Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/835ed486-fb2d-3f04-b0ee-6ce807d3f2df.roa
File: 835ed486-fb2d-3f04-b0ee-6ce807d3f2df.roa (raw, json)
Hash identifier: 8GNWRl2IYhAYWjF+IVHomr9uDluEj+CVd4xxiG7UrvI=
Subject key identifier: 17:CD:F6:39:2E:C8:D9:19:F6:CE:BC:C2:A3:35:33:8A:75:13:FE:21
Certificate issuer: /CN=291133eb-e436-4803-adab-f37835fc18e3
Certificate serial: 010D0C9F43285848424ACCBE9F75A2D6B14FEA00
Authority key identifier: 18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/835ed486-fb2d-3f04-b0ee-6ce807d3f2df.roa
Signing time: Thu 19 Dec 2024 14:00:52 +0000
ROA not before: Thu 19 Dec 2024 14:00:52 +0000
ROA not after: Wed 19 Mar 2025 13:00:52 +0000
asID: 11127
IP address blocks: 64.49.131.0/24 maxlen: 25
207.241.163.0/24 maxlen: 25
207.241.164.0/24 maxlen: 25
207.241.165.0/24 maxlen: 25
207.241.169.0/24 maxlen: 25
207.241.171.0/24 maxlen: 25
207.241.172.0/24 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:4a:cc:be:9f:75:a2:d6:b1:4f:ea:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=291133eb-e436-4803-adab-f37835fc18e3
Validity
Not Before: Dec 19 14:00:52 2024 GMT
Not After : Mar 19 13:00:52 2025 GMT
Subject: CN=b2bc987c-13c6-4113-8cf7-24e212021760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f7:f9:d1:63:ad:a5:80:3c:43:b8:6e:fa:3d:
37:7c:8b:f8:c8:0e:c5:7c:d9:07:22:b6:de:05:19:
5a:21:d0:43:dd:e3:0d:d3:97:34:e9:60:ec:48:5b:
d3:75:4c:ca:3d:ba:a0:7e:3c:54:c0:9b:dc:8f:21:
47:2c:16:4a:0c:b4:63:3c:6d:ee:c5:73:ca:b4:17:
0e:68:26:95:b3:a9:97:dd:ca:1b:d4:1c:5f:31:cc:
8f:a8:5a:a5:52:46:75:41:ec:dd:08:0a:28:bc:1b:
53:df:90:51:89:f6:00:88:99:fc:58:61:e1:ed:7e:
3e:f6:a6:70:2b:bc:af:a8:1a:a8:0a:90:2d:08:9b:
35:64:ba:f4:13:79:b3:6b:1f:9f:8e:34:11:43:7c:
59:72:69:16:ed:a6:73:cc:1e:6c:a1:26:8b:0d:9e:
fe:8f:ae:f4:90:24:b8:82:58:d9:1b:95:96:48:34:
a3:c1:c3:5c:fc:be:49:08:66:c5:b0:7a:a9:38:4a:
d8:d0:0f:6e:d9:47:e2:c9:e6:9e:d5:0a:ea:0e:c2:
1c:7b:92:64:64:be:0a:aa:2e:0a:11:83:63:fc:37:
6b:42:50:16:48:85:0d:0d:97:35:0d:10:76:08:f1:
f3:21:3c:51:8a:3f:99:3b:a9:fe:81:1b:bf:77:03:
dd:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:CD:F6:39:2E:C8:D9:19:F6:CE:BC:C2:A3:35:33:8A:75:13:FE:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/835ed486-fb2d-3f04-b0ee-6ce807d3f2df.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl
X509v3 Authority Key Identifier:
keyid:18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer
sbgp-ipAddrBlock: critical
IPv4:
64.49.131.0/24
207.241.163.0-207.241.165.255
207.241.169.0/24
207.241.171.0-207.241.172.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:3f:15:d2:e9:9f:ce:03:83:3c:d4:ca:a2:25:f3:83:2c:d2:
e4:14:e4:1d:fb:06:f3:38:1c:5b:38:60:a1:76:5c:d8:01:f5:
41:8f:49:2a:b2:b3:1d:d5:ed:a1:50:30:71:82:f5:1d:09:3b:
0a:5b:bf:cc:bb:49:59:aa:48:ff:9d:b4:eb:f7:71:a5:e6:8e:
01:5d:fb:c4:b6:82:67:57:d6:68:e9:aa:56:5c:fd:79:62:4c:
9b:e1:23:93:23:d1:5d:76:76:ea:da:b2:4f:9d:fc:05:7f:0b:
ee:9a:fb:51:81:63:dd:c6:e9:d6:7f:8f:a6:83:8d:90:a3:5b:
97:ea:0f:32:70:f3:38:cd:23:1e:67:0f:bb:82:17:51:3d:df:
8e:d5:45:e5:84:f8:9f:97:0a:7e:9a:e5:81:89:ce:1d:76:9e:
86:b8:db:4e:62:d6:07:3c:51:ef:7f:e8:40:bf:c4:f4:db:fb:
92:17:fd:98:37:3c:0e:23:2e:11:8b:a1:b6:d2:01:95:55:ae:
dd:e8:09:4d:a1:55:79:7a:7c:3a:93:96:8c:c4:5e:79:e4:59:
9b:ba:77:b0:c1:7c:5d:cc:24:44:ac:7d:a0:b0:e3:72:7a:b0:
b2:f0:b9:27:cd:7d:cc:8d:6c:37:7c:34:35:12:f8:db:9e:4f:
1c:78:97:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:04:54 2025 by rpki-client