Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/4ad5abf6-6e01-3b5c-86a8-77c4b389fc78.roa
File: 4ad5abf6-6e01-3b5c-86a8-77c4b389fc78.roa (raw, json)
Hash identifier: WLUhAxBH1yM2QPzBB/r9j9SR8VKxRue/0XWMgxPiO1U=
Subject key identifier: 90:2A:00:7D:04:B5:65:58:D0:19:26:EF:76:B1:A5:C2:4C:72:ED:A1
Certificate issuer: /CN=2627756a-b322-49e6-941e-ed30e9ab9eae
Certificate serial: 010D0C9F43285848E2D10FA38A61DF9C93D19480
Authority key identifier: 84:40:C9:06:5E:2A:AA:D3:1F:26:70:9B:94:49:14:CF:72:9A:9C:66
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/4ad5abf6-6e01-3b5c-86a8-77c4b389fc78.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 46489
IP address blocks: 23.160.0.0/24 maxlen: 24
99.181.64.0/18 maxlen: 24
192.16.64.0/21 maxlen: 24
192.108.239.0/24 maxlen: 24
199.9.248.0/21 maxlen: 24
2620:f8::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:0f:a3:8a:61:df:9c:93:d1:94:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2627756a-b322-49e6-941e-ed30e9ab9eae
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=767a8100-eaff-418b-81d2-1d6eff408df1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:df:7d:32:be:03:b9:ac:8d:08:33:58:f0:01:
56:32:30:0a:22:f4:00:be:a3:de:fe:03:c2:ea:4f:
fa:8f:db:64:39:ce:4b:63:d5:4d:34:40:70:ef:4f:
99:6a:07:d0:20:f2:b6:1d:11:76:e9:6d:78:89:d9:
94:26:dc:3b:a9:7d:be:26:80:33:fc:b7:f1:e4:6c:
f6:7e:ff:76:24:e1:d7:f8:36:fa:e0:c5:1d:c3:70:
08:fd:58:09:44:26:31:87:b4:47:fd:88:0c:d1:1e:
a1:cd:7a:ed:5e:6e:9d:c0:8b:7a:3a:2b:1d:a5:ce:
ab:1a:b5:93:80:38:18:e9:37:26:c7:b6:2b:1b:74:
58:d3:f1:ae:85:30:08:3a:91:1e:e4:39:65:74:cd:
fc:32:5b:a4:fb:53:77:84:79:01:a6:cb:fc:22:65:
22:32:b5:27:d3:91:7b:8b:39:9d:7f:d6:8b:cf:94:
51:db:30:ec:aa:04:d4:e8:8a:b0:8a:35:56:da:fc:
81:16:cf:a5:1d:b9:67:49:d4:5d:54:a6:e9:2e:53:
e6:10:4b:7f:8c:18:2f:43:ea:99:bd:5e:68:f8:ff:
bd:b2:24:57:ee:b2:8e:91:30:24:c7:53:e4:b0:d1:
80:b5:b5:f3:99:9b:bf:d7:5e:1d:ad:cc:e0:2a:43:
b8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:2A:00:7D:04:B5:65:58:D0:19:26:EF:76:B1:A5:C2:4C:72:ED:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/4ad5abf6-6e01-3b5c-86a8-77c4b389fc78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/2627756a-b322-49e6-941e-ed30e9ab9eae.crl
X509v3 Authority Key Identifier:
keyid:84:40:C9:06:5E:2A:AA:D3:1F:26:70:9B:94:49:14:CF:72:9A:9C:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae.cer
sbgp-ipAddrBlock: critical
IPv4:
23.160.0.0/24
99.181.64.0/18
192.16.64.0/21
192.108.239.0/24
199.9.248.0/21
IPv6:
2620:f8::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:3d:56:6a:2e:8d:04:60:a9:80:d6:93:0d:33:04:34:80:48:
32:34:8e:49:f6:06:85:ce:d8:18:82:c9:d0:de:35:34:93:a2:
8b:4d:a2:5c:1c:9d:19:87:d0:36:93:b6:1c:0e:c0:d3:42:e5:
8e:81:a2:46:d5:d8:19:20:54:53:d1:59:8e:17:d9:54:02:9c:
3b:ca:74:36:69:fa:6b:e6:30:f6:90:7e:e1:9c:4a:4f:8c:69:
0c:3b:f9:5e:37:6b:5f:aa:85:79:d3:84:09:42:71:3a:06:07:
9a:c5:f7:e5:f6:40:de:26:d1:28:c5:8e:69:14:6d:6f:44:99:
57:c4:f6:d7:4c:49:9e:4e:f3:12:83:b4:10:af:24:06:9f:bf:
28:ae:bc:4f:6c:14:f7:ab:29:8b:99:10:92:70:c1:a7:3d:fd:
ec:c3:50:2d:d6:84:f8:d2:ac:41:af:8b:a2:f5:24:10:7b:f8:
20:51:0d:e3:fa:60:ed:09:7a:91:b1:83:4c:81:17:8f:b0:72:
fd:21:05:b8:19:cb:8a:05:db:d3:60:74:72:4d:c9:36:c3:40:
cd:04:c8:93:c9:40:b1:cb:ec:c9:3d:bf:0a:7e:56:d7:30:c8:
66:24:a6:00:6d:3d:7d:3b:57:e3:1a:b9:48:6b:fd:f1:6a:3e:
28:87:d9:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:09:48 2025 by rpki-client