Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9a62b9ec-20ea-43fc-8f7e-db2c82e41eb3/2d268515-b281-3b1a-b24d-4af6907d3363.roa
File: 2d268515-b281-3b1a-b24d-4af6907d3363.roa (raw, json)
Hash identifier: PCUeY78TsfoldbrdOrHOQNXTP2PxIrEAGfrcUnDOt3s=
Subject key identifier: 69:D1:6A:A3:9C:80:DE:52:E5:BC:AA:A7:7B:F0:E0:26:00:72:F2:E3
Certificate issuer: /CN=9a62b9ec-20ea-43fc-8f7e-db2c82e41eb3
Certificate serial: 010D0C9F432858480644FE1DF46B1720B6FDC600
Authority key identifier: 8D:D4:37:3B:88:29:65:6B:C0:50:0B:AA:B0:8E:D8:67:0B:E4:F3:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9a62b9ec-20ea-43fc-8f7e-db2c82e41eb3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9a62b9ec-20ea-43fc-8f7e-db2c82e41eb3/2d268515-b281-3b1a-b24d-4af6907d3363.roa
Signing time: Thu 28 Nov 2024 02:00:38 +0000
ROA not before: Thu 28 Nov 2024 02:00:38 +0000
ROA not after: Wed 26 Feb 2025 02:00:38 +0000
asID: 63251
IP address blocks: 104.245.52.0/22 maxlen: 22
137.83.28.0/23 maxlen: 23
148.59.42.0/24 maxlen: 24
192.139.135.0/24 maxlen: 24
204.152.129.0/24 maxlen: 24
2605:c680::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:06:44:fe:1d:f4:6b:17:20:b6:fd:c6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a62b9ec-20ea-43fc-8f7e-db2c82e41eb3
Validity
Not Before: Nov 28 02:00:38 2024 GMT
Not After : Feb 26 02:00:38 2025 GMT
Subject: CN=3722f3c1-2418-453c-bdee-48c04e4f6c28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fc:07:b0:49:17:c0:de:ca:3a:74:18:27:1c:
23:c4:80:14:cb:a0:e0:ed:11:e3:77:b5:05:7c:55:
0f:e4:7d:0f:15:87:05:6b:a2:ec:5e:48:5f:cc:05:
2f:95:9e:af:b9:2d:7c:7a:b5:ed:44:17:c0:98:9a:
f3:11:83:d5:9c:ed:ec:0b:b1:29:98:f2:0b:2a:3f:
4b:ff:4b:da:df:6e:46:bd:0b:7e:b3:72:87:03:c4:
57:2f:d0:03:2e:56:ec:0d:a8:73:04:dc:1a:67:f0:
bd:a7:67:df:6f:db:3e:38:e4:92:85:b2:68:a8:2a:
68:ec:93:a3:ec:cd:47:2b:c2:e0:aa:33:55:ec:f1:
9b:07:f4:cc:c0:bc:d6:26:4f:ae:4d:d3:2d:77:81:
d6:41:a1:1b:d7:aa:6d:1d:da:55:8a:f8:5b:15:c5:
45:b3:6f:31:d5:6a:d9:9f:b5:22:8c:05:d1:7e:35:
be:48:1a:cf:d4:cd:b0:d3:31:d7:ba:23:63:48:ca:
b6:02:3b:bd:2c:c3:ee:70:01:4c:36:1a:75:0b:5b:
80:c6:36:b6:0a:b9:df:68:a7:c7:3b:a4:e5:81:c9:
f3:e1:6a:9e:66:74:53:6a:39:ce:5c:80:28:97:f0:
c8:b0:fe:d4:90:98:4c:8d:82:8a:cf:e7:b5:e8:c9:
5a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:D1:6A:A3:9C:80:DE:52:E5:BC:AA:A7:7B:F0:E0:26:00:72:F2:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9a62b9ec-20ea-43fc-8f7e-db2c82e41eb3/2d268515-b281-3b1a-b24d-4af6907d3363.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9a62b9ec-20ea-43fc-8f7e-db2c82e41eb3/9a62b9ec-20ea-43fc-8f7e-db2c82e41eb3.crl
X509v3 Authority Key Identifier:
keyid:8D:D4:37:3B:88:29:65:6B:C0:50:0B:AA:B0:8E:D8:67:0B:E4:F3:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9a62b9ec-20ea-43fc-8f7e-db2c82e41eb3.cer
sbgp-ipAddrBlock: critical
IPv4:
104.245.52.0/22
137.83.28.0/23
148.59.42.0/24
192.139.135.0/24
204.152.129.0/24
IPv6:
2605:c680::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ab:cb:fd:b8:b3:08:af:bd:8d:2b:62:ac:5d:2a:52:7b:aa:f8:
2a:0e:ec:f8:f6:d8:24:86:90:d1:fa:02:10:03:39:c8:42:a8:
2f:dd:73:f7:dc:2c:4d:28:63:95:15:ff:1e:8e:42:5c:e4:c7:
c2:3a:e7:5d:02:32:62:ec:5e:d4:0b:76:6a:78:1d:de:76:64:
08:31:4d:4f:bc:d9:7f:a2:41:2a:e0:75:b3:9d:e1:b1:04:cc:
3d:48:20:22:6d:0d:bf:10:cd:36:74:a8:ff:01:73:37:6e:90:
e9:d0:53:99:b8:94:54:ba:b3:87:63:dc:5a:d4:6d:b6:db:d7:
96:41:69:40:5a:4a:9f:9f:c1:ba:15:0d:76:e6:c5:4e:5a:c3:
8b:81:8b:b5:c7:25:22:01:d1:9f:2f:79:5f:1f:a1:94:a8:22:
19:ff:a1:6b:6c:d9:a2:6a:12:3c:7a:fc:51:58:10:2d:f9:1d:
10:80:b8:a0:35:f3:38:4f:63:00:70:76:51:a8:2a:dc:97:f3:
c7:5a:97:7e:fd:85:50:16:7c:ab:6c:35:09:e6:b7:7a:eb:92:
e5:b7:28:2d:58:96:0e:7f:99:34:72:45:ce:6e:e3:7f:17:5b:
5b:00:2f:16:aa:42:79:6a:97:03:7a:a6:34:79:c4:40:e3:64:
ff:c7:e6:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:31:58 2025 by rpki-client