Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/43c90aa6-3df3-3a27-8430-fe1aa97bd07a.roa
File: 43c90aa6-3df3-3a27-8430-fe1aa97bd07a.roa (raw, json)
Hash identifier: EnKcod1nWoK0t9DyP+ehQMzoa1iI2SYoLxusTaRr+2Q=
Subject key identifier: 6B:19:9B:70:0B:8B:45:49:79:66:A7:42:A3:43:3A:F1:1D:FA:68:CC
Certificate issuer: /CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345
Certificate serial: 010D0C9F432858489BA0B0488E525364F1226880
Authority key identifier: D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/43c90aa6-3df3-3a27-8430-fe1aa97bd07a.roa
Signing time: Mon 20 Jan 2025 14:00:51 +0000
ROA not before: Mon 20 Jan 2025 14:00:51 +0000
ROA not after: Sun 20 Apr 2025 13:00:51 +0000
asID: 138699
IP address blocks: 71.18.248.0/24 maxlen: 24
71.18.249.0/24 maxlen: 24
71.18.250.0/24 maxlen: 24
71.18.251.0/24 maxlen: 24
71.18.252.0/24 maxlen: 24
71.18.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9b:a0:b0:48:8e:52:53:64:f1:22:68:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345
Validity
Not Before: Jan 20 14:00:51 2025 GMT
Not After : Apr 20 13:00:51 2025 GMT
Subject: CN=7fb4644a-e938-4c6f-a17a-1c55079e1c59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ed:f0:2b:e7:0d:84:12:c1:14:c9:ed:e7:cb:
35:f4:08:ff:9f:14:70:d7:9f:f0:d2:0e:42:90:d6:
f7:55:81:a1:2a:22:db:e8:80:02:45:77:cd:4f:cb:
ed:d2:f3:05:55:9d:b2:5c:5d:cc:00:f2:44:47:15:
2f:c5:18:c0:cc:05:b0:33:cc:b3:49:21:31:6b:91:
78:00:4f:a1:10:b4:d2:ff:b4:5a:41:87:c5:6f:cb:
a7:f2:78:ab:d2:15:7d:d2:b3:cf:45:4d:90:cb:36:
a1:62:30:39:a0:5c:82:ef:9e:b5:71:92:8a:7a:d6:
37:a8:8c:81:00:55:bf:fb:0e:6c:5c:ea:3f:e1:87:
b6:90:d9:25:4c:29:5b:fc:92:22:b5:42:fc:03:c8:
6f:d0:2b:d3:a1:00:fe:4f:be:93:2c:f0:31:e8:8c:
0c:ba:81:7d:29:d8:fb:2c:57:23:00:56:33:16:9c:
97:35:07:64:04:7a:a4:71:1f:5e:c6:6d:ea:bb:1c:
c2:0f:92:b7:90:1a:5d:5e:5d:15:e4:09:81:88:83:
0c:68:3d:01:00:aa:ea:f7:0d:90:06:52:85:91:3b:
42:b2:3f:c8:a8:9c:1e:92:1c:29:77:d0:bc:eb:a2:
f9:ed:64:b8:1f:21:b7:99:75:d0:21:82:65:21:b2:
7e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:19:9B:70:0B:8B:45:49:79:66:A7:42:A3:43:3A:F1:1D:FA:68:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/43c90aa6-3df3-3a27-8430-fe1aa97bd07a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl
X509v3 Authority Key Identifier:
keyid:D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer
sbgp-ipAddrBlock: critical
IPv4:
71.18.248.0-71.18.253.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:fb:d3:e4:aa:a6:74:d1:96:0c:41:e7:fb:5b:f1:6a:7d:e1:
a7:aa:41:08:79:f3:27:d8:c6:c4:b6:5d:bc:b6:b3:ee:ae:6b:
ee:ae:7b:96:1e:92:e0:ac:de:86:90:fc:b7:84:16:5d:3b:f0:
e4:df:ff:c4:30:06:9b:18:bb:4f:9f:30:01:8d:c7:29:2a:56:
7c:93:cc:b1:c9:f5:a7:36:0a:c0:0c:0a:1a:66:b4:a8:da:b8:
47:72:b6:17:de:94:8e:e7:38:10:01:c6:b3:63:88:23:6e:b0:
e8:3d:a4:8f:7c:ce:99:15:8d:de:c5:cf:ae:aa:98:ca:bc:92:
66:dd:b7:94:00:d2:c6:05:20:25:fb:e5:85:8c:d0:16:48:e3:
e9:27:bd:77:58:c6:3b:57:5e:85:b4:3c:65:e3:bf:ce:c3:d4:
d3:ac:66:a2:17:5c:37:f0:99:ad:c8:b2:7d:2b:9a:b0:37:1a:
1e:41:09:22:4f:a5:41:2c:61:ab:63:fc:68:17:15:4d:49:fc:
31:d9:57:84:2d:4c:53:77:40:b1:d2:63:90:b7:9a:b6:6e:9d:
59:08:ff:5b:3d:9c:78:8a:02:d0:0f:81:41:a0:9c:cb:2b:70:
81:45:ab:de:fb:ba:ba:e1:78:c1:84:8d:3d:6c:48:32:72:1a:
b7:10:c5:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 06:30:21 2025 by rpki-client