Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/eb65570a-6746-3330-9ec5-02810756b2a4.roa
File: eb65570a-6746-3330-9ec5-02810756b2a4.roa (raw, json)
Hash identifier: jWdL7yMFdkbb+du7E7+rFLqxOHqizPo9cnSCseJHWRs=
Subject key identifier: 36:2F:93:1F:ED:BB:CA:B6:2F:59:B0:A7:BB:BB:ED:A0:0F:FB:3B:64
Certificate issuer: /CN=cb01b28a-436d-42dd-8750-5361f2309297
Certificate serial: 010D0C9F43285848451595063DE66A36DB40E3F0
Authority key identifier: A0:3F:D7:81:F7:6B:86:20:05:40:B3:B0:F1:5E:57:49:8A:88:1E:C4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/eb65570a-6746-3330-9ec5-02810756b2a4.roa
Signing time: Fri 20 Dec 2024 14:00:51 +0000
ROA not before: Fri 20 Dec 2024 14:00:51 +0000
ROA not after: Thu 20 Mar 2025 13:00:51 +0000
asID: 400981
IP address blocks: 23.83.224.0/19 maxlen: 24
43.243.84.0/22 maxlen: 24
45.78.64.0/20 maxlen: 24
46.254.88.0/22 maxlen: 24
64.64.224.0/19 maxlen: 24
65.49.130.0/23 maxlen: 24
65.49.132.0/22 maxlen: 24
65.49.144.0/23 maxlen: 24
65.49.150.0/23 maxlen: 24
65.49.192.0/19 maxlen: 24
65.49.224.0/20 maxlen: 24
66.98.112.0/20 maxlen: 24
67.216.192.0/19 maxlen: 24
67.218.128.0/19 maxlen: 24
67.230.160.0/19 maxlen: 24
68.168.128.0/20 maxlen: 24
69.171.64.0/20 maxlen: 24
69.194.8.0/21 maxlen: 24
74.82.192.0/19 maxlen: 24
74.120.168.0/21 maxlen: 24
74.211.96.0/19 maxlen: 24
80.251.208.0/20 maxlen: 24
89.208.240.0/20 maxlen: 24
93.179.96.0/21 maxlen: 24
93.179.112.0/21 maxlen: 24
93.179.124.0/22 maxlen: 24
94.103.4.0/22 maxlen: 24
95.163.192.0/20 maxlen: 24
95.169.0.0/19 maxlen: 24
95.181.188.0/22 maxlen: 24
96.45.176.0/20 maxlen: 24
97.64.16.0/20 maxlen: 24
97.64.32.0/20 maxlen: 24
97.64.80.0/22 maxlen: 24
97.64.104.0/21 maxlen: 24
97.64.120.0/21 maxlen: 24
98.142.128.0/20 maxlen: 24
104.36.64.0/21 maxlen: 24
104.36.184.0/22 maxlen: 24
104.129.180.0/22 maxlen: 24
104.129.184.0/22 maxlen: 24
104.153.96.0/21 maxlen: 24
104.225.144.0/20 maxlen: 24
104.225.232.0/21 maxlen: 24
104.243.16.0/20 maxlen: 24
104.244.88.0/21 maxlen: 24
104.245.40.0/21 maxlen: 24
104.245.188.0/22 maxlen: 24
107.182.16.0/20 maxlen: 24
144.34.128.0/17 maxlen: 24
150.242.88.0/22 maxlen: 24
162.211.220.0/22 maxlen: 24
162.219.120.0/21 maxlen: 24
162.244.240.0/22 maxlen: 24
172.93.32.0/20 maxlen: 24
172.96.16.0/22 maxlen: 24
172.96.192.0/18 maxlen: 24
173.242.112.0/20 maxlen: 24
174.137.48.0/20 maxlen: 24
176.122.128.0/18 maxlen: 24
184.170.208.0/20 maxlen: 24
185.180.16.0/22 maxlen: 24
185.199.240.0/22 maxlen: 24
185.205.180.0/22 maxlen: 24
185.212.56.0/22 maxlen: 24
192.69.88.0/21 maxlen: 24
198.181.32.0/20 maxlen: 24
198.181.56.0/22 maxlen: 24
199.19.104.0/21 maxlen: 24
199.115.228.0/22 maxlen: 24
199.168.136.0/21 maxlen: 24
199.180.112.0/21 maxlen: 24
199.193.124.0/22 maxlen: 24
206.190.232.0/21 maxlen: 24
216.24.176.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:45:15:95:06:3d:e6:6a:36:db:40:e3:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb01b28a-436d-42dd-8750-5361f2309297
Validity
Not Before: Dec 20 14:00:51 2024 GMT
Not After : Mar 20 13:00:51 2025 GMT
Subject: CN=cc9ffd11-c448-4249-a7cd-20d7c86ac144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f5:15:f6:76:d0:b1:29:60:e7:06:93:f9:57:
44:67:45:b5:40:c8:ab:d5:da:aa:53:0c:8e:91:1d:
