Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/e38b7540-8d02-3428-8b61-2305b0a7237b.roa
File: e38b7540-8d02-3428-8b61-2305b0a7237b.roa (raw, json)
Hash identifier: ufv7CebhpYl15yHUO3xFLWn5HsOUbwIeI9y8LTOvVF8=
Subject key identifier: 80:2A:83:29:AB:48:73:C6:7D:3F:72:05:BB:9D:9E:A2:EA:A2:24:87
Certificate issuer: /CN=174db496-399b-48c7-919e-3e6dfd4a5584
Certificate serial: 010D0C9F43285848A565F98C6CBB15160E565740
Authority key identifier: 9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/e38b7540-8d02-3428-8b61-2305b0a7237b.roa
Signing time: Fri 24 Jan 2025 02:00:39 +0000
ROA not before: Fri 24 Jan 2025 02:00:39 +0000
ROA not after: Thu 24 Apr 2025 01:00:39 +0000
asID: 40934
IP address blocks: 23.249.55.0/24 maxlen: 24
96.45.39.0/24 maxlen: 24
96.45.40.0/24 maxlen: 24
96.45.41.0/24 maxlen: 24
209.40.103.0/24 maxlen: 24
209.40.110.0/24 maxlen: 24
209.40.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a5:65:f9:8c:6c:bb:15:16:0e:56:57:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=174db496-399b-48c7-919e-3e6dfd4a5584
Validity
Not Before: Jan 24 02:00:39 2025 GMT
Not After : Apr 24 01:00:39 2025 GMT
Subject: CN=58072805-d19d-49bf-9e31-ce7f997c74d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f2:9a:9d:59:af:71:17:81:a9:95:f5:a1:e6:
89:d4:ba:c1:b1:90:42:7d:17:76:7f:0f:87:7b:88:
fa:2e:6a:e1:ea:c4:8f:1e:c1:a9:e3:ef:3d:b2:0a:
8c:69:9e:d9:05:a1:46:25:47:7e:c4:67:76:53:ca:
f1:7f:10:0d:d6:8c:29:a8:53:70:c7:39:ab:d6:96:
93:51:99:b8:b3:8d:68:12:f0:4b:3f:ec:33:d4:ff:
e0:29:ed:ef:70:7f:4e:70:d5:b7:76:ba:ce:fd:ac:
07:b7:c6:4c:81:4e:ce:87:17:68:66:f1:17:10:b8:
8a:b3:db:56:29:be:01:b3:ca:7a:44:9a:98:0c:8d:
39:dc:04:fb:2d:4f:3e:5c:f1:fb:bf:07:62:af:7a:
a2:71:c2:1a:c1:d1:70:86:36:15:49:2c:36:a7:7e:
b9:c0:4b:0f:25:9b:2e:e1:c4:3d:c4:3e:35:5f:85:
42:e4:a7:a1:3b:ef:b5:9b:62:c9:ff:ad:35:89:06:
ce:91:c2:23:78:e1:cf:8d:1b:9e:7f:89:36:f2:fd:
bb:03:fd:16:be:dc:54:cc:30:f3:05:c8:0a:fb:80:
aa:8b:5b:9e:17:8f:36:1a:ea:fc:fb:cc:b4:72:2a:
e5:8c:89:5b:e4:b6:5b:e4:eb:8d:cb:63:79:97:69:
3f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:2A:83:29:AB:48:73:C6:7D:3F:72:05:BB:9D:9E:A2:EA:A2:24:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/e38b7540-8d02-3428-8b61-2305b0a7237b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl
X509v3 Authority Key Identifier:
keyid:9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
sbgp-ipAddrBlock: critical
IPv4:
23.249.55.0/24
96.45.39.0-96.45.41.255
209.40.103.0/24
209.40.110.0/24
209.40.120.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:ca:75:94:47:0c:27:06:d5:89:88:66:e2:75:72:81:d3:71:
84:31:b8:8a:cc:cd:d4:2d:6b:c8:db:4d:4e:92:f0:5c:cd:32:
fd:4e:f5:16:e0:0d:a1:47:f7:22:25:c8:0e:47:ce:6d:ad:ae:
04:b2:95:03:68:de:3a:7e:e1:4d:be:c0:fd:bc:73:b3:d6:41:
06:c5:f6:a8:3c:e3:41:81:64:1c:27:53:60:22:fc:27:70:89:
30:2e:50:7f:c0:eb:4e:57:5d:e0:df:e2:20:fb:1f:9a:a6:25:
f7:9a:95:c4:a7:11:63:85:4f:c7:34:7d:e0:79:f1:77:da:e0:
58:95:05:d3:a6:04:09:c9:e6:be:04:31:d5:69:22:63:ca:04:
77:1b:9a:94:ed:d7:14:57:ac:46:31:3c:a4:bd:58:34:a1:d3:
1e:c6:ea:3a:bb:ad:a5:da:39:f5:b6:a7:12:8a:c1:18:5e:58:
af:92:0d:a9:0a:e5:7d:6b:d3:7c:23:92:ed:52:0a:36:93:15:
91:89:25:1b:b6:3d:8d:70:81:b8:1d:14:88:1b:bf:78:2e:fc:
dd:e8:a6:76:c4:25:4e:06:77:2f:88:91:8c:dd:8e:ea:e3:37:
3c:5a:9d:76:e2:67:2d:5e:27:8c:78:f3:4e:8e:28:bb:89:00:
2c:63:dc:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 05:29:53 2025 by rpki-client