Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/45df54ec-090c-4c1e-aae6-b1ddb295a796/9fa88fe6-a684-32ce-9a5e-753d12d1ae98.roa
File: 9fa88fe6-a684-32ce-9a5e-753d12d1ae98.roa (raw, json)
Hash identifier: XTdl+sVPRqyLTMj5RmA+6GhJt9VM76aPDfZGuKswPpg=
Subject key identifier: 38:0E:4A:6E:3B:BA:29:DB:B1:19:75:D4:37:B4:12:A4:4D:CB:CA:B7
Certificate issuer: /CN=45df54ec-090c-4c1e-aae6-b1ddb295a796
Certificate serial: 010D0C9F432858490B4C2718718844E18883F140
Authority key identifier: EA:ED:8D:83:88:5E:EB:A0:BC:CD:7F:2D:B2:44:DC:63:69:AC:6D:E5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/45df54ec-090c-4c1e-aae6-b1ddb295a796.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/45df54ec-090c-4c1e-aae6-b1ddb295a796/9fa88fe6-a684-32ce-9a5e-753d12d1ae98.roa
Signing time: Sat 01 Mar 2025 14:00:52 +0000
ROA not before: Sat 01 Mar 2025 14:00:52 +0000
ROA not after: Fri 30 May 2025 13:00:52 +0000
asID: 19045
IP address blocks: 23.169.64.0/24 maxlen: 24
23.169.65.0/24 maxlen: 24
50.21.112.0/20 maxlen: 20
104.37.248.0/22 maxlen: 22
139.60.64.0/21 maxlen: 21
160.223.184.0/21 maxlen: 21
199.30.184.0/22 maxlen: 22
199.200.104.0/22 maxlen: 22
206.251.40.0/21 maxlen: 21
207.204.56.0/21 maxlen: 21
208.54.224.0/20 maxlen: 20
2607:2e80::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0b:4c:27:18:71:88:44:e1:88:83:f1:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45df54ec-090c-4c1e-aae6-b1ddb295a796
Validity
Not Before: Mar 1 14:00:52 2025 GMT
Not After : May 30 13:00:52 2025 GMT
Subject: CN=38baf6f3-9dc7-4486-92b8-00ac6844c6dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d6:cb:3d:39:64:ca:5f:2b:31:7c:0d:c3:5a:
a9:c3:c8:89:32:d9:88:8e:f3:90:07:f7:63:05:80:
35:22:80:e3:e2:f2:02:88:f8:b3:98:14:c2:d0:b3:
9b:b8:ba:b5:2d:3f:c6:01:8d:82:bb:14:d7:35:5b:
2a:8b:aa:5f:01:c3:90:c5:4d:5d:91:b2:d9:1e:93:
ca:9b:c0:2a:d1:90:8c:06:1f:37:8b:cb:da:57:34:
20:d9:3b:08:50:01:65:26:e6:30:34:88:36:4f:40:
92:46:b0:ed:cd:73:84:05:ba:1b:70:d3:63:ef:8e:
4f:39:44:49:bd:8d:2a:b0:32:b9:8c:0e:5f:18:1b:
a7:eb:52:98:39:c4:a5:22:89:c2:8d:70:63:dc:56:
47:6c:e2:ff:52:23:ae:8f:90:f5:64:58:19:40:8e:
e0:22:e2:14:c9:e0:3c:ab:ee:9c:d4:32:78:d1:d9:
5b:e2:40:a0:0f:64:65:b9:2c:05:6d:d6:e9:b8:57:
f9:e8:0d:d0:09:a5:20:10:4a:0b:01:87:0c:40:3a:
81:fd:11:2e:59:e1:9d:c2:42:9d:de:4a:e3:6e:cf:
2d:e0:cb:91:40:a8:4f:29:c5:c1:fb:1d:69:f9:d2:
d6:bf:5a:68:f3:b9:b5:90:d3:e3:28:3a:eb:d2:eb:
b1:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:0E:4A:6E:3B:BA:29:DB:B1:19:75:D4:37:B4:12:A4:4D:CB:CA:B7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/45df54ec-090c-4c1e-aae6-b1ddb295a796/9fa88fe6-a684-32ce-9a5e-753d12d1ae98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/45df54ec-090c-4c1e-aae6-b1ddb295a796/45df54ec-090c-4c1e-aae6-b1ddb295a796.crl
X509v3 Authority Key Identifier:
keyid:EA:ED:8D:83:88:5E:EB:A0:BC:CD:7F:2D:B2:44:DC:63:69:AC:6D:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/45df54ec-090c-4c1e-aae6-b1ddb295a796.cer
sbgp-ipAddrBlock: critical
IPv4:
23.169.64.0/23
50.21.112.0/20
104.37.248.0/22
139.60.64.0/21
160.223.184.0/21
199.30.184.0/22
199.200.104.0/22
206.251.40.0/21
207.204.56.0/21
208.54.224.0/20
IPv6:
2607:2e80::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:94:a4:9b:72:3e:b7:0d:ee:f2:b9:50:12:6d:10:a1:15:a1:
a1:b4:68:1a:44:82:d4:ae:2b:49:41:f1:8e:eb:93:36:96:9f:
e7:2d:6d:a1:24:d8:a8:8e:50:4c:a3:74:1b:8a:77:f1:c2:ab:
43:fe:66:7b:0e:70:2c:5e:27:b9:65:f4:48:c0:8c:61:ea:68:
4c:06:4e:c4:49:bc:a2:6f:bd:ae:13:5f:0d:89:41:d6:ed:0b:
8b:6f:b7:42:65:d5:81:f9:97:bc:83:93:7c:fb:4c:02:a2:40:
e9:41:f1:95:3e:6d:29:eb:44:d9:5b:37:c1:ab:ba:2c:50:23:
82:6e:c6:35:4d:27:d3:06:05:33:8b:97:57:24:1a:ba:11:20:
cb:f5:4c:63:e6:88:0a:ac:b4:c2:5b:04:c0:43:cd:86:0a:b4:
f8:f8:7d:6e:7d:bd:76:04:a6:24:e7:b1:26:a2:f4:ad:07:6c:
f3:36:69:88:8f:64:63:25:4c:57:03:90:ef:80:9d:87:6e:86:
fc:6e:aa:94:16:db:60:ac:4e:1a:bb:06:01:d3:e3:94:e0:11:
65:c7:6e:52:45:56:95:21:86:4a:ef:2c:d8:5a:01:99:ad:ce:
69:16:af:72:d2:20:77:78:fc:cf:6b:58:3c:f9:bc:34:1e:f4:
8f:49:1b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:54:33 2025 by rpki-client