Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ac42ca24-d785-4ab8-81d3-baec3a30b660/e185c6ec-8578-3e23-8fac-69d0ea35f8fb.roa
File: e185c6ec-8578-3e23-8fac-69d0ea35f8fb.roa (raw, json)
Hash identifier: vKeSl4TtS7X8yDDsAeml8Sbd91uWDafYgOeHKCQl6/Y=
Subject key identifier: 5D:8D:19:CE:B6:19:A3:A1:0D:A2:B8:87:53:29:52:CE:C7:F8:28:A8
Certificate issuer: /CN=ac42ca24-d785-4ab8-81d3-baec3a30b660
Certificate serial: 010D0C9F43285848064501333BFEAFC0D6EC1280
Authority key identifier: F4:B6:F5:EF:0B:83:49:79:6B:50:62:59:F0:36:46:8D:E7:08:1F:AF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ac42ca24-d785-4ab8-81d3-baec3a30b660.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ac42ca24-d785-4ab8-81d3-baec3a30b660/e185c6ec-8578-3e23-8fac-69d0ea35f8fb.roa
Signing time: Thu 28 Nov 2024 02:00:38 +0000
ROA not before: Thu 28 Nov 2024 02:00:38 +0000
ROA not after: Wed 26 Feb 2025 02:00:38 +0000
asID: 393713
IP address blocks: 64.79.48.0/20 maxlen: 24
74.123.32.0/22 maxlen: 24
162.254.112.0/22 maxlen: 24
192.157.20.0/22 maxlen: 24
199.91.176.0/22 maxlen: 24
199.193.180.0/22 maxlen: 24
204.62.56.0/21 maxlen: 24
208.72.76.0/22 maxlen: 24
208.77.8.0/23 maxlen: 24
208.82.84.0/22 maxlen: 24
208.89.176.0/22 maxlen: 24
216.146.224.0/20 maxlen: 24
2605:ce80::/32 maxlen: 48
2606:c080::/32 maxlen: 48
2607:ffe8::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:06:45:01:33:3b:fe:af:c0:d6:ec:12:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac42ca24-d785-4ab8-81d3-baec3a30b660
Validity
Not Before: Nov 28 02:00:38 2024 GMT
Not After : Feb 26 02:00:38 2025 GMT
Subject: CN=1f0cb310-ab98-4672-b7fa-9e82165398b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ef:65:e4:e1:20:21:14:8d:5c:3a:3b:fe:24:
f0:b1:af:dd:85:7e:3e:98:a4:bd:16:77:2b:a6:a7:
96:ce:4b:02:88:e4:9b:39:26:7a:9e:0d:26:f1:a9:
cb:8f:b8:ba:01:b6:27:76:9e:a0:e7:f1:18:c8:66:
86:b3:d8:57:5e:3e:e8:64:0f:df:83:62:3a:4b:2d:
fe:07:fd:8f:53:89:4c:55:f6:b6:96:9a:c0:0b:71:
c3:2b:9a:7a:e3:22:36:86:41:db:ce:8f:d3:1b:4d:
9e:03:1e:98:9c:2e:56:98:42:f7:76:b5:94:a8:09:
87:eb:3e:96:94:87:98:10:24:69:61:56:65:05:54:
5b:88:59:8b:4d:73:39:b3:7b:3f:a1:88:b6:8a:96:
e9:6e:51:4b:96:12:3a:d8:77:60:11:cb:4b:b2:71:
95:df:96:25:88:da:59:10:de:cd:58:04:df:e4:a7:
35:8a:11:48:61:cd:43:38:81:1e:31:00:c7:8f:bc:
da:a1:cb:aa:fc:ab:05:46:23:b2:6c:89:89:e9:9d:
6c:25:b3:e5:7e:5c:50:3e:ab:9c:cc:98:46:19:4b:
34:94:82:d0:8d:b7:75:8c:bd:41:2d:41:15:2d:fa:
69:a0:ca:e9:8a:0f:06:2a:1b:7e:dd:88:a5:4a:e0:
ca:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:8D:19:CE:B6:19:A3:A1:0D:A2:B8:87:53:29:52:CE:C7:F8:28:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ac42ca24-d785-4ab8-81d3-baec3a30b660/e185c6ec-8578-3e23-8fac-69d0ea35f8fb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ac42ca24-d785-4ab8-81d3-baec3a30b660/ac42ca24-d785-4ab8-81d3-baec3a30b660.crl
X509v3 Authority Key Identifier:
keyid:F4:B6:F5:EF:0B:83:49:79:6B:50:62:59:F0:36:46:8D:E7:08:1F:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ac42ca24-d785-4ab8-81d3-baec3a30b660.cer
sbgp-ipAddrBlock: critical
IPv4:
64.79.48.0/20
74.123.32.0/22
162.254.112.0/22
192.157.20.0/22
199.91.176.0/22
199.193.180.0/22
204.62.56.0/21
208.72.76.0/22
208.77.8.0/23
208.82.84.0/22
208.89.176.0/22
216.146.224.0/20
IPv6:
2605:ce80::/32
2606:c080::/32
2607:ffe8::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:1d:27:94:ab:60:35:a9:53:15:d3:d2:1d:4f:23:ed:67:ba:
d0:91:5f:3b:68:bf:a7:93:d7:8a:f1:15:5c:2c:6f:12:03:47:
ed:1a:b5:ea:fc:65:62:eb:9a:4a:36:ca:1c:a6:a0:1c:74:71:
fc:a0:c8:18:b1:a3:75:10:f1:bd:a4:9e:9a:ca:84:f8:f4:b7:
39:01:cf:0e:6e:c7:bf:11:d1:b7:bf:47:d3:a2:91:ce:d6:38:
df:91:1e:83:6a:68:50:9c:00:42:cc:79:3e:a5:7b:ea:2e:d3:
fb:c9:3f:4f:e9:20:67:30:de:93:73:f0:ba:98:a8:d7:85:0f:
65:a8:f2:f6:4e:24:ab:14:66:43:2a:07:e2:ac:86:31:4a:83:
6f:12:d3:5e:e5:24:7f:95:b0:e9:6c:6c:67:db:80:f9:c7:da:
ab:65:c4:23:9d:56:f2:3c:99:54:78:c6:77:32:c0:95:51:97:
0c:e6:2a:f8:55:81:e5:59:e4:9b:c4:3b:b3:1d:cf:37:85:db:
8e:a5:10:86:0a:70:e3:1c:af:85:cd:95:1a:0f:04:60:74:9f:
b5:ac:32:35:cb:84:48:ad:b7:d7:1b:48:79:ac:ff:b4:7f:01:
26:df:2f:99:e8:72:41:6e:77:4f:e0:90:da:35:5a:fe:67:54:
42:00:b7:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:39:03 2025 by rpki-client