Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/c1e8cec1-1172-3640-b1d2-2e95ef1e508a.roa
File: c1e8cec1-1172-3640-b1d2-2e95ef1e508a.roa (raw, json)
Hash identifier: S2gcVyulOYIJ5lpO/TkdByNaqr54AQ+M4+XRpztiChY=
Subject key identifier: 71:49:39:A7:D2:2A:5C:56:17:F3:6D:08:C1:34:B6:0E:50:3D:67:12
Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial: 010D0C9F432858481F652378869FADEF8EA04780
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/c1e8cec1-1172-3640-b1d2-2e95ef1e508a.roa
Signing time: Sat 07 Dec 2024 02:00:39 +0000
ROA not before: Sat 07 Dec 2024 02:00:39 +0000
ROA not after: Fri 07 Mar 2025 02:00:39 +0000
asID: 3462
IP address blocks: 23.91.111.0/24 maxlen: 24
107.155.30.0/24 maxlen: 24
107.155.57.0/24 maxlen: 24
128.1.37.0/24 maxlen: 24
128.1.45.0/24 maxlen: 24
128.1.50.0/24 maxlen: 24
128.1.63.0/24 maxlen: 24
128.1.101.0/24 maxlen: 24
128.1.102.0/24 maxlen: 24
128.14.238.0/24 maxlen: 24
192.254.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1f:65:23:78:86:9f:ad:ef:8e:a0:47:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Validity
Not Before: Dec 7 02:00:39 2024 GMT
Not After : Mar 7 02:00:39 2025 GMT
Subject: CN=1f210885-f3bd-49bd-b239-40a06b0f5407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:05:0c:9f:f0:37:82:30:31:fd:d7:87:65:7c:
0c:e4:e0:50:4e:80:52:59:fb:07:d8:5e:17:83:bb:
19:82:22:95:e7:29:22:35:9b:d4:8b:93:38:2d:bd:
dc:ee:86:0f:d9:8e:f7:ab:34:0d:81:da:75:69:1d:
ea:f8:78:c1:24:99:c0:27:08:c3:09:50:be:fc:b7:
1c:61:cc:60:97:db:7c:8a:80:20:dc:d7:22:26:11:
3f:30:a7:a8:99:b3:a3:8c:03:dc:77:42:b9:01:b1:
9c:c2:f7:d5:31:2a:30:12:2e:9f:98:3b:52:e4:f7:
d5:e1:39:0c:ef:1d:62:10:65:52:81:68:94:7f:32:
8d:48:2b:ca:7c:9f:a6:c5:f8:40:0a:28:ce:c4:c9:
97:6f:8e:d5:46:a8:59:41:f6:35:27:8b:80:e3:30:
36:d8:d3:5e:f0:1a:bb:40:d6:20:fd:46:43:6e:22:
6a:ee:da:0e:67:19:85:14:18:21:86:3d:45:02:a0:
17:52:27:1d:e0:8a:16:20:6c:10:06:b8:78:1c:cf:
02:13:74:08:43:fb:40:81:91:e3:92:12:bc:1b:56:
7e:08:8e:4b:97:6b:d8:ec:17:5e:7c:ef:f2:1c:7c:
8e:21:47:2a:89:32:4b:a6:d1:74:c0:80:60:04:c5:
af:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:49:39:A7:D2:2A:5C:56:17:F3:6D:08:C1:34:B6:0E:50:3D:67:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/c1e8cec1-1172-3640-b1d2-2e95ef1e508a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
X509v3 Authority Key Identifier:
keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
sbgp-ipAddrBlock: critical
IPv4:
23.91.111.0/24
107.155.30.0/24
107.155.57.0/24
128.1.37.0/24
128.1.45.0/24
128.1.50.0/24
128.1.63.0/24
128.1.101.0-128.1.102.255
128.14.238.0/24
192.254.86.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:e1:36:e9:f1:39:52:2d:a1:d6:dd:05:5d:1d:d1:ad:93:cd:
04:4c:5a:01:38:49:29:05:c9:04:e0:dc:ac:e0:7a:cb:74:c0:
5a:15:b1:66:5a:c6:75:52:c8:4a:79:fa:bc:8a:89:8d:9d:f7:
99:3f:73:08:a1:91:e9:f5:55:2a:30:27:be:b4:11:7e:4a:ec:
2a:b8:6f:70:4d:ac:c6:ac:a9:17:07:2f:f3:12:6e:d5:86:2e:
de:16:df:59:c6:4d:ec:9f:37:be:05:c7:b9:6d:21:a2:7b:bd:
a9:ed:fa:54:99:cd:a5:15:e8:10:29:a7:2f:b5:1d:01:42:12:
06:59:14:5c:17:de:87:56:a3:e5:cd:7f:a9:54:8e:5b:c4:ab:
7a:20:d2:d4:19:70:f8:64:da:4f:92:ed:4d:1c:68:98:a2:a7:
b6:fc:30:d0:ff:21:e9:58:30:53:aa:8c:b7:46:84:cf:d7:9a:
a9:94:ce:0b:86:01:e9:be:46:ec:a1:2a:02:a8:17:1a:1e:44:
83:98:c4:ae:25:c6:19:ec:30:06:61:8b:33:46:a6:1f:b5:35:
98:65:72:d5:d0:a3:4d:cc:6e:61:2a:4e:85:c1:7c:13:4c:4d:
79:6a:b8:81:fb:e5:94:1e:bc:dc:ef:d5:c5:de:96:05:c3:b9:
12:43:8d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:35:36 2025 by rpki-client