Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/d1f7b2fe-b28f-3f62-983c-8e4d048e41f5.roa
File: d1f7b2fe-b28f-3f62-983c-8e4d048e41f5.roa (raw, json)
Hash identifier: 6uurQLrK2s+jKfIaEjSRG+PB9PSEf2cCCer1bxDqWkg=
Subject key identifier: F4:82:92:7D:C1:56:27:06:A8:1C:92:4E:A2:1B:21:2A:17:A9:05:55
Certificate issuer: /CN=5e3e99cc-7992-4ac1-a256-917cce07532e
Certificate serial: 010D0C9F43285847F4557345508DDCC8FA61C7B8
Authority key identifier: D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/d1f7b2fe-b28f-3f62-983c-8e4d048e41f5.roa
Signing time: Thu 21 Nov 2024 15:49:22 +0000
ROA not before: Thu 21 Nov 2024 15:49:22 +0000
ROA not after: Wed 19 Feb 2025 15:49:22 +0000
asID: 6079
IP address blocks: 67.214.178.0/24 maxlen: 24
74.80.157.0/24 maxlen: 24
74.80.165.0/24 maxlen: 24
74.80.174.0/24 maxlen: 24
74.80.177.0/24 maxlen: 24
74.80.178.0/24 maxlen: 24
206.212.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f4:55:73:45:50:8d:dc:c8:fa:61:c7:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e3e99cc-7992-4ac1-a256-917cce07532e
Validity
Not Before: Nov 21 15:49:22 2024 GMT
Not After : Feb 19 15:49:22 2025 GMT
Subject: CN=685e3f6c-8be9-454e-96bb-0aa4a5f47f37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:80:ab:96:b5:ad:8a:61:bc:f9:0a:8f:f7:ff:
96:10:97:60:40:9a:01:ba:5f:d5:d3:c2:a7:74:6a:
7d:3c:23:3a:15:8e:f8:b9:70:03:0d:69:5c:fa:20:
56:42:1d:70:95:2d:72:44:c0:0f:e5:0c:63:d7:32:
b6:e2:ba:bf:f0:43:b8:7e:55:e6:bb:6c:b6:ed:32:
e7:36:b9:73:9a:60:a1:a7:02:b7:1d:58:8b:8f:de:
9d:73:ea:86:74:14:c4:c5:f9:29:fb:08:f2:c8:d5:
bd:62:f4:2a:50:04:5a:42:7e:5f:91:35:32:66:89:
91:99:21:0b:e6:64:69:00:64:2e:f8:a3:31:8c:b7:
0b:76:70:ed:c7:0a:c7:84:67:3f:bb:d2:c6:07:98:
6e:b0:a8:91:0c:7a:46:ef:86:26:ad:cc:5d:89:2c:
80:c7:76:a2:1b:be:21:1b:e7:99:5c:54:9c:a5:74:
d8:5a:04:cf:0c:bc:43:98:09:b5:46:00:f4:df:e2:
d3:23:a9:7b:a3:9f:65:4d:ce:bd:57:70:5e:10:f8:
66:68:38:b3:1f:57:87:02:11:db:3d:62:b7:88:ff:
df:db:c7:87:02:73:28:8c:bc:23:8e:68:4d:83:5c:
75:78:52:aa:15:85:69:c1:12:d0:d5:90:e0:2d:0b:
ba:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:82:92:7D:C1:56:27:06:A8:1C:92:4E:A2:1B:21:2A:17:A9:05:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/d1f7b2fe-b28f-3f62-983c-8e4d048e41f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl
X509v3 Authority Key Identifier:
keyid:D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
sbgp-ipAddrBlock: critical
IPv4:
67.214.178.0/24
74.80.157.0/24
74.80.165.0/24
74.80.174.0/24
74.80.177.0-74.80.178.255
206.212.251.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:35:79:69:8f:4b:12:36:ef:73:e5:00:a4:5a:02:6b:81:53:
73:c8:95:df:fb:a4:1b:60:f5:c7:10:63:4f:c4:b6:97:65:a1:
71:78:04:b6:d4:3c:84:30:fd:33:f3:15:c3:11:07:40:8c:d3:
18:d4:a2:b7:0f:a6:76:5f:ca:97:a3:25:f4:c6:9d:e2:1e:c0:
f0:a0:6c:72:ad:1f:38:34:72:a5:b1:e0:dc:a6:3a:6b:49:17:
c6:ae:b4:2e:21:4b:b5:66:15:d5:d3:0a:da:d6:3e:90:8a:1f:
69:c3:0a:20:36:b4:c3:45:49:c8:eb:51:17:9e:b5:32:27:62:
14:6b:49:8d:92:ef:28:96:30:f9:5a:f9:68:89:fa:0e:74:89:
df:03:25:fd:fd:74:96:ec:5f:a3:6a:de:bd:b8:d4:98:49:ed:
16:6c:3c:3f:60:88:bb:5a:47:8b:f3:35:67:3a:58:5d:8d:94:
cf:11:30:e4:82:22:be:75:8f:f2:79:18:7f:03:5e:62:8e:fc:
65:9c:a7:9f:2a:03:28:63:2c:64:b1:6a:30:c1:27:37:80:5f:
f8:88:5f:59:1f:42:65:0c:c2:d7:de:63:9f:72:5e:29:79:df:
61:68:23:03:92:5e:60:a2:78:f8:07:02:3e:e8:a5:26:49:76:
d2:49:88:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 07:00:47 2025 by rpki-client