Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4215bba6-51b0-41f8-9185-dda3367a8df5/04f05088-b776-3c73-ac01-6db463bba24b.roa
File: 04f05088-b776-3c73-ac01-6db463bba24b.roa (raw, json)
Hash identifier: 7zBIJYEyS+aPmnjK7poY+g0aYOC4Sgm7MuE6Scz1cVA=
Subject key identifier: D2:F1:B7:66:0D:AE:1B:4C:8C:1F:22:BF:05:82:93:0E:77:02:3C:C1
Certificate issuer: /CN=4215bba6-51b0-41f8-9185-dda3367a8df5
Certificate serial: 010D0C9F432858485B6AFC2B7289649A0B091080
Authority key identifier: 24:C8:C3:14:4D:D8:66:CE:23:E6:39:48:AB:CA:C4:45:62:CF:31:FE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4215bba6-51b0-41f8-9185-dda3367a8df5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4215bba6-51b0-41f8-9185-dda3367a8df5/04f05088-b776-3c73-ac01-6db463bba24b.roa
Signing time: Sat 28 Dec 2024 14:00:52 +0000
ROA not before: Sat 28 Dec 2024 14:00:52 +0000
ROA not after: Fri 28 Mar 2025 13:00:52 +0000
asID: 11071
IP address blocks: 64.37.0.0/20 maxlen: 24
64.255.80.0/20 maxlen: 24
70.34.0.0/20 maxlen: 24
74.120.32.0/21 maxlen: 24
74.123.12.0/22 maxlen: 24
104.152.60.0/22 maxlen: 24
104.192.200.0/22 maxlen: 24
148.59.162.0/23 maxlen: 24
162.246.100.0/22 maxlen: 24
192.136.36.0/24 maxlen: 24
192.238.0.0/24 maxlen: 24
195.85.106.0/23 maxlen: 24
198.181.62.0/23 maxlen: 24
199.66.116.0/22 maxlen: 24
204.17.177.0/24 maxlen: 24
204.52.243.0/24 maxlen: 24
204.130.209.0/24 maxlen: 24
207.50.144.0/20 maxlen: 24
208.65.0.0/22 maxlen: 24
208.66.32.0/21 maxlen: 24
208.88.8.0/22 maxlen: 24
209.33.192.0/18 maxlen: 24
2604:2540::/32 maxlen: 56
2604:2c00::/32 maxlen: 56
2606:5980::/32 maxlen: 56
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5b:6a:fc:2b:72:89:64:9a:0b:09:10:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4215bba6-51b0-41f8-9185-dda3367a8df5
Validity
Not Before: Dec 28 14:00:52 2024 GMT
Not After : Mar 28 13:00:52 2025 GMT
Subject: CN=1e2f2dd6-6a5b-4d01-ae49-207367372572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2f:f2:16:d4:e0:b4:c7:4a:78:55:9e:84:d6:
d0:39:da:74:dc:6d:89:e8:cd:e4:2c:79:09:de:56:
b5:f8:59:4f:e7:12:7e:8f:98:ff:b9:f5:a7:3b:10:
bb:fe:fd:87:17:08:db:87:8e:38:e8:c0:57:d6:21:
88:7b:95:3d:1b:79:4d:1c:7b:51:98:2b:7c:18:75:
cf:4b:1b:af:f1:de:0d:88:3d:77:e2:56:74:34:6f:
8f:9e:fa:d5:37:20:2d:21:66:af:b4:9a:16:56:2e:
1e:5e:30:12:c8:74:d8:20:32:11:52:4e:66:c7:20:
3b:dd:ef:c6:78:cf:8d:19:6a:54:50:a2:7c:c2:c5:
b1:ec:b3:0f:9e:5e:72:7f:61:6e:b4:cc:87:13:9c:
53:a9:2e:67:fe:0f:7d:ad:cb:5e:51:06:45:82:d2:
f9:90:40:81:79:9a:3e:9f:f3:ff:bc:b7:35:fa:ef:
c3:f9:01:6a:5c:4b:a3:10:ce:8e:02:e2:08:66:16:
74:83:e3:ab:f3:ef:05:91:24:c4:6b:1c:b3:dd:f7:
5b:e2:4b:03:05:c9:75:55:8b:56:09:88:6d:39:ea:
c4:3e:7f:4b:24:45:73:33:ed:90:bc:aa:d4:66:29:
e5:4c:6a:15:37:b0:fe:0e:b8:17:40:22:50:f4:c1:
4b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:F1:B7:66:0D:AE:1B:4C:8C:1F:22:BF:05:82:93:0E:77:02:3C:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4215bba6-51b0-41f8-9185-dda3367a8df5/04f05088-b776-3c73-ac01-6db463bba24b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4215bba6-51b0-41f8-9185-dda3367a8df5/4215bba6-51b0-41f8-9185-dda3367a8df5.crl
X509v3 Authority Key Identifier:
keyid:24:C8:C3:14:4D:D8:66:CE:23:E6:39:48:AB:CA:C4:45:62:CF:31:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4215bba6-51b0-41f8-9185-dda3367a8df5.cer
sbgp-ipAddrBlock: critical
IPv4:
64.37.0.0/20
64.255.80.0/20
70.34.0.0/20
74.120.32.0/21
74.123.12.0/22
104.152.60.0/22
104.192.200.0/22
148.59.162.0/23
162.246.100.0/22
192.136.36.0/24
192.238.0.0/24
195.85.106.0/23
198.181.62.0/23
199.66.116.0/22
204.17.177.0/24
204.52.243.0/24
204.130.209.0/24
207.50.144.0/20
208.65.0.0/22
208.66.32.0/21
208.88.8.0/22
209.33.192.0/18
IPv6:
2604:2540::/32
2604:2c00::/32
2606:5980::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:0f:5d:01:9b:e7:0c:a5:55:cb:30:6b:fe:82:15:ea:3e:ff:
c5:94:4d:bf:fe:19:65:00:76:f6:15:cc:25:4c:17:c3:f0:75:
39:64:09:37:6e:0c:b6:f6:41:47:26:73:f1:a3:5d:fe:79:65:
95:85:d7:04:4f:46:be:df:03:e6:55:8b:ac:62:2f:c4:0c:76:
bf:a7:fc:7a:07:29:61:c6:81:1b:e9:9b:a1:e0:1c:39:1e:50:
1c:8d:93:f1:af:21:73:a7:b0:0c:cf:76:87:69:ad:51:be:a5:
3d:9d:00:5f:fc:3e:b7:a6:c9:63:6e:ed:88:9f:f6:43:04:3d:
e1:c2:0c:75:50:67:c3:e1:86:2b:52:75:d7:40:a0:7c:78:8b:
fb:35:23:6d:75:d7:4b:a1:02:2b:2f:ba:fc:77:2d:2a:b7:8d:
eb:75:1d:d1:76:95:24:b4:13:ec:c3:e1:36:f4:4c:2b:22:c7:
d9:4d:cf:48:f1:1d:8c:5a:ff:07:98:76:e7:cb:07:d6:db:37:
86:3d:17:8b:42:7e:2a:69:ea:32:60:2c:ec:ce:30:19:08:9c:
e3:c9:2d:95:ee:5e:ea:79:9e:90:7d:1d:0a:d0:4a:93:3a:0f:
3c:e2:34:e9:d3:b9:2e:e8:e0:ce:19:1b:d8:a6:5c:ef:90:a7:
40:81:0d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:49:01 2025 by rpki-client