Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/83bb3784-a10a-3b7d-b772-d2cdf95fb419.roa
File: 83bb3784-a10a-3b7d-b772-d2cdf95fb419.roa (raw, json)
Hash identifier: ekNyhow2RlvWnhmn065pkXo5AlguYq6GjnN/38bi2ko=
Subject key identifier: 3E:44:3B:AF:A1:9A:43:87:0F:0D:BD:08:4B:AD:9F:BF:A2:86:36:79
Certificate issuer: /CN=bebad29c-c2e4-447d-a29e-20f329219ea9
Certificate serial: 010D0C9F43285847EFEF8D9FF6130ACCF452BC00
Authority key identifier: 07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/83bb3784-a10a-3b7d-b772-d2cdf95fb419.roa
Signing time: Wed 20 Nov 2024 02:00:39 +0000
ROA not before: Wed 20 Nov 2024 02:00:39 +0000
ROA not after: Tue 18 Feb 2025 02:00:39 +0000
asID: 16509
IP address blocks: 66.235.130.0/24 maxlen: 24
172.82.196.0/24 maxlen: 24
172.82.209.0/24 maxlen: 24
172.82.216.0/24 maxlen: 24
172.82.217.0/24 maxlen: 24
172.82.218.0/24 maxlen: 24
172.82.219.0/24 maxlen: 24
172.82.220.0/24 maxlen: 24
172.82.223.0/24 maxlen: 24
172.82.242.0/24 maxlen: 24
172.82.243.0/24 maxlen: 24
192.243.225.0/24 maxlen: 24
192.243.228.0/24 maxlen: 24
192.243.229.0/24 maxlen: 24
208.67.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ef:ef:8d:9f:f6:13:0a:cc:f4:52:bc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bebad29c-c2e4-447d-a29e-20f329219ea9
Validity
Not Before: Nov 20 02:00:39 2024 GMT
Not After : Feb 18 02:00:39 2025 GMT
Subject: CN=698ca3ee-c2c4-4697-97d9-0957f9064cfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:69:03:19:29:01:28:73:07:fe:e8:03:de:d3:
da:c7:80:36:13:b3:4a:c9:41:29:1b:34:2c:bb:23:
36:12:18:44:e6:7e:05:4d:22:84:11:7a:96:9c:c3:
c8:29:a9:a9:57:f3:07:2c:de:c4:6e:e3:94:cf:0c:
53:f1:9c:63:d0:21:55:94:28:c6:dd:e0:be:7e:d8:
49:36:d8:84:3a:18:80:aa:a0:6d:fe:64:d1:28:c8:
9e:e9:57:4c:ac:42:bd:39:99:0f:4d:65:9c:69:88:
e0:cf:e3:dc:fd:d9:9c:7a:22:ae:c1:06:94:31:2b:
80:44:23:d0:46:bf:7a:97:66:b1:09:41:fd:78:89:
59:3b:56:4d:19:0d:83:15:c4:2b:df:41:9c:47:fe:
44:66:6e:15:f6:5d:ec:17:d8:5d:5a:4f:4e:31:ef:
3f:56:f7:28:7c:00:a3:24:81:72:41:64:84:86:f7:
52:3c:00:fc:8b:cf:05:18:51:b3:c7:d7:18:26:08:
f8:e5:9f:f2:7f:c0:f1:6f:9c:2b:21:f0:a1:54:c2:
ee:38:c9:88:80:6b:46:7b:7d:63:0b:5f:6c:56:41:
94:8b:68:29:5f:6e:43:ba:3f:a8:a1:52:ee:8a:b5:
ee:e2:69:5f:b0:26:66:b9:d1:11:fe:5e:14:7e:57:
de:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:44:3B:AF:A1:9A:43:87:0F:0D:BD:08:4B:AD:9F:BF:A2:86:36:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/83bb3784-a10a-3b7d-b772-d2cdf95fb419.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.crl
X509v3 Authority Key Identifier:
keyid:07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer
sbgp-ipAddrBlock: critical
IPv4:
66.235.130.0/24
172.82.196.0/24
172.82.209.0/24
172.82.216.0-172.82.220.255
172.82.223.0/24
172.82.242.0/23
192.243.225.0/24
192.243.228.0/23
208.67.42.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:89:3c:89:5b:ab:14:b1:88:b8:af:ba:32:6c:f2:ab:69:7c:
a0:6f:6b:05:95:75:04:ad:e2:05:5d:12:dd:49:e4:f4:ee:c4:
8c:6f:3a:b9:ef:c5:e4:00:50:86:ad:f7:2e:14:3c:7d:61:a3:
2a:84:38:d6:5f:c8:35:b6:9c:6e:71:20:93:ea:bb:e7:db:ad:
bb:21:2d:8e:df:20:e7:6b:e8:40:01:6f:89:93:19:27:7d:78:
82:7e:62:a3:3f:6e:b3:87:f6:db:d8:03:fe:77:f6:f0:c1:cb:
f2:bc:bb:5b:5c:dd:f0:de:9b:84:22:96:4a:f3:1c:db:1a:ff:
30:00:f8:17:af:1a:cf:83:b0:ec:77:2c:a1:6d:48:a2:6a:78:
e4:83:c0:65:10:8a:d8:a5:13:3c:51:32:8f:f9:96:cf:33:c8:
59:ff:72:69:a0:22:99:8c:b6:bb:d3:72:95:a5:06:cf:11:b2:
82:93:64:09:91:8a:fa:4b:88:9c:da:a7:fa:1f:ab:aa:60:6d:
e3:fe:ee:3a:48:d6:6b:57:b4:ec:dc:b8:c7:b0:da:8d:2e:37:
85:02:b2:42:c5:90:60:54:4b:0a:9c:ee:6d:de:8e:7d:72:fc:
ed:dc:08:fe:93:5c:c6:0a:ae:cf:9d:e5:d7:47:bf:ff:02:bd:
83:ec:2e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:20:18 2025 by rpki-client