Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340/85176132-47c9-32a1-9e04-6dadc4f6fc23.roa
File: 85176132-47c9-32a1-9e04-6dadc4f6fc23.roa (raw, json)
Hash identifier: uXDI/DiZRSwa68E0hz8R4pQxNJkJ6MMe0CQFD/GqkYk=
Subject key identifier: 51:FE:AD:AA:FB:0B:7D:C0:AC:64:51:5D:D6:F9:DE:65:F0:8B:23:DF
Certificate issuer: /CN=37a1bff3-cff2-41f8-a1d2-8a10cad7e340
Certificate serial: 010D0C9F43285847F84F793B1D53344CDDC00E00
Authority key identifier: 0C:8C:A0:41:6E:20:D0:55:A5:33:45:77:B1:7E:51:36:33:22:11:70
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340/85176132-47c9-32a1-9e04-6dadc4f6fc23.roa
Signing time: Sat 23 Nov 2024 02:00:28 +0000
ROA not before: Sat 23 Nov 2024 02:00:28 +0000
ROA not after: Fri 21 Feb 2025 02:00:28 +0000
asID: 36001
IP address blocks: 134.195.20.0/22 maxlen: 22
162.210.60.0/22 maxlen: 22
172.98.220.0/22 maxlen: 22
173.242.80.0/20 maxlen: 20
192.200.136.0/21 maxlen: 21
199.167.212.0/22 maxlen: 22
206.126.208.0/20 maxlen: 20
209.103.224.0/19 maxlen: 19
216.127.192.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f8:4f:79:3b:1d:53:34:4c:dd:c0:0e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37a1bff3-cff2-41f8-a1d2-8a10cad7e340
Validity
Not Before: Nov 23 02:00:28 2024 GMT
Not After : Feb 21 02:00:28 2025 GMT
Subject: CN=23cfebf3-f342-497b-8855-ecee4feefac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c1:c8:30:f2:02:81:64:48:f1:98:b9:6a:b0:
45:6f:1c:da:1a:13:35:31:df:60:c2:fb:47:ff:0e:
8c:dd:64:42:8d:5e:f9:d5:09:bf:de:65:0f:96:d5:
7b:2f:ed:25:21:ce:72:5e:ca:94:3a:c1:a0:e1:2c:
aa:81:cf:8a:7e:8b:9c:f2:ac:3c:70:5a:a3:7b:88:
4b:3d:03:de:3d:81:68:63:32:43:09:a3:1b:3b:ce:
76:70:89:2b:f4:d8:26:67:04:d2:a1:7e:8b:de:cc:
24:1c:20:87:87:0f:76:75:6f:cd:a8:01:c6:d3:3b:
ef:97:1f:46:71:44:59:75:c1:ee:26:12:66:e3:25:
87:e7:b0:e7:ef:44:1f:bc:c4:eb:df:a6:72:61:86:
b2:ca:9c:a1:23:b4:21:4d:27:8a:42:1f:3d:b6:28:
72:b4:bd:2d:fa:75:71:a8:47:da:77:b5:e8:bf:e4:
bf:72:34:1e:bf:b8:1b:2b:db:ef:12:fa:16:3e:9b:
d1:9e:1e:40:b9:4d:ff:75:67:68:46:7c:8f:87:e9:
d4:f1:43:8d:7a:a6:51:22:27:a8:8c:11:72:25:29:
52:c7:f3:fa:5c:89:61:72:53:ef:e3:f3:85:41:d5:
4b:6d:bf:70:4c:a0:5c:44:52:16:d3:23:28:32:dc:
5b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:FE:AD:AA:FB:0B:7D:C0:AC:64:51:5D:D6:F9:DE:65:F0:8B:23:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340/85176132-47c9-32a1-9e04-6dadc4f6fc23.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340/37a1bff3-cff2-41f8-a1d2-8a10cad7e340.crl
X509v3 Authority Key Identifier:
keyid:0C:8C:A0:41:6E:20:D0:55:A5:33:45:77:B1:7E:51:36:33:22:11:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340.cer
sbgp-ipAddrBlock: critical
IPv4:
134.195.20.0/22
162.210.60.0/22
172.98.220.0/22
173.242.80.0/20
192.200.136.0/21
199.167.212.0/22
206.126.208.0/20
209.103.224.0/19
216.127.192.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:8c:0a:b0:8d:c4:65:2c:63:52:ad:5c:f0:27:b4:2b:93:57:
ee:90:e9:05:c3:69:fa:df:84:b5:d2:e4:62:c5:4f:1d:a5:18:
89:73:fe:d4:28:dd:14:c0:06:02:e1:3e:a2:a5:b0:8d:e2:82:
c8:9c:dc:50:d4:32:1e:e2:2e:ac:8e:d6:cd:24:a4:60:82:ac:
1b:fb:dc:ed:8c:0d:15:54:10:f5:ae:2d:dc:64:10:bd:45:8b:
04:18:42:23:66:b8:33:9d:5a:c1:01:1b:24:e5:b2:d7:fe:39:
68:c0:42:e4:01:19:bc:06:7c:f2:6c:82:55:d8:30:76:5e:2c:
04:0e:db:b6:9e:38:fb:1d:de:f1:90:75:f1:d6:a6:c5:19:0a:
89:3e:97:90:48:5d:6a:1b:9d:2b:80:a7:7e:49:b6:dc:9f:f0:
d3:10:b3:59:15:bc:af:bf:b5:ac:d8:20:01:6b:3f:44:96:09:
c0:a9:f5:65:37:34:20:0b:bd:93:8c:7f:54:21:85:02:fd:67:
50:dc:7b:f9:76:9d:dc:ea:ea:b4:fd:a3:d6:67:84:35:eb:be:
73:95:c2:68:c1:3e:cf:95:d5:55:2a:fb:a2:67:8c:6a:2a:0c:
df:9c:ba:56:61:12:88:6a:f1:c2:09:0d:b6:9a:c9:1f:0c:a9:
18:31:0d:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 18:28:43 2025 by rpki-client