Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/40b83e77-fff2-31a5-9cfd-1aa1389fca99.roa
File: 40b83e77-fff2-31a5-9cfd-1aa1389fca99.roa (raw, json)
Hash identifier: 0K82Oe5XcN8/G4fRmUu1jF/GAdQCeXpehoMIzK8QGhU=
Subject key identifier: CA:1B:C7:AA:FC:DB:A5:44:18:B8:72:6E:D1:15:EA:E5:02:B7:C1:24
Certificate issuer: /CN=d43161e4-dac1-407b-8f16-55e6ef100d0a
Certificate serial: 010D0C9F43285848854B3FEDC588DF626F540FC0
Authority key identifier: 0F:AD:FA:40:22:6B:5D:BA:CB:0D:38:35:36:8C:86:20:CC:D9:5E:B3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/40b83e77-fff2-31a5-9cfd-1aa1389fca99.roa
Signing time: Sun 12 Jan 2025 14:00:53 +0000
ROA not before: Sun 12 Jan 2025 14:00:53 +0000
ROA not after: Sat 12 Apr 2025 13:00:53 +0000
asID: 45102
IP address blocks: 47.52.0.0/16 maxlen: 24
47.56.0.0/16 maxlen: 24
47.57.0.0/16 maxlen: 24
47.74.0.0/16 maxlen: 24
47.75.0.0/16 maxlen: 24
47.76.0.0/16 maxlen: 24
47.77.0.0/16 maxlen: 24
47.78.0.0/16 maxlen: 24
47.79.0.0/16 maxlen: 24
47.80.0.0/16 maxlen: 24
47.81.0.0/16 maxlen: 24
47.82.0.0/16 maxlen: 24
47.83.0.0/16 maxlen: 24
47.84.0.0/16 maxlen: 24
47.85.0.0/16 maxlen: 24
47.86.0.0/16 maxlen: 24
47.87.0.0/16 maxlen: 24
47.88.0.0/16 maxlen: 24
47.89.0.0/16 maxlen: 24
47.90.0.0/16 maxlen: 24
47.91.0.0/16 maxlen: 24
47.235.0.0/16 maxlen: 24
47.236.0.0/16 maxlen: 24
47.237.0.0/16 maxlen: 24
47.238.0.0/16 maxlen: 24
47.239.0.0/16 maxlen: 24
47.240.0.0/16 maxlen: 24
47.241.0.0/16 maxlen: 24
47.242.0.0/16 maxlen: 24
47.243.0.0/16 maxlen: 24
47.244.0.0/16 maxlen: 24
47.245.0.0/16 maxlen: 24
47.246.0.0/16 maxlen: 24
47.250.0.0/16 maxlen: 24
47.251.0.0/16 maxlen: 24
47.252.0.0/16 maxlen: 24
47.253.0.0/16 maxlen: 24
47.254.0.0/16 maxlen: 24
72.254.0.0/16 maxlen: 24
139.95.0.0/16 maxlen: 24
147.139.0.0/16 maxlen: 24
155.102.0.0/16 maxlen: 24
163.181.0.0/16 maxlen: 24
198.11.128.0/18 maxlen: 24
205.204.96.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:85:4b:3f:ed:c5:88:df:62:6f:54:0f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d43161e4-dac1-407b-8f16-55e6ef100d0a
Validity
Not Before: Jan 12 14:00:53 2025 GMT
Not After : Apr 12 13:00:53 2025 GMT
Subject: CN=7613c39c-fd9f-49df-83fb-bcddf9c70d18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:08:46:b7:1c:3f:89:e0:cf:03:78:f7:81:02:
05:e2:a1:7c:19:0f:87:48:d7:85:ba:68:fe:41:1f:
