Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/bb12e068-974d-3f9d-afd2-9beed92e7d2e.roa
File: bb12e068-974d-3f9d-afd2-9beed92e7d2e.roa (raw, json)
Hash identifier: E+993u8UtK65wA5Gh2VVB2W/bj2/ddzrSNUvk+rfIZQ=
Subject key identifier: 37:A5:59:3C:D4:BF:A0:8B:FB:81:C9:4D:70:67:5E:0A:4F:50:F3:77
Certificate issuer: /CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
Certificate serial: 010D0C9F432858481B6B661E4CF51B1A62310280
Authority key identifier: 52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/bb12e068-974d-3f9d-afd2-9beed92e7d2e.roa
Signing time: Thu 05 Dec 2024 15:50:06 +0000
ROA not before: Thu 05 Dec 2024 15:50:06 +0000
ROA not after: Wed 05 Mar 2025 15:50:06 +0000
asID: 7018
IP address blocks: 23.112.0.0/12 maxlen: 12
45.16.0.0/12 maxlen: 12
99.0.0.0/13 maxlen: 13
99.32.0.0/12 maxlen: 12
99.96.0.0/13 maxlen: 13
99.112.0.0/12 maxlen: 12
104.0.0.0/12 maxlen: 12
104.48.0.0/12 maxlen: 12
104.176.0.0/12 maxlen: 12
107.128.0.0/12 maxlen: 12
107.192.0.0/12 maxlen: 12
107.208.0.0/12 maxlen: 12
162.224.0.0/12 maxlen: 12
172.0.0.0/12 maxlen: 12
2600:1700::/28 maxlen: 28
2602:300::/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1b:6b:66:1e:4c:f5:1b:1a:62:31:02:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
Validity
Not Before: Dec 5 15:50:06 2024 GMT
Not After : Mar 5 15:50:06 2025 GMT
Subject: CN=aeffd072-8fdf-4b4e-9c9e-6f9d58788391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:79:77:66:c0:fe:0b:82:55:e6:1f:74:4f:e8:
79:93:08:93:e4:c6:75:2e:13:4e:8a:23:55:0e:a2:
3e:ea:a6:30:76:ae:2c:3f:15:37:60:2b:a3:cb:c7:
76:b4:05:21:65:7c:fc:2c:83:c5:54:17:e0:a4:6a:
a1:15:f6:37:a8:a3:ae:de:c0:ce:85:59:0f:0c:0e:
03:5d:fd:04:58:3c:1e:66:b0:4f:ed:07:ea:bd:a0:
48:64:a8:9f:a7:2d:b0:98:6e:c9:c2:1d:20:2b:a6:
29:4b:46:07:aa:c5:2c:8d:e2:14:5d:9e:d7:a6:ef:
2d:37:7d:86:67:23:a0:33:81:2c:f2:ec:7a:63:81:
f7:58:e9:8e:6c:ce:4d:35:51:9f:1c:0d:44:00:56:
50:e7:e8:94:c2:f7:16:24:b8:cd:99:dc:b9:70:3f:
a4:a5:98:46:92:79:c5:5c:59:6d:e7:31:b7:5f:60:
04:fe:af:df:5a:7b:bd:3f:21:23:8f:41:a3:9b:8d:
96:eb:03:c2:82:8b:e8:65:e8:d3:60:9b:15:50:b1:
03:8a:c8:89:d9:98:03:92:67:ab:e1:2c:66:a8:91:
9e:e0:a0:18:15:10:b3:57:ae:0d:e8:28:5f:c0:b2:
73:d2:ab:01:fe:da:be:51:39:21:99:49:72:5e:63:
8f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:A5:59:3C:D4:BF:A0:8B:FB:81:C9:4D:70:67:5E:0A:4F:50:F3:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/bb12e068-974d-3f9d-afd2-9beed92e7d2e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl
X509v3 Authority Key Identifier:
keyid:52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
sbgp-ipAddrBlock: critical
IPv4:
23.112.0.0/12
45.16.0.0/12
99.0.0.0/13
99.32.0.0/12
99.96.0.0/13
99.112.0.0/12
104.0.0.0/12
104.48.0.0/12
104.176.0.0/12
107.128.0.0/12
107.192.0.0/11
162.224.0.0/12
172.0.0.0/12
IPv6:
2600:1700::/28
2602:300::/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:1f:5b:e6:da:d2:79:ef:1a:7b:d2:a7:19:5a:26:5a:2a:4f:
0b:29:a8:dd:79:74:1f:d3:a8:54:89:a9:75:62:65:d1:2d:60:
cc:4e:ea:28:2f:f4:6f:bf:8f:fa:16:43:c8:72:b8:d3:cb:e4:
c5:23:a3:de:45:fe:f4:1e:85:ab:95:a8:5d:7d:6b:8a:64:7b:
b7:52:05:6b:0e:79:d3:0f:66:a5:93:1c:99:c0:c0:77:9c:b5:
23:7b:36:be:41:23:7d:a2:79:3f:40:d3:45:fb:dc:10:d4:20:
8b:05:58:41:e6:c8:fb:2e:b4:a4:26:e0:cb:b0:72:ab:ce:a5:
f9:ab:46:8b:24:ec:51:ec:fb:0b:a5:18:ad:bd:e6:9c:11:da:
25:14:54:2e:d7:03:e7:ab:e0:8d:94:58:e9:2f:70:06:0e:bc:
44:4d:5f:1b:30:c1:ae:17:a4:53:f1:79:e0:75:a4:9b:f2:78:
12:2d:66:19:bb:c8:99:51:c1:70:c4:52:4b:f1:ff:af:aa:21:
c7:5a:c9:ff:79:55:81:55:68:e3:5b:4d:2c:e2:12:3f:95:bf:
cf:24:3a:ea:a4:73:bf:ce:5f:ef:25:ca:af:a3:9a:d0:b1:a9:
2c:b2:fe:2f:4d:59:f0:40:9e:fa:f0:12:00:ec:55:4c:b4:12:
ce:a1:23:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:57:47 2025 by rpki-client