Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2/6a49b156-6028-30c5-b60a-3bb373cf36fc.roa
File: 6a49b156-6028-30c5-b60a-3bb373cf36fc.roa (raw, json)
Hash identifier: ndkAPqxMyCRiFaeQ+ToksXr/Ra0YukfP0siOWlQtSOw=
Subject key identifier: 70:71:FC:5E:7A:8F:CE:99:8B:2E:11:FF:B4:C3:9D:54:5F:32:13:BD
Certificate issuer: /CN=cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2
Certificate serial: 010D0C9F4328584827C545A85480E38665357C00
Authority key identifier: 0C:B0:BF:FC:CA:9D:3B:96:77:AB:14:6E:B1:80:5C:09:2F:9C:A7:41
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2/6a49b156-6028-30c5-b60a-3bb373cf36fc.roa
Signing time: Tue 10 Dec 2024 02:00:40 +0000
ROA not before: Tue 10 Dec 2024 02:00:40 +0000
ROA not after: Mon 10 Mar 2025 01:00:40 +0000
asID: 398940
IP address blocks: 192.245.221.0/24 maxlen: 24
192.245.222.0/23 maxlen: 24
192.245.224.0/24 maxlen: 24
199.33.130.0/23 maxlen: 24
199.33.132.0/23 maxlen: 24
199.33.134.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:c5:45:a8:54:80:e3:86:65:35:7c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2
Validity
Not Before: Dec 10 02:00:40 2024 GMT
Not After : Mar 10 01:00:40 2025 GMT
Subject: CN=6a66c951-e2f3-494a-82f5-a259293a53fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:39:5c:4a:6e:2c:56:6e:79:22:72:05:ce:a6:
68:28:17:93:43:db:63:11:65:cc:92:4c:4f:aa:35:
ea:7b:11:18:87:b3:dd:e2:ea:f9:bb:cb:29:d2:a6:
cd:4d:23:fe:f1:86:04:00:fb:c4:b8:9f:70:1d:1a:
1a:8f:48:58:da:77:6f:03:99:e5:86:b4:7f:e1:3f:
41:ce:24:e9:88:50:c3:fa:9c:ef:bd:e2:6e:b4:67:
2e:46:93:ab:b3:a0:c9:22:98:43:2f:b5:ca:b8:54:
8a:99:30:b2:c1:42:52:f6:5c:e0:6c:43:7f:f9:f9:
28:a1:5f:ed:eb:67:be:cf:8c:3d:80:1b:49:41:93:
8f:85:c3:d3:48:be:00:c2:be:48:4f:38:f1:66:09:
fc:58:97:0b:4c:14:c5:8c:75:5d:b6:d4:1b:dd:ea:
2a:d5:d9:80:4e:a2:cb:0a:e1:6d:9a:ba:d7:55:7d:
5d:7d:fd:47:22:e4:b0:8a:dd:cc:dc:d0:52:5f:c3:
be:fb:6b:2c:eb:58:2a:ee:01:69:c4:d4:a1:f0:87:
22:4f:2e:bb:16:49:c1:3d:37:b3:39:18:13:90:f9:
28:93:80:a7:14:84:92:61:31:fe:fd:c9:93:81:9e:
14:ea:48:0a:18:87:7a:c8:04:c9:58:9f:03:3b:25:
79:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:71:FC:5E:7A:8F:CE:99:8B:2E:11:FF:B4:C3:9D:54:5F:32:13:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2/6a49b156-6028-30c5-b60a-3bb373cf36fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2.crl
X509v3 Authority Key Identifier:
keyid:0C:B0:BF:FC:CA:9D:3B:96:77:AB:14:6E:B1:80:5C:09:2F:9C:A7:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.245.221.0-192.245.224.255
199.33.130.0-199.33.134.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:ed:1f:da:c8:88:99:55:a3:9d:41:f8:25:dd:d6:94:b0:3f:
0f:2a:fa:b7:f0:bf:1b:ef:ab:d0:1e:fb:14:62:0f:6d:84:8e:
6a:83:01:c2:2b:2f:e5:a6:12:53:6a:e1:53:ef:a6:90:b9:0c:
80:b8:8a:1a:20:5b:2a:16:d3:38:f2:dc:e9:d6:f8:5e:9f:fe:
26:e5:99:ba:37:06:47:c5:b0:d4:b2:9e:85:f1:57:8b:f7:b8:
70:88:d4:7d:05:01:49:89:2a:6d:35:b1:83:2d:7a:e1:a6:55:
7e:b5:60:ce:44:92:99:4c:4f:47:52:bd:59:11:c1:68:22:c7:
76:04:15:31:36:58:dc:73:db:91:49:b1:7d:8c:19:6c:cc:a5:
66:0f:79:ab:d9:60:72:3d:d5:9d:9e:65:da:6a:71:f8:89:4a:
6f:01:0f:7e:11:20:b7:f9:39:d2:9c:3b:d9:9d:99:f5:04:86:
73:83:99:96:0c:87:56:c7:0d:ec:b4:c6:83:cb:55:51:ad:d0:
ff:43:4e:70:cc:ce:66:06:c9:41:97:23:f5:9d:63:44:51:e4:
92:a1:46:4b:6a:e6:2a:83:0a:2d:d7:55:ba:03:d3:f5:81:a2:
5c:2e:68:9a:42:63:a0:95:47:be:4a:41:51:6f:b8:f2:e0:69:
99:f2:92:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:32:55 2025 by rpki-client