Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2f4c4963-ede1-38bf-9888-ad5fdeecbd33.roa
File: 2f4c4963-ede1-38bf-9888-ad5fdeecbd33.roa (raw, json)
Hash identifier: ZIU/Z8oNJMIQU+a0RgAZvMdOfv14Pvua9l8+ps0nKJE=
Subject key identifier: CE:14:A1:03:3E:5B:65:90:D1:C6:5D:0C:B5:1D:D1:BD:9C:E0:8B:D4
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858480BDA6B1ECA486C9985D55540
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2f4c4963-ede1-38bf-9888-ad5fdeecbd33.roa
Signing time: Sat 30 Nov 2024 02:00:39 +0000
ROA not before: Sat 30 Nov 2024 02:00:39 +0000
ROA not after: Fri 28 Feb 2025 02:00:39 +0000
asID: 32787
IP address blocks: 72.52.20.0/22 maxlen: 22
72.52.20.0/24 maxlen: 24
72.52.21.0/24 maxlen: 24
72.52.22.0/24 maxlen: 24
72.52.60.0/23 maxlen: 23
72.52.60.0/24 maxlen: 24
72.52.61.0/24 maxlen: 24
209.200.158.0/23 maxlen: 23
209.200.158.0/24 maxlen: 24
209.200.159.0/24 maxlen: 24
209.200.161.0/24 maxlen: 24
209.200.162.0/24 maxlen: 24
209.200.163.0/24 maxlen: 24
209.200.176.0/24 maxlen: 24
209.200.179.0/24 maxlen: 24
209.200.180.0/24 maxlen: 24
209.200.181.0/24 maxlen: 24
209.200.182.0/24 maxlen: 24
209.200.183.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0b:da:6b:1e:ca:48:6c:99:85:d5:55:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Nov 30 02:00:39 2024 GMT
Not After : Feb 28 02:00:39 2025 GMT
Subject: CN=5b28fa82-f90d-4c9c-a556-536e286ef5db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:99:0c:b6:04:49:e8:96:74:32:c0:73:60:c4:
f5:fc:e3:7b:99:7e:22:8d:36:f5:33:71:f1:9f:d0:
58:3e:c1:6a:3c:28:af:71:a7:65:3c:95:4d:a6:8d:
d1:ad:d9:d7:01:7f:77:2d:7c:f6:b7:47:b5:e7:d1:
42:46:ac:93:bc:9c:99:0f:66:0c:a3:3f:7d:04:84:
9e:2b:07:6c:c4:2a:54:10:6b:a2:f1:43:5f:9a:34:
bb:86:b3:8c:55:86:fc:fa:46:bc:f6:02:92:b9:d3:
12:27:e6:53:be:26:16:94:e5:9b:e7:18:ef:5e:5c:
28:b9:79:ae:6a:6c:bd:46:58:e9:2c:12:1f:5b:51:
fd:c9:7b:df:e8:fd:17:28:e9:e7:9f:09:f9:cd:e1:
64:25:b7:b8:38:27:87:a0:ef:26:91:13:3b:6a:59:
cc:eb:a1:3a:cd:dc:f3:ea:64:ee:bf:d8:fb:ca:7a:
3f:b4:8f:1e:ac:12:c3:cc:c0:97:68:1f:11:42:d8:
af:32:7e:11:eb:28:86:96:80:a3:da:6a:42:25:2b:
c4:4c:1e:52:01:17:1e:2e:89:0f:65:00:46:c8:42:
94:49:7b:76:02:a3:86:a3:41:2d:4a:9c:d1:2a:4e:
ed:c1:dd:b7:ae:52:db:70:98:64:fb:f1:8a:6b:5d:
0e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:14:A1:03:3E:5B:65:90:D1:C6:5D:0C:B5:1D:D1:BD:9C:E0:8B:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2f4c4963-ede1-38bf-9888-ad5fdeecbd33.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
72.52.20.0/22
72.52.60.0/23
209.200.158.0/23
209.200.161.0-209.200.163.255
209.200.176.0/24
209.200.179.0-209.200.183.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:6f:7b:b5:c0:41:29:2d:4c:81:95:19:e0:92:a4:82:bc:63:
2a:44:be:8d:7d:a1:66:9a:3a:51:7c:98:20:4a:29:f0:81:c7:
6c:d5:08:0e:71:3e:e0:c6:34:f8:4f:6c:1d:68:da:51:e5:45:
d6:dd:3f:79:fa:34:f4:6c:94:f9:12:0c:96:a9:39:3a:20:10:
e8:8e:68:cf:02:dd:c0:79:6e:92:bd:b7:ea:a5:f6:39:06:40:
f0:1a:2b:b7:dc:9e:99:7a:bd:5c:7c:e9:15:1c:94:29:15:d6:
ae:f9:87:63:ef:7c:01:36:fc:d0:91:09:d1:a1:7b:ad:c4:20:
0c:65:5a:5c:ef:0b:60:45:66:5b:05:e4:58:7f:f7:65:eb:34:
37:d5:67:7b:cc:47:49:a0:0b:e9:a5:06:a8:e3:f7:65:24:e4:
ca:50:13:c7:31:c5:42:08:60:d9:e1:5a:42:8e:32:53:c9:39:
dc:24:22:64:ac:77:c7:ab:18:f8:8f:bd:be:39:e7:1b:58:af:
de:4c:ca:36:ed:f6:40:38:13:e5:ba:3c:60:6b:15:b1:f6:6f:
f1:67:04:71:33:c7:b8:89:e5:b4:e9:67:86:78:9e:93:df:e5:
ab:85:a2:cf:f6:86:ba:84:9c:9c:7e:42:c4:c7:c9:e1:e3:aa:
73:d5:1b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:51:23 2025 by rpki-client