Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/8f5eda80-bc10-3624-b2a3-e6ffeaf6fc3d.roa
File: 8f5eda80-bc10-3624-b2a3-e6ffeaf6fc3d.roa (raw, json)
Hash identifier: QQLsmpwT792SVXQQVZYfxldlEelgwfCsGZeELVWGaoE=
Subject key identifier: 8E:50:7C:34:72:18:34:FD:BA:2B:66:AC:64:D3:CA:13:E4:EF:2F:A8
Certificate issuer: /CN=928cccc8-4c1d-457b-a709-2f2c5d83c939
Certificate serial: 010D0C9F432858481C9A8AAD800F7FEE2AC1DF00
Authority key identifier: E7:48:CF:EC:DF:A9:17:0F:AE:79:4A:FB:3E:33:6D:B0:4A:C5:88:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/8f5eda80-bc10-3624-b2a3-e6ffeaf6fc3d.roa
Signing time: Fri 06 Dec 2024 02:00:39 +0000
ROA not before: Fri 06 Dec 2024 02:00:39 +0000
ROA not after: Thu 06 Mar 2025 02:00:39 +0000
asID: 14618
IP address blocks: 67.226.220.0/24 maxlen: 24
67.226.222.0/24 maxlen: 24
204.110.221.0/24 maxlen: 24
204.110.222.0/24 maxlen: 24
204.110.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1c:9a:8a:ad:80:0f:7f:ee:2a:c1:df:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=928cccc8-4c1d-457b-a709-2f2c5d83c939
Validity
Not Before: Dec 6 02:00:39 2024 GMT
Not After : Mar 6 02:00:39 2025 GMT
Subject: CN=eb2e3e41-0842-4d54-847c-2de231b82b44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4b:bc:e4:b7:58:a5:d7:93:3c:07:99:50:41:
7f:c1:d5:60:9e:df:13:53:f5:17:89:be:32:68:62:
b4:25:fa:d0:e8:34:62:a0:c4:42:ac:00:ae:c1:38:
d0:5c:8b:5a:15:27:ee:57:c5:18:1e:8c:72:04:ba:
4f:a6:91:26:63:9c:24:8c:56:b0:a2:92:81:b2:79:
ad:b8:ae:55:3d:4a:0e:8c:2a:49:91:ec:e7:4c:4c:
44:70:b7:89:05:9e:82:fc:7d:6b:6a:3f:05:c2:e6:
dc:38:de:dd:60:2d:94:ae:b1:53:e6:ee:dc:34:fd:
ab:fb:6a:6b:c4:2f:de:2f:59:59:82:c1:6f:d2:3b:
44:00:62:78:bd:f7:6d:3b:f7:69:6d:93:c5:a9:ca:
93:a2:43:d8:60:7a:4d:c8:63:96:22:04:22:ba:58:
e4:90:3e:e5:77:f0:54:51:49:26:30:e6:28:ce:92:
9d:2c:b0:f9:ba:3b:a1:f4:7b:23:b5:a4:84:5a:d2:
a5:3b:50:b2:4f:f3:bc:7a:cc:92:b6:71:3f:ba:16:
52:1f:d4:76:0a:cc:22:f7:42:df:b0:71:70:34:68:
c9:d5:79:65:f6:8a:32:c4:8c:d2:7b:93:7a:fd:f7:
48:9f:94:75:56:0b:07:ad:e6:b0:40:06:aa:a3:a8:
d4:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:50:7C:34:72:18:34:FD:BA:2B:66:AC:64:D3:CA:13:E4:EF:2F:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/8f5eda80-bc10-3624-b2a3-e6ffeaf6fc3d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/928cccc8-4c1d-457b-a709-2f2c5d83c939.crl
X509v3 Authority Key Identifier:
keyid:E7:48:CF:EC:DF:A9:17:0F:AE:79:4A:FB:3E:33:6D:B0:4A:C5:88:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939.cer
sbgp-ipAddrBlock: critical
IPv4:
67.226.220.0/24
67.226.222.0/24
204.110.221.0-204.110.223.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:6e:26:68:84:8f:35:c1:1a:83:44:09:e5:59:93:70:dd:db:
41:4f:89:23:af:ee:14:68:d4:7e:5d:a6:48:f1:e6:70:74:57:
1a:39:7c:d9:6f:10:9d:48:fa:79:6b:b3:d2:d9:b2:fa:66:f1:
10:07:50:3c:62:89:70:99:8d:9f:83:31:22:d5:65:ff:dc:04:
fd:a0:ba:37:db:c9:20:8e:80:78:2b:3b:45:f9:00:90:5a:12:
c6:7e:61:43:7c:e9:11:9f:37:d9:56:2e:54:0a:d9:a0:42:f9:
66:2f:64:33:84:70:35:e4:9d:ae:3b:e2:bd:4b:ec:cd:78:dc:
e7:a4:c1:28:c8:2b:21:35:e7:7d:42:27:c5:72:c1:44:04:93:
5d:78:5c:9f:5a:2f:3a:cc:57:df:77:c9:3d:4a:28:ca:4a:14:
43:42:64:f0:ac:74:ff:26:42:a7:e9:43:ab:b9:6c:d2:54:0b:
a7:d6:57:e8:26:a5:2d:c0:e8:eb:c4:90:e2:3c:d0:f5:7f:76:
3d:d2:47:af:c7:5c:70:8f:e3:7e:b4:b6:67:7d:ba:ca:f4:f7:
ce:d7:56:df:69:af:8f:d0:54:c1:3c:ee:99:0a:80:45:17:00:
4c:d0:21:da:38:b9:dc:2b:63:0a:b1:99:cb:bd:c8:62:38:44:
0c:81:a7:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:38:35 2025 by rpki-client