.72.0/22
199.190.44.0/22
199.245.56.0/21
208.81.200.0/22
209.177.80.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:06:78:e5:7c:4f:97:1f:60:c2:16:af:a1:83:34:b9:79:8a:
59:bc:98:6d:26:17:a7:e3:d4:6f:3f:0f:ea:34:ff:32:ff:ca:
45:16:cd:32:09:02:79:2e:e0:f0:48:15:b0:10:e7:56:a7:5f:
7d:1b:8b:b4:b3:5b:9d:96:4f:b0:d5:32:0d:47:7f:e8:64:69:
b2:03:8a:51:3a:8d:56:47:9a:43:c2:b9:61:0e:b8:b4:85:3f:
57:fe:fe:55:59:32:54:5c:a7:64:36:9b:9f:91:d2:44:8a:87:
22:04:84:a8:a9:6b:73:5a:2a:b5:7b:ea:9f:88:3f:11:f8:92:
7c:32:ce:5a:a8:38:b5:7e:0b:6c:d2:01:5c:d4:bb:84:6d:8e:
8b:5a:ac:7e:be:79:88:63:ca:6a:ff:a0:6b:11:08:61:51:d1:
a6:63:8e:34:95:a5:b7:3b:66:78:46:42:da:73:b2:fd:8f:cb:
e2:98:0c:be:3a:d1:47:92:96:a4:bc:c0:ac:10:6c:8e:14:21:
6e:8f:62:bc:67:3c:88:c6:b1:6d:2b:4b:94:4d:cf:5c:9e:42:
4c:f2:27:f6:52:ac:3b:48:89:ec:72:1c:e3:3a:b0:c8:14:ca:
ee:cc:28:61:f8:4f:4f:ea:b1:ef:95:34:35:40:8f:53:6a:8e:
c7:df:67:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:01:55 2025 by rpki-client