Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5d05aba-95ac-4d7d-9f9e-6d566f71ecee/5707df91-bb7a-3dba-ae59-c5d39f3a0924.roa
File: 5707df91-bb7a-3dba-ae59-c5d39f3a0924.roa (raw, json)
Hash identifier: eokSw8jtz2yCnDHLiUOEfMUpdzSjbIYKsdUx5EzkB1M=
Subject key identifier: CF:94:EC:25:94:94:5D:DF:51:90:80:89:50:F8:BF:6A:78:9B:DC:38
Certificate issuer: /CN=f5d05aba-95ac-4d7d-9f9e-6d566f71ecee
Certificate serial: 010D0C9F432858487CEB325782DA15615C1B5880
Authority key identifier: BC:38:ED:DF:D4:EE:26:FD:1F:80:B9:28:E6:5D:39:86:95:98:1F:E1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5d05aba-95ac-4d7d-9f9e-6d566f71ecee.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5d05aba-95ac-4d7d-9f9e-6d566f71ecee/5707df91-bb7a-3dba-ae59-c5d39f3a0924.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 30264
IP address blocks: 66.211.16.0/20 maxlen: 24
76.9.160.0/20 maxlen: 24
138.43.210.0/23 maxlen: 24
138.43.212.0/22 maxlen: 24
138.43.216.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:32:57:82:da:15:61:5c:1b:58:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5d05aba-95ac-4d7d-9f9e-6d566f71ecee
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=4f821b48-c171-49ec-bc18-4a30e6cb7463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:16:7d:76:cb:a9:35:dc:ab:2b:06:f8:72:3c:
6e:c9:cd:8d:ca:38:1c:93:fd:60:44:d5:50:8d:4c:
e5:6e:c4:e3:81:34:7d:14:3c:37:00:72:ae:1b:8f:
ff:e8:1d:bd:83:de:73:3c:f3:42:f8:1a:ed:0e:1a:
39:5e:32:94:5c:ab:59:2d:ce:65:f4:17:2b:38:49:
d0:33:ed:ba:5f:64:4e:71:3a:8f:c2:e5:ed:47:4b:
e0:23:d7:4e:ab:4f:f1:20:56:5c:1b:5c:d2:b8:5a:
37:37:a0:87:d8:7a:43:d3:d7:66:1c:8f:74:94:59:
ac:ab:43:b0:18:d8:fb:cb:34:06:5b:7b:18:ed:04:
a6:08:74:cf:13:8e:00:1c:fb:8c:46:7e:d9:30:4c:
c6:8a:33:89:c9:40:6a:59:8c:67:55:1b:6d:79:6e:
86:3e:b9:8a:5f:c6:f5:b4:af:64:53:3b:a2:53:83:
0e:63:c8:d4:c5:7e:9f:a2:a7:cd:61:26:0c:70:ec:
69:7d:1b:35:26:e4:c8:ee:92:c5:e0:fb:35:2f:8e:
3c:5a:99:9d:ad:b5:a0:9e:17:61:46:95:03:f6:3f:
20:91:b0:2d:41:7b:6c:b0:85:01:1f:98:5a:bc:08:
bb:c1:ec:ab:57:82:8d:ec:1b:f4:1c:61:f6:8c:16:
82:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:94:EC:25:94:94:5D:DF:51:90:80:89:50:F8:BF:6A:78:9B:DC:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5d05aba-95ac-4d7d-9f9e-6d566f71ecee/5707df91-bb7a-3dba-ae59-c5d39f3a0924.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5d05aba-95ac-4d7d-9f9e-6d566f71ecee/f5d05aba-95ac-4d7d-9f9e-6d566f71ecee.crl
X509v3 Authority Key Identifier:
keyid:BC:38:ED:DF:D4:EE:26:FD:1F:80:B9:28:E6:5D:39:86:95:98:1F:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5d05aba-95ac-4d7d-9f9e-6d566f71ecee.cer
sbgp-ipAddrBlock: critical
IPv4:
66.211.16.0/20
76.9.160.0/20
138.43.210.0-138.43.223.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:e9:39:b9:0b:82:63:6b:1c:ba:ea:b2:d1:a2:56:f5:d3:3f:
16:04:78:d8:96:36:65:ca:7d:0d:0b:63:23:7a:ac:bc:f5:21:
1d:c8:05:c3:0a:e6:ca:8f:46:2d:26:55:94:d8:fa:d8:67:e8:
c3:9a:4d:3c:34:80:85:66:2b:78:1a:54:d6:16:55:45:d0:90:
8c:a9:ef:64:f9:ee:12:2c:32:53:ce:0e:5e:3e:5f:f6:2a:b0:
42:1e:9f:b5:61:94:63:c9:5d:0d:56:79:89:c2:4a:a0:fb:f8:
75:f5:27:59:a6:c8:5a:00:28:91:23:f7:2a:d1:d1:01:59:db:
9a:22:42:19:32:41:79:b0:2c:a6:9b:cf:c6:01:da:c6:33:6f:
bf:c7:6f:bb:28:74:d5:67:30:8a:c9:f9:33:d1:4d:9e:26:fc:
40:6b:e5:fe:33:d2:ac:5d:fd:44:ff:1f:36:ec:a2:29:8b:b2:
6b:4e:05:13:70:38:b0:33:57:5a:22:d5:98:38:2c:15:2d:48:
c6:24:b4:d0:66:68:13:a4:ae:cc:86:62:54:dc:12:ba:77:62:
3c:aa:e1:5d:12:ff:82:8c:2b:c7:b8:a1:5d:b4:d2:a2:4d:4d:
75:67:d6:2e:2d:a7:3c:96:74:89:9c:bf:60:d8:0c:51:31:ca:
98:d9:1f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:41:27 2025 by rpki-client