Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0339efaa-3121-4a82-8dd8-192f56ab47d1/87d989dd-6dd1-3c13-b2ae-9c86ca9e2b9d.roa
File: 87d989dd-6dd1-3c13-b2ae-9c86ca9e2b9d.roa (raw, json)
Hash identifier: vAW0IoSa8BeEjdEqoeZZAr3vMbjuZIH+a19dKkFwk0Q=
Subject key identifier: 45:DB:C8:CE:CE:42:92:B4:73:0F:86:B0:0E:90:90:63:E1:44:DE:A6
Certificate issuer: /CN=0339efaa-3121-4a82-8dd8-192f56ab47d1
Certificate serial: 010D0C9F432858487CEB332EBA36670B3F6276C0
Authority key identifier: B7:D4:2E:91:48:02:33:18:5A:64:6C:A5:2B:0C:93:B7:AF:1F:EC:B3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0339efaa-3121-4a82-8dd8-192f56ab47d1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0339efaa-3121-4a82-8dd8-192f56ab47d1/87d989dd-6dd1-3c13-b2ae-9c86ca9e2b9d.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 3477
IP address blocks: 198.177.182.0/24 maxlen: 24
198.200.151.0/24 maxlen: 24
199.104.104.0/24 maxlen: 24
199.104.105.0/24 maxlen: 24
204.145.202.0/24 maxlen: 24
204.228.170.0/24 maxlen: 24
204.228.175.0/24 maxlen: 24
204.228.176.0/24 maxlen: 24
204.228.177.0/24 maxlen: 24
204.228.178.0/24 maxlen: 24
204.228.179.0/24 maxlen: 24
204.228.180.0/24 maxlen: 24
204.228.181.0/24 maxlen: 24
204.228.182.0/24 maxlen: 24
204.228.183.0/24 maxlen: 24
204.228.184.0/24 maxlen: 24
204.228.185.0/24 maxlen: 24
204.228.186.0/24 maxlen: 24
204.228.187.0/24 maxlen: 24
204.228.188.0/24 maxlen: 24
204.228.189.0/24 maxlen: 24
204.228.190.0/24 maxlen: 24
204.228.191.0/24 maxlen: 24
204.238.94.0/24 maxlen: 24
204.238.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:33:2e:ba:36:67:0b:3f:62:76:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0339efaa-3121-4a82-8dd8-192f56ab47d1
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=5c927de0-10c3-47e6-98ff-28d4ae18f66f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3c:73:cf:96:df:2a:ca:b5:5c:97:fe:19:86:
e6:8e:18:40:fb:e9:16:c8:41:f9:38:e8:d0:98:61:
95:5e:d5:12:08:5f:18:90:70:d1:62:05:08:fb:8a:
4a:cf:00:94:b1:48:e7:f2:df:84:c7:07:b1:94:0c:
42:51:e8:6e:3d:6e:5e:cf:3d:5d:da:6f:56:ea:e0:
6c:e6:ed:50:94:01:2c:f4:71:c5:29:ac:34:6a:4b:
4f:44:34:1f:75:24:ee:53:6c:cb:cc:7d:d8:38:6b:
5b:24:c7:a5:c8:8d:51:f1:bd:2a:f5:86:ce:32:91:
5a:ad:b8:09:0a:40:05:bd:1f:de:ec:b4:29:cc:e4:
89:fb:15:f4:67:64:24:8b:8a:f5:c0:61:08:40:7f:
50:1e:13:6b:d6:da:25:65:97:08:78:63:94:81:f1:
a4:78:ed:b3:a6:cc:48:2c:85:c0:a6:4c:81:7b:6f:
ce:13:71:ec:02:23:53:5e:5c:40:61:f3:f0:cf:70:
04:c2:04:ff:be:4f:c9:30:d0:61:b3:1c:1d:f6:76:
5b:99:0e:7f:3e:87:00:5d:01:77:a7:a2:f8:e7:21:
95:ca:b0:ad:26:0b:e4:29:64:19:0d:db:ca:e5:23:
21:4b:20:d6:78:f3:c2:2e:44:1e:d9:1b:f1:0c:f6:
89:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:DB:C8:CE:CE:42:92:B4:73:0F:86:B0:0E:90:90:63:E1:44:DE:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0339efaa-3121-4a82-8dd8-192f56ab47d1/87d989dd-6dd1-3c13-b2ae-9c86ca9e2b9d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0339efaa-3121-4a82-8dd8-192f56ab47d1/0339efaa-3121-4a82-8dd8-192f56ab47d1.crl
X509v3 Authority Key Identifier:
keyid:B7:D4:2E:91:48:02:33:18:5A:64:6C:A5:2B:0C:93:B7:AF:1F:EC:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0339efaa-3121-4a82-8dd8-192f56ab47d1.cer
sbgp-ipAddrBlock: critical
IPv4:
198.177.182.0/24
198.200.151.0/24
199.104.104.0/23
204.145.202.0/24
204.228.170.0/24
204.228.175.0-204.228.191.255
204.238.94.0/24
204.238.123.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:ce:ef:5f:fe:1a:33:fc:2f:c6:64:94:6e:35:74:ab:31:17:
e2:7b:cf:28:83:83:9b:4d:dc:20:3f:22:13:c3:d9:e9:e8:3f:
00:13:70:19:99:38:af:97:89:11:b5:7c:ea:78:41:79:9f:5b:
90:a0:58:57:cd:c3:66:5a:c6:35:0f:ba:d5:75:a3:85:4c:96:
42:c6:64:db:2c:0e:ba:ee:5c:0d:4a:76:9e:99:ec:4d:dc:17:
71:5b:b9:4e:57:bf:71:ea:c9:2b:42:f8:3f:46:71:b1:e8:d2:
64:97:d1:1b:6f:47:29:03:27:a9:a4:fc:32:e3:b9:f0:5b:8c:
95:c2:ce:68:60:75:42:3e:17:84:d4:47:c2:af:df:78:71:2a:
2c:dd:20:c2:9a:3e:f0:83:7c:f3:34:2c:b7:dd:01:9d:48:a9:
6c:7c:cc:e4:84:14:01:80:01:16:ac:8f:1f:8a:8d:e2:c6:61:
57:b8:f5:5f:66:af:70:ef:65:a4:be:53:74:56:8f:71:4c:2f:
dd:9f:f2:2c:b3:d1:5b:25:54:0b:6a:b6:d3:04:ee:48:e4:82:
d6:41:d0:eb:6e:71:4a:a0:c8:8b:06:c5:7f:a6:55:9c:13:53:
9e:33:9f:df:d4:57:1c:3d:6d:bb:9c:a9:cf:4b:80:59:10:bd:
48:87:70:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:10:29 2025 by rpki-client