1b:23:05:0b:bb:51:d2:46:11:03:39:ec:6a:73:d7:
16:4b:e5:12:53:4c:0f:c9:83:01:ab:f7:5d:9e:fd:
8b:b1:88:93:63:99:af:c7:bb:b5:01:1f:5e:31:84:
c8:2c:e6:34:ea:70:c3:5c:b4:4a:0a:f1:19:4a:5a:
3e:45:38:1a:c6:bd:38:fc:b0:ac:01:13:92:ac:0a:
f3:10:e1:bd:b2:cf:42:55:c9:41:e4:08:d9:59:c7:
2d:6b:54:cf:e2:fb:62:5f:a1:48:08:ca:be:23:df:
0a:e9:e4:8b:90:2a:56:c0:0a:a1:b8:64:c5:12:df:
22:91:9c:64:43:a4:7a:68:f0:84:23:7c:62:4a:3d:
14:c0:cc:29:8f:c3:7d:f1:f6:8e:8b:5b:2d:ba:7d:
f8:6c:d1:5f:00:7c:03:2e:2b:ba:b0:e7:a6:7e:bf:
0f:43:5f:aa:b4:8d:f2:88:92:c4:74:3a:da:51:78:
10:3f:75:7a:bf:f7:2c:46:c5:14:74:88:8d:15:23:
7e:fa:69:b1:0c:21:6c:f2:6e:15:a3:e5:50:19:58:
78:cd:a8:97:47:7e:f1:f7:e0:5d:9d:65:d6:4d:91:
02:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:1B:C7:AA:FC:DB:A5:44:18:B8:72:6E:D1:15:EA:E5:02:B7:C1:24
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/40b83e77-fff2-31a5-9cfd-1aa1389fca99.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/d43161e4-dac1-407b-8f16-55e6ef100d0a.crl
X509v3 Authority Key Identifier:
keyid:0F:AD:FA:40:22:6B:5D:BA:CB:0D:38:35:36:8C:86:20:CC:D9:5E:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a.cer
sbgp-ipAddrBlock: critical
IPv4:
47.52.0.0/16
47.56.0.0/15
47.74.0.0-47.91.255.255
47.235.0.0-47.246.255.255
47.250.0.0-47.254.255.255
72.254.0.0/16
139.95.0.0/16
147.139.0.0/16
155.102.0.0/16
163.181.0.0/16
198.11.128.0/18
205.204.96.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:e9:83:fe:22:e4:75:7a:6c:dc:22:76:ea:f2:16:4e:5c:7e:
dc:58:80:b1:7e:34:b5:5b:e8:d3:83:d2:55:2e:68:38:83:f6:
56:0d:da:db:ea:96:b5:c5:67:ff:ab:90:ec:36:7a:71:20:08:
dc:32:a4:bc:7f:a6:08:c5:b4:51:b0:2e:e9:42:12:69:99:67:
22:6a:1d:e0:10:54:8f:4b:eb:67:d9:c0:d6:de:d9:f7:95:16:
3f:53:69:f8:37:44:40:ac:f3:2f:63:94:25:b2:90:41:f7:65:
ae:b9:6b:22:11:bc:f7:c8:95:b7:02:03:05:88:02:21:8e:c2:
46:14:e4:35:7a:18:14:fa:71:42:d6:5e:de:ab:91:da:7a:ee:
30:3f:e2:78:49:b6:10:7e:43:6f:c1:0e:24:e8:95:ec:c2:e8:
3a:c3:f9:2a:98:59:bd:e9:a1:83:54:4e:d5:de:86:d3:79:30:
94:95:b0:04:01:6a:1e:15:e3:8d:83:09:70:f8:81:25:6a:a6:
e1:b6:88:fd:99:f4:52:ba:94:25:67:63:c6:5e:df:a6:9f:8f:
52:d6:a8:69:f9:d0:b6:a7:24:fe:f5:0a:a0:68:d5:ce:ba:8f:
26:52:34:09:6e:bd:5c:af:34:e6:69:a6:32:82:98:45:78:0b:
37:93:27:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:18:27 2025 by rpki-client