Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3/fe196e76-1d06-3092-a96a-07322f606f5e.roa
File: fe196e76-1d06-3092-a96a-07322f606f5e.roa (raw, json)
Hash identifier: MgHNyw53+W8xP4W5Ru9aRgxAst/xNpzwzJ/v1n871os=
Subject key identifier: 8D:C2:0C:D4:72:A5:4D:46:74:EF:3A:D4:68:A7:9B:E7:0F:94:39:22
Certificate issuer: /CN=d0aed758-847b-4853-9fce-f0451b5fa2b3
Certificate serial: 010D0C9F432858483E1AAB6FD5C46B2970303A00
Authority key identifier: 26:29:49:3F:F3:82:BA:92:FA:C8:2C:6F:AB:48:07:F3:65:25:5C:27
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3/fe196e76-1d06-3092-a96a-07322f606f5e.roa
Signing time: Wed 18 Dec 2024 02:00:39 +0000
ROA not before: Wed 18 Dec 2024 02:00:39 +0000
ROA not after: Tue 18 Mar 2025 01:00:39 +0000
asID: 54643
IP address blocks: 23.111.64.0/21 maxlen: 22
23.111.72.0/22 maxlen: 23
66.85.28.0/22 maxlen: 23
67.231.16.0/20 maxlen: 23
104.36.148.0/22 maxlen: 23
104.193.172.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3e:1a:ab:6f:d5:c4:6b:29:70:30:3a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0aed758-847b-4853-9fce-f0451b5fa2b3
Validity
Not Before: Dec 18 02:00:39 2024 GMT
Not After : Mar 18 01:00:39 2025 GMT
Subject: CN=6ccf70ba-069a-4304-bcdf-5b0770f0698f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7e:1d:b6:c6:31:e4:ff:52:33:26:72:1f:90:
ad:85:3d:4d:6a:3e:78:82:a5:57:2a:84:03:76:30:
84:69:28:f6:4d:eb:56:75:e7:c7:cd:ba:92:0c:e8:
45:61:2d:53:03:a3:86:4d:04:f0:86:e9:83:dd:19:
d5:ee:0c:b9:52:c3:32:4f:0d:12:c2:c4:cf:2a:28:
4e:e9:c6:f3:99:7b:c8:c7:1c:79:f6:91:ef:b6:46:
64:15:1a:0d:d4:7a:e2:bd:4e:e9:1a:f6:3a:c1:51:
4e:dc:9f:49:4a:0c:3e:6a:23:69:e8:6d:dd:1f:09:
77:71:52:77:b0:ec:40:07:c1:5f:cc:76:cb:22:71:
c6:63:37:51:47:80:69:73:92:af:a4:62:a0:6a:c1:
58:00:0a:44:2c:75:b0:0a:ca:ab:e4:d8:28:55:a8:
57:d4:1a:25:79:63:fa:32:b6:47:c0:4e:6b:c6:32:
41:04:21:fa:61:08:c6:e9:0f:46:90:a0:10:59:c0:
1f:b9:9a:51:d6:f0:4a:83:3c:4b:f3:a6:db:64:10:
61:ed:36:be:13:61:57:e1:b5:e1:d0:bb:88:7e:89:
e2:7c:53:b5:93:d6:be:00:4b:cf:5e:4d:12:53:b9:
94:aa:ab:14:5b:c3:ff:4c:b1:a7:88:66:43:0c:d7:
71:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:C2:0C:D4:72:A5:4D:46:74:EF:3A:D4:68:A7:9B:E7:0F:94:39:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3/fe196e76-1d06-3092-a96a-07322f606f5e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3/d0aed758-847b-4853-9fce-f0451b5fa2b3.crl
X509v3 Authority Key Identifier:
keyid:26:29:49:3F:F3:82:BA:92:FA:C8:2C:6F:AB:48:07:F3:65:25:5C:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3.cer
sbgp-ipAddrBlock: critical
IPv4:
23.111.64.0-23.111.75.255
66.85.28.0/22
67.231.16.0/20
104.36.148.0/22
104.193.172.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:1e:76:79:8e:34:bd:51:27:c6:40:58:be:5f:b1:0d:8e:31:
9f:ff:a4:bf:9e:0c:67:18:c7:97:28:b1:6c:eb:ea:ff:a6:39:
4e:68:da:8a:15:fb:b2:df:8b:a3:56:93:5f:90:46:47:ff:d8:
2a:ac:94:86:56:3e:e9:ca:62:a5:a5:0f:ac:87:ee:cd:e1:82:
e5:e6:a1:97:ad:56:e8:3f:18:77:aa:0c:40:d2:3a:7c:79:18:
65:9c:ef:1d:7f:7c:85:ef:1f:66:57:3b:1e:1d:88:b2:b8:86:
62:10:83:fe:9f:61:57:f6:89:ab:24:33:69:1a:f1:c0:c2:7f:
02:65:fa:4c:8f:75:ba:db:d7:f0:1c:c2:42:b6:ec:93:1f:1c:
9e:eb:48:0d:8b:e3:32:6e:16:00:6e:7b:d8:51:ab:d9:be:72:
04:d4:b6:23:38:48:92:39:4e:40:38:b5:c6:8c:fb:c4:bf:db:
7c:b8:79:ae:00:09:42:9e:88:83:39:a8:08:e6:73:2f:c9:74:
87:40:b0:83:01:ea:3b:f1:00:0d:3b:92:1f:74:91:45:40:7e:
f1:b9:42:df:ad:d5:4c:e0:49:b5:54:6f:1d:52:e6:c0:e5:f1:
e7:f2:2e:a9:0d:c6:9c:05:51:d2:59:45:4d:97:cf:71:85:f6:
09:b8:73:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:10:55 2025 by rpki-client