d7:2d:92:62:12:8e:35:20:44:5b:00:22:15:5f:1e:
0b:27:80:ee:dd:cc:c5:07:1f:61:58:9e:f8:73:c6:
29:3a:65:71:77:e0:42:60:e0:bb:f4:5d:86:42:26:
8d:ba:de:f4:b7:96:58:d0:e9:0d:28:4e:ca:a9:fb:
15:b0:d4:e8:96:7e:13:90:ae:93:60:ec:77:38:82:
8d:ae:04:bc:51:de:05:1b:d7:41:17:d9:1e:64:41:
0f:0b:e8:c1:f9:10:98:b0:43:ec:e9:d5:fb:09:6c:
f0:34:47:ff:1b:89:98:c0:31:96:eb:a6:7d:b6:64:
d8:bc:d6:a5:b6:42:47:3f:b5:c2:bb:39:84:5f:83:
4f:d6:57:57:4e:de:a5:a9:9a:14:86:8a:11:0f:e5:
70:df:50:ad:c3:a1:e8:99:25:d6:7f:97:98:29:f5:
ff:98:34:cc:0c:6a:f3:bf:c3:19:fd:10:19:3d:6e:
21:c1:a0:74:e0:e5:11:fc:2f:3d:c9:70:27:48:ab:
dd:a9:80:fa:b0:e1:49:1e:8a:69:87:fd:fd:63:9d:
f1:71:37:63:78:79:f3:b5:4b:ac:80:95:26:a8:a4:
33:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:2F:93:1F:ED:BB:CA:B6:2F:59:B0:A7:BB:BB:ED:A0:0F:FB:3B:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/eb65570a-6746-3330-9ec5-02810756b2a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/cb01b28a-436d-42dd-8750-5361f2309297.crl
X509v3 Authority Key Identifier:
keyid:A0:3F:D7:81:F7:6B:86:20:05:40:B3:B0:F1:5E:57:49:8A:88:1E:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297.cer
sbgp-ipAddrBlock: critical
IPv4:
23.83.224.0/19
43.243.84.0/22
45.78.64.0/20
46.254.88.0/22
64.64.224.0/19
65.49.130.0-65.49.135.255
65.49.144.0/23
65.49.150.0/23
65.49.192.0-65.49.239.255
66.98.112.0/20
67.216.192.0/19
67.218.128.0/19
67.230.160.0/19
68.168.128.0/20
69.171.64.0/20
69.194.8.0/21
74.82.192.0/19
74.120.168.0/21
74.211.96.0/19
80.251.208.0/20
89.208.240.0/20
93.179.96.0/21
93.179.112.0/21
93.179.124.0/22
94.103.4.0/22
95.163.192.0/20
95.169.0.0/19
95.181.188.0/22
96.45.176.0/20
97.64.16.0-97.64.47.255
97.64.80.0/22
97.64.104.0/21
97.64.120.0/21
98.142.128.0/20
104.36.64.0/21
104.36.184.0/22
104.129.180.0-104.129.187.255
104.153.96.0/21
104.225.144.0/20
104.225.232.0/21
104.243.16.0/20
104.244.88.0/21
104.245.40.0/21
104.245.188.0/22
107.182.16.0/20
144.34.128.0/17
150.242.88.0/22
162.211.220.0/22
162.219.120.0/21
162.244.240.0/22
172.93.32.0/20
172.96.16.0/22
172.96.192.0/18
173.242.112.0/20
174.137.48.0/20
176.122.128.0/18
184.170.208.0/20
185.180.16.0/22
185.199.240.0/22
185.205.180.0/22
185.212.56.0/22
192.69.88.0/21
198.181.32.0/20
198.181.56.0/22
199.19.104.0/21
199.115.228.0/22
199.168.136.0/21
199.180.112.0/21
199.193.124.0/22
206.190.232.0/21
216.24.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:28:98:d2:c0:d2:e0:f5:7c:22:53:21:8b:46:05:86:4d:a3:
01:9d:92:0c:a2:44:73:d5:2d:02:ef:a9:1d:01:d1:a5:3c:ca:
de:69:67:72:e7:e3:0e:54:bc:3c:85:d7:89:19:7c:b8:0b:d4:
2d:4b:8c:b7:ed:72:1b:52:9a:bf:b8:35:03:38:be:2f:1c:f8:
6c:67:df:91:6c:39:10:45:79:6e:7b:a4:0c:7b:05:7d:5a:9c:
4b:a4:f3:7e:b1:6b:ca:c9:9f:d9:27:0f:9f:c6:1d:a9:34:96:
bc:9e:16:3f:a6:8d:dc:ca:14:af:10:c7:50:bf:a1:09:85:94:
ec:a1:53:b7:2d:73:2c:44:ba:02:b5:e0:82:aa:b2:28:08:de:
47:29:1c:99:54:52:ee:71:56:10:5b:e6:51:35:9d:66:1c:18:
95:37:1b:21:03:d3:6b:23:5c:36:35:cd:3a:7a:02:75:31:2f:
d5:9d:58:2a:79:ce:91:93:68:78:c6:47:a6:b4:fc:62:74:03:
28:e2:92:31:72:2e:34:3a:89:54:77:35:b9:3e:ba:d6:e8:21:
eb:e8:f2:7d:15:c4:78:7b:51:ea:64:4e:48:15:f3:dc:cf:4b:
f8:02:90:ae:00:3e:df:c9:5c:11:45:61:5f:68:07:0a:12:dd:
6e:f7:68:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:28:02 2025 by rpki-client