Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d/5e224ae1-808a-3754-8044-eaca79be6972.roa
File: 5e224ae1-808a-3754-8044-eaca79be6972.roa (raw, json)
Hash identifier: 7zoJqHu0dJRCXjZVMnnA6kWM5io0TE3hcoGr16qQhIU=
Subject key identifier: 16:6B:4D:83:CB:D6:FD:60:0F:6B:8E:BD:47:3C:F4:FA:69:0A:06:CA
Certificate issuer: /CN=b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d
Certificate serial: 010D0C9F4328584824FA8FFF6A9E0EDE5E6FB900
Authority key identifier: B7:6B:5F:18:8A:61:5B:23:82:C3:F2:A9:75:14:55:A5:21:B1:87:E1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d/5e224ae1-808a-3754-8044-eaca79be6972.roa
Signing time: Mon 09 Dec 2024 02:00:40 +0000
ROA not before: Mon 09 Dec 2024 02:00:40 +0000
ROA not after: Sun 09 Mar 2025 02:00:40 +0000
asID: 198949
IP address blocks: 64.45.64.0/18 maxlen: 24
65.18.0.0/18 maxlen: 24
65.18.64.0/19 maxlen: 24
65.18.96.0/20 maxlen: 24
141.114.0.0/16 maxlen: 24
204.197.0.0/17 maxlen: 24
207.166.224.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:24:fa:8f:ff:6a:9e:0e:de:5e:6f:b9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d
Validity
Not Before: Dec 9 02:00:40 2024 GMT
Not After : Mar 9 02:00:40 2025 GMT
Subject: CN=ded4a971-ca7f-4735-b2c1-75165b18b6fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:20:be:db:3f:1b:a9:59:e6:25:a0:e2:dc:f1:
49:5b:bd:87:68:32:18:4a:96:a4:c0:18:92:ef:c5:
80:8b:90:95:3c:66:d9:70:f7:a7:21:f8:0c:e0:9f:
26:f0:41:f2:8c:54:bf:e5:80:19:b3:7e:86:bc:53:
49:b9:d0:1b:76:a2:15:0a:7e:f1:b8:ed:37:e3:35:
10:50:6d:3a:57:75:06:36:fc:18:ce:7f:a3:2e:62:
39:62:98:17:af:d1:66:eb:35:d8:27:1c:de:94:36:
a1:ab:c1:e5:18:9d:b1:ff:5d:bb:71:19:0e:e1:6d:
9a:f5:b1:e6:e3:b1:96:59:62:06:27:92:e0:7f:32:
c2:05:21:a2:9c:12:28:83:84:3d:6b:d4:d5:74:f6:
0b:15:8d:50:8a:38:16:c0:dc:a5:ac:c8:89:de:27:
43:1b:be:16:d9:37:e3:79:16:d7:6e:7b:e6:b6:a7:
ac:0e:e3:29:f5:d6:6b:f9:6a:2e:1e:dc:aa:a6:a2:
e3:92:32:23:d5:05:02:d2:da:c3:f1:60:f5:2c:8f:
a4:da:9f:d3:e3:30:0b:88:5a:7c:44:41:cf:91:ad:
4f:d7:b1:ab:1e:da:1b:75:10:4f:66:19:56:d0:6b:
2d:5f:b6:94:f6:3b:18:fa:21:3b:a7:08:9c:3b:49:
99:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:6B:4D:83:CB:D6:FD:60:0F:6B:8E:BD:47:3C:F4:FA:69:0A:06:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d/5e224ae1-808a-3754-8044-eaca79be6972.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d.crl
X509v3 Authority Key Identifier:
keyid:B7:6B:5F:18:8A:61:5B:23:82:C3:F2:A9:75:14:55:A5:21:B1:87:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d.cer
sbgp-ipAddrBlock: critical
IPv4:
64.45.64.0/18
65.18.0.0-65.18.111.255
141.114.0.0/16
204.197.0.0/17
207.166.224.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:98:99:60:1e:e1:2a:58:ec:c9:3f:d5:a3:01:ef:d7:40:79:
d2:fe:e3:74:06:fc:eb:99:16:fc:6c:ec:9f:04:7b:18:52:af:
97:0a:03:48:ca:4b:45:37:6b:d4:b4:35:d9:36:61:23:84:ac:
dc:3b:81:b8:65:cb:c1:bf:db:8c:47:86:3d:ed:ff:0e:66:bd:
e0:40:90:ee:4c:9c:06:28:3b:fe:ba:33:de:a8:cd:de:8a:01:
a5:aa:7b:e0:df:b3:ca:f5:25:96:a7:cc:03:1b:a6:24:ce:06:
7c:f0:2c:8c:1e:2f:59:3e:b9:11:23:aa:28:43:b0:cc:69:90:
2d:85:96:78:1f:71:44:84:76:37:09:2e:7b:1c:42:58:d0:00:
87:95:87:7e:f0:ad:8b:06:6f:6b:f9:bc:a6:4c:f0:c8:83:11:
f2:e9:da:b0:19:40:71:f4:83:36:09:3e:78:28:07:10:35:82:
52:0a:9d:de:fd:b1:2a:0d:23:fa:97:7a:b7:78:f4:58:cd:a0:
21:9f:c8:8a:5b:5c:c2:dc:09:4a:82:fc:c9:8b:89:55:7d:fe:
a0:5a:53:a7:6d:77:31:21:81:6e:b4:03:1b:e4:d4:ab:7b:3a:
39:95:c7:9d:e3:b7:1b:38:ec:5a:4d:30:be:14:37:27:b7:26:
0b:19:3b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:19:08 2025 by rpki-client