Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19eb256a-4db0-45f5-95c3-26a618298e21/698c34f0-112e-3311-9be0-cb35fb62f459.roa
File: 698c34f0-112e-3311-9be0-cb35fb62f459.roa (raw, json)
Hash identifier: dein4egtMiyC1haF6FXIdWdUt/0tkDMupmCiD0fTqVY=
Subject key identifier: 48:85:48:11:21:44:57:DB:B5:02:AC:6F:89:22:54:02:78:E2:10:5C
Certificate issuer: /CN=19eb256a-4db0-45f5-95c3-26a618298e21
Certificate serial: 010D0C9F432858482BF54DCE6FC0C4EF5698DB00
Authority key identifier: D3:6B:B7:B4:90:BB:05:13:0F:6A:EE:07:0C:17:85:68:8E:F1:3E:E5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19eb256a-4db0-45f5-95c3-26a618298e21.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19eb256a-4db0-45f5-95c3-26a618298e21/698c34f0-112e-3311-9be0-cb35fb62f459.roa
Signing time: Wed 11 Dec 2024 14:00:52 +0000
ROA not before: Wed 11 Dec 2024 14:00:52 +0000
ROA not after: Tue 11 Mar 2025 13:00:52 +0000
asID: 55002
IP address blocks: 63.143.16.0/20 maxlen: 24
68.66.16.0/20 maxlen: 24
97.107.80.0/20 maxlen: 24
2604:f200::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2b:f5:4d:ce:6f:c0:c4:ef:56:98:db:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19eb256a-4db0-45f5-95c3-26a618298e21
Validity
Not Before: Dec 11 14:00:52 2024 GMT
Not After : Mar 11 13:00:52 2025 GMT
Subject: CN=28123d1c-dccb-4279-acf1-06cf68bb4d09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:13:63:56:76:62:fc:57:6b:2e:3b:9f:97:3b:
62:1c:9b:4a:6b:7d:bb:5b:57:07:54:b8:43:3e:7c:
d6:fb:4f:4d:c3:89:b4:be:1f:36:86:01:c8:d1:cd:
f8:cb:f5:29:3d:bc:33:04:3d:00:63:94:f4:b3:b9:
6d:d4:c6:11:89:6c:57:e5:33:d5:43:6f:21:5c:16:
ba:55:79:e9:43:99:2b:bf:dd:13:6f:69:31:21:77:
54:c6:5c:25:ac:39:47:0f:cb:42:e8:33:35:a3:02:
e3:f5:0a:9d:b1:08:88:59:77:86:d7:2b:0f:31:07:
b9:21:4f:1f:48:0f:8e:80:b1:be:5f:a5:b9:09:56:
d8:ac:dd:b3:d3:58:0d:17:cd:63:e6:1b:0b:96:e6:
28:f9:86:09:e5:8d:6d:d6:56:86:47:42:55:99:a1:
ca:e8:4f:69:4d:bd:3e:a4:97:8f:e4:45:5d:e2:4b:
7b:02:17:15:6a:94:93:2f:45:24:03:9c:37:2c:b3:
06:f3:cd:73:79:b7:a5:d8:bb:1c:87:6b:30:93:5f:
96:dc:03:74:85:e1:f7:28:ba:81:82:fe:53:c5:d2:
52:70:a3:39:a7:64:57:d8:c4:75:30:83:d3:68:d5:
23:19:c9:17:a6:01:22:7d:f4:dc:2f:d7:3c:86:b5:
c2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:85:48:11:21:44:57:DB:B5:02:AC:6F:89:22:54:02:78:E2:10:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19eb256a-4db0-45f5-95c3-26a618298e21/698c34f0-112e-3311-9be0-cb35fb62f459.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19eb256a-4db0-45f5-95c3-26a618298e21/19eb256a-4db0-45f5-95c3-26a618298e21.crl
X509v3 Authority Key Identifier:
keyid:D3:6B:B7:B4:90:BB:05:13:0F:6A:EE:07:0C:17:85:68:8E:F1:3E:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19eb256a-4db0-45f5-95c3-26a618298e21.cer
sbgp-ipAddrBlock: critical
IPv4:
63.143.16.0/20
68.66.16.0/20
97.107.80.0/20
IPv6:
2604:f200::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:f3:ec:42:9f:21:d4:fa:1c:a7:3e:e5:5b:a6:96:c5:3b:3c:
8b:d1:05:24:a0:af:fa:8b:d0:16:62:5d:33:01:a3:7b:90:ee:
e3:f6:fd:5b:63:b9:5c:cc:a7:ca:da:ce:56:1d:1b:b4:16:17:
db:b6:c2:65:77:9d:69:12:cf:27:bc:9f:4e:44:44:c3:44:25:
66:ad:d4:24:b6:5a:a1:60:19:ef:2a:a8:85:cd:b8:7c:5f:56:
01:f5:f5:46:77:d6:28:ad:f1:a0:b1:ec:44:8b:8a:af:7c:7e:
b9:ee:2a:85:77:3d:2b:d9:26:1b:36:69:15:97:55:a3:33:27:
51:b5:df:9a:31:b9:0e:4a:22:3d:13:ab:97:64:61:72:b5:33:
8a:f0:f1:2f:d0:fa:c7:3f:47:d6:b5:f1:2f:25:e1:b7:01:f3:
82:84:9b:93:85:b4:ce:2f:52:40:ba:86:36:d5:41:d2:5b:bc:
f5:a3:91:e8:97:53:4d:37:4e:35:2f:05:24:26:77:34:96:5a:
af:f4:d8:49:ea:b4:55:59:01:fe:12:6e:89:2a:85:3e:51:ce:
33:a3:a6:9f:8f:00:0e:37:36:a3:91:09:41:95:67:7a:b5:69:
9e:88:48:fa:32:27:e8:74:2f:e0:1c:c8:72:66:4e:34:51:6e:
a6:35:24:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:47:40 2025 by rpki-client