Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/c9c5f8a3-c14a-3240-b3df-4b7e6f284ac6.roa
File: c9c5f8a3-c14a-3240-b3df-4b7e6f284ac6.roa (raw, json)
Hash identifier: xpuEW7khV67dtqDbskCevkdxxgaThrG8dSIwBSHGUFM=
Subject key identifier: 84:E6:A0:EB:C5:F3:CF:15:49:AF:04:84:F7:F3:15:1A:FC:05:88:A6
Certificate issuer: /CN=9de5b47f-bd49-4614-b658-9980cfd17769
Certificate serial: 010D0C9F432858484C10301C77DFC60F5D3E5C00
Authority key identifier: 8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/c9c5f8a3-c14a-3240-b3df-4b7e6f284ac6.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 396982
IP address blocks: 144.49.128.0/18 maxlen: 18
144.49.192.0/21 maxlen: 21
144.49.200.0/22 maxlen: 22
144.49.208.0/20 maxlen: 20
144.49.232.0/22 maxlen: 22
144.49.240.0/21 maxlen: 21
144.49.248.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:30:1c:77:df:c6:0f:5d:3e:5c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9de5b47f-bd49-4614-b658-9980cfd17769
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=9ea263fd-da86-48ba-899d-601f4acde148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:85:09:d4:b7:bb:4a:9a:f1:00:fa:91:cb:c2:
cf:b8:9c:a1:ce:78:fe:22:f0:2b:86:09:29:15:a9:
f8:3d:7c:bd:3d:3b:7c:d8:84:44:04:07:38:67:9d:
e5:52:d2:16:53:30:5f:df:ad:f7:25:1d:01:51:0f:
1c:c3:80:80:21:49:96:a7:b6:9a:89:bc:f1:b8:7d:
f9:e0:2b:ae:07:14:2b:41:9f:ec:d6:ef:49:31:9c:
5a:0f:fe:a6:8d:51:9a:05:56:f5:61:d1:39:93:c4:
56:22:09:76:68:c9:22:fe:11:e8:d4:fe:21:04:57:
07:5f:0b:52:33:cd:d1:4d:73:51:d8:db:d1:99:fd:
f9:52:66:e8:53:30:58:fd:b8:b5:a8:2e:2b:56:92:
f3:45:15:66:3d:4d:df:d2:6c:70:30:1b:5a:31:5a:
1f:6c:ef:c1:32:9d:e1:1c:76:4a:f6:5d:48:06:cf:
54:b3:bf:0a:6c:0b:97:ab:4e:42:49:86:0a:de:90:
f5:f4:d5:7d:50:66:99:e0:b3:19:d9:2f:ac:a8:3b:
9a:05:23:68:ec:e7:48:09:b4:60:22:5c:e3:8c:bc:
19:e0:de:6e:6c:3d:e1:ca:87:a7:6f:e9:39:62:38:
eb:13:33:9e:31:b8:b8:b7:e9:2d:40:e3:9b:51:d7:
6f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:E6:A0:EB:C5:F3:CF:15:49:AF:04:84:F7:F3:15:1A:FC:05:88:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/c9c5f8a3-c14a-3240-b3df-4b7e6f284ac6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl
X509v3 Authority Key Identifier:
keyid:8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer
sbgp-ipAddrBlock: critical
IPv4:
144.49.128.0-144.49.203.255
144.49.208.0/20
144.49.232.0/22
144.49.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:b0:b4:d2:a6:c6:3a:50:02:f2:4a:2d:a9:46:e5:c2:25:f3:
d5:9f:32:d2:39:18:56:67:ab:df:e4:da:5a:1f:d4:49:a7:5b:
72:42:f3:57:68:d9:01:a7:51:0c:95:ce:8e:38:e5:b3:8d:60:
02:eb:38:4a:3d:f1:f4:c8:fd:33:f1:1e:e4:23:e2:9f:7b:21:
ba:78:f3:14:a8:12:5e:ed:63:c4:b5:d5:60:b8:d9:6e:9d:a5:
36:eb:ed:4c:28:1f:7e:1c:e7:e1:34:ba:28:e0:1f:a7:82:d3:
e6:08:7f:60:a5:43:0b:8a:eb:a4:17:54:d0:88:16:e9:d5:4c:
bb:23:f1:6b:17:49:5d:02:a2:ec:50:ec:8e:61:78:cc:c0:12:
d5:2a:b6:08:0c:97:b4:27:d2:bd:cc:50:e6:6d:f8:08:0c:da:
7c:23:0e:fb:db:cd:06:5d:da:8b:90:7d:39:fd:83:6e:4f:cc:
63:49:e5:c3:71:fd:5a:10:02:7b:e2:b9:6b:e3:c1:40:ec:db:
c1:9a:d7:cd:2e:05:58:55:6f:8d:09:a3:e2:72:7e:8e:63:6e:
12:d5:28:92:57:c8:51:e5:2d:4a:53:b2:56:a5:5d:e8:98:6f:
a3:50:47:ff:a6:fa:01:70:14:7e:4e:d5:db:30:48:9d:fc:e5:
02:40:94:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:37:04 2025 by rpki-client