Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/75164c3b-1970-34ed-accb-9cfd7a9b3f7a.roa
File: 75164c3b-1970-34ed-accb-9cfd7a9b3f7a.roa (raw, json)
Hash identifier: zH8rHzfmc43Tm6tyQHKZVrG2QcOCmsxGGnZzcW8WA0Q=
Subject key identifier: 49:B8:88:FF:DE:AE:B9:91:73:A8:3B:39:4C:DF:3F:19:CB:E2:46:D7
Certificate issuer: /CN=a521f5ee-89d2-4088-abb9-f69291655e39
Certificate serial: 010D0C9F4328584827C5341A4E96726CE1EAEF20
Authority key identifier: 14:EE:0D:BC:78:58:6F:49:6A:4F:7C:2E:30:4A:4E:11:A9:FE:9B:73
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/75164c3b-1970-34ed-accb-9cfd7a9b3f7a.roa
Signing time: Tue 10 Dec 2024 02:00:40 +0000
ROA not before: Tue 10 Dec 2024 02:00:40 +0000
ROA not after: Mon 10 Mar 2025 01:00:40 +0000
asID: 25820
IP address blocks: 23.105.192.0/19 maxlen: 24
23.106.128.0/19 maxlen: 24
23.252.96.0/20 maxlen: 24
45.62.96.0/19 maxlen: 24
45.78.0.0/18 maxlen: 24
66.112.208.0/20 maxlen: 24
67.209.176.0/20 maxlen: 24
74.121.148.0/22 maxlen: 24
104.128.80.0/20 maxlen: 24
104.160.32.0/20 maxlen: 24
104.194.64.0/19 maxlen: 24
104.224.128.0/18 maxlen: 24
107.182.176.0/20 maxlen: 24
138.128.192.0/19 maxlen: 24
144.168.56.0/21 maxlen: 24
162.211.224.0/21 maxlen: 24
192.243.112.0/20 maxlen: 24
198.35.44.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:c5:34:1a:4e:96:72:6c:e1:ea:ef:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a521f5ee-89d2-4088-abb9-f69291655e39
Validity
Not Before: Dec 10 02:00:40 2024 GMT
Not After : Mar 10 01:00:40 2025 GMT
Subject: CN=4e2f0e54-602b-4238-9ff3-1f9114952dec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a4:d9:82:e0:31:5d:c3:49:cf:aa:1d:2f:3b:
2e:19:37:80:7e:8a:27:dd:db:6d:1c:a0:84:c7:8c:
3e:5c:63:d9:9e:dc:f9:08:6c:8c:6e:d8:89:72:08:
52:09:75:e2:79:1b:01:1d:4a:68:d3:71:19:70:7a:
ca:18:3e:8d:d8:cb:2e:8c:01:7b:0b:ad:93:e8:49:
46:7e:be:6f:4b:73:cd:ef:9c:1e:6c:1d:a2:44:d1:
77:de:ce:5d:28:09:03:49:19:86:fd:b6:86:db:c5:
49:0d:4c:1f:17:24:db:f0:03:ce:ce:da:29:97:50:
f0:0e:7f:13:bc:ec:6e:db:83:cd:01:ad:c6:e2:dd:
97:43:84:15:92:62:39:a1:9a:a4:e0:fe:4d:46:68:
ce:30:9d:f5:0e:e1:a9:f2:11:ed:3e:62:a0:a5:6f:
19:ca:12:3f:87:38:d9:e0:e2:d9:1c:a0:e0:c6:94:
b6:02:9e:55:77:fc:3b:17:de:3f:ec:4e:29:8a:ab:
c0:c5:ab:b7:fe:58:f2:ab:18:27:31:03:d2:65:40:
ef:e1:3b:1c:7b:78:9f:a8:cf:4a:6b:2e:3c:e7:90:
46:b3:5f:85:5f:a3:a6:e1:0b:cb:3c:32:9b:8a:ca:
a7:25:ba:c1:62:24:1d:3f:f4:27:93:35:a2:18:44:
75:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:B8:88:FF:DE:AE:B9:91:73:A8:3B:39:4C:DF:3F:19:CB:E2:46:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/75164c3b-1970-34ed-accb-9cfd7a9b3f7a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/a521f5ee-89d2-4088-abb9-f69291655e39.crl
X509v3 Authority Key Identifier:
keyid:14:EE:0D:BC:78:58:6F:49:6A:4F:7C:2E:30:4A:4E:11:A9:FE:9B:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39.cer
sbgp-ipAddrBlock: critical
IPv4:
23.105.192.0/19
23.106.128.0/19
23.252.96.0/20
45.62.96.0/19
45.78.0.0/18
66.112.208.0/20
67.209.176.0/20
74.121.148.0/22
104.128.80.0/20
104.160.32.0/20
104.194.64.0/19
104.224.128.0/18
107.182.176.0/20
138.128.192.0/19
144.168.56.0/21
162.211.224.0/21
192.243.112.0/20
198.35.44.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:be:26:43:55:90:fb:e8:0e:08:2b:14:ab:c1:d5:78:f5:b0:
f0:18:e0:9c:16:ec:09:ca:62:d1:6f:9a:c9:30:54:4d:20:e8:
8f:45:36:92:e4:04:ba:d8:38:4d:99:4b:14:b1:f1:3d:aa:50:
5d:d0:70:04:6b:52:99:6f:df:d8:7d:31:21:87:37:7c:77:23:
d5:a3:bc:d3:cd:b7:98:d9:55:c9:5a:f5:6b:70:4e:42:87:b4:
6d:21:8a:aa:b4:a6:fa:a4:18:62:a3:06:14:57:e5:61:e7:73:
15:fd:1d:40:12:f0:ee:b9:5c:ce:aa:98:8a:4f:53:77:68:76:
fd:44:39:25:c8:a8:88:3f:18:de:bd:19:09:0b:ab:d5:db:b0:
4e:54:38:62:07:f5:99:6c:e8:60:d8:d2:0f:f5:fa:70:08:66:
4f:e8:89:b2:32:2b:91:32:30:c3:3d:15:4d:fe:a2:9d:d5:66:
9b:63:3b:f8:22:40:b1:99:60:89:e4:22:b0:58:0f:99:fe:a4:
ba:97:60:21:b0:85:98:2a:ee:77:4d:be:18:4f:44:a7:81:29:
16:27:08:bd:f1:61:93:1f:05:13:e5:8e:13:b7:02:17:f9:0f:
bc:37:0a:1e:c7:44:23:ad:76:aa:67:d6:46:6d:c2:ab:27:39:
00:c6:eb:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:39:22 2025 by rpki-client