Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/255d6559-2c60-49ac-b136-415b4469af78/4c1ce668-1501-3b48-91cc-8eb4b9c89e0c.roa
File: 4c1ce668-1501-3b48-91cc-8eb4b9c89e0c.roa (raw, json)
Hash identifier: ui2gWk95e6FHdWMtu295VswA9G3/EU/u6sbb8edxm10=
Subject key identifier: F1:0D:C8:88:7F:F9:C9:AC:FA:71:EA:C4:BE:C4:26:DE:C0:85:0A:EC
Certificate issuer: /CN=255d6559-2c60-49ac-b136-415b4469af78
Certificate serial: 010D0C9F432858486D904FCE1FF3697ED5949580
Authority key identifier: 58:8D:97:13:12:EB:A8:FC:6C:82:19:E1:04:61:7F:36:49:06:16:14
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/255d6559-2c60-49ac-b136-415b4469af78.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/255d6559-2c60-49ac-b136-415b4469af78/4c1ce668-1501-3b48-91cc-8eb4b9c89e0c.roa
Signing time: Sat 04 Jan 2025 02:00:39 +0000
ROA not before: Sat 04 Jan 2025 02:00:39 +0000
ROA not after: Fri 04 Apr 2025 01:00:39 +0000
asID: 20300
IP address blocks: 136.143.204.0/22 maxlen: 24
147.185.144.0/22 maxlen: 24
162.142.96.0/22 maxlen: 24
192.152.214.0/24 maxlen: 24
207.66.124.0/22 maxlen: 24
208.83.184.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6d:90:4f:ce:1f:f3:69:7e:d5:94:95:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=255d6559-2c60-49ac-b136-415b4469af78
Validity
Not Before: Jan 4 02:00:39 2025 GMT
Not After : Apr 4 01:00:39 2025 GMT
Subject: CN=1c17efb5-349a-4791-ae0f-9172dc2be792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:60:45:fa:9b:ee:29:3c:6e:f3:4a:40:89:6a:
96:01:06:f5:c1:96:b5:94:25:6c:45:ab:da:ef:0b:
92:32:5f:ec:8f:12:4d:d4:d5:77:be:3d:23:c9:7d:
b2:ef:5b:1c:f3:d2:ec:65:2c:8a:c1:7f:15:b6:6b:
e3:6f:c9:25:2a:dd:5f:31:1a:e3:87:3a:98:ad:10:
59:18:d9:de:c7:df:21:f7:1c:4a:80:8a:bb:02:47:
10:0e:50:1e:ac:a3:ed:09:01:9f:63:b1:e5:79:f5:
0a:5e:d8:66:bc:37:09:17:83:ec:0c:7a:31:e2:f6:
60:30:bf:30:d0:6b:a5:be:b0:06:97:9b:79:88:99:
d4:b0:39:cb:10:ec:f9:91:f2:52:98:c0:45:82:af:
d3:01:ce:29:46:55:7d:24:93:dd:4b:10:8f:e6:d2:
5c:39:25:44:4d:3a:82:5f:1c:fc:54:83:d6:83:7e:
a8:ce:4e:fa:b5:cc:ba:91:96:ba:c3:02:2d:0e:a8:
fe:5c:d7:2a:b0:da:66:98:85:bc:21:c8:66:a8:fe:
5e:ca:e6:f8:8d:22:45:33:37:c0:f0:50:d9:1b:2b:
a1:b0:db:82:58:45:30:31:dd:f6:02:e6:6b:8c:88:
6f:38:11:e2:a4:70:54:34:e2:29:1b:1d:54:87:8e:
5d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:0D:C8:88:7F:F9:C9:AC:FA:71:EA:C4:BE:C4:26:DE:C0:85:0A:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/255d6559-2c60-49ac-b136-415b4469af78/4c1ce668-1501-3b48-91cc-8eb4b9c89e0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/255d6559-2c60-49ac-b136-415b4469af78/255d6559-2c60-49ac-b136-415b4469af78.crl
X509v3 Authority Key Identifier:
keyid:58:8D:97:13:12:EB:A8:FC:6C:82:19:E1:04:61:7F:36:49:06:16:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/255d6559-2c60-49ac-b136-415b4469af78.cer
sbgp-ipAddrBlock: critical
IPv4:
136.143.204.0/22
147.185.144.0/22
162.142.96.0/22
192.152.214.0/24
207.66.124.0/22
208.83.184.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:b2:0d:98:c4:dc:81:3f:16:b1:73:3d:0b:1e:f7:96:1a:26:
a5:39:98:42:6a:d1:24:cd:d3:30:87:ad:9f:a2:11:25:4c:21:
8f:e4:c6:d3:eb:0c:25:a5:6a:1e:ed:5e:8a:a1:71:f9:14:5e:
31:42:6d:be:5f:a8:f9:38:42:5d:e9:0a:74:7c:fd:d0:ba:cd:
f7:3b:d5:40:ec:d3:b3:58:b1:07:ad:90:d8:5e:25:6f:1a:b1:
53:23:37:c5:70:a9:56:9c:2f:38:cd:32:cd:a3:d1:b2:6d:dc:
88:04:f8:da:20:18:ee:8d:18:d2:e6:1f:cf:57:12:9a:f4:8b:
75:81:07:cc:f1:9b:8b:64:81:db:af:e2:d6:e2:a6:90:23:fa:
54:46:51:4b:6a:a6:f3:9a:fe:55:a6:04:5c:e8:c3:50:3c:0d:
85:d0:9f:5b:61:23:ca:ad:b1:c2:c5:c1:03:f6:d9:f1:28:b1:
5f:77:43:b9:77:98:a8:d7:70:25:da:98:c1:0a:4d:bd:57:e1:
b5:a0:02:74:0e:cb:f7:35:6f:e1:1b:1d:89:ac:16:59:28:8c:
dc:8e:f2:11:a6:8b:d3:f6:5f:20:87:a5:64:42:2f:7f:ea:22:
2f:1f:92:00:34:82:c4:6f:2d:2f:50:bb:18:bf:57:74:a3:c2:
51:16:35:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:57:05 2025 by rpki-client