Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d0e47806-215f-45bb-9c6b-3331009060f2/e3650678-6b91-38f2-8d17-5b3238ed291f.roa
File: e3650678-6b91-38f2-8d17-5b3238ed291f.roa (raw, json)
Hash identifier: NZX+V1uSyyCOBPzeeLCTjPL8g6ECz9erPuPxNH629Rc=
Subject key identifier: 01:0F:36:0C:49:D6:BB:39:61:B8:CC:ED:12:7B:EA:4A:50:81:66:52
Certificate issuer: /CN=d0e47806-215f-45bb-9c6b-3331009060f2
Certificate serial: 010D0C9F43285848C6E62F2CA5B5585870313BC0
Authority key identifier: 3E:78:E4:16:F0:F2:15:DD:AD:99:E9:30:4B:18:DA:CD:DC:8D:EA:AD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d0e47806-215f-45bb-9c6b-3331009060f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d0e47806-215f-45bb-9c6b-3331009060f2/e3650678-6b91-38f2-8d17-5b3238ed291f.roa
Signing time: Wed 05 Feb 2025 02:00:39 +0000
ROA not before: Wed 05 Feb 2025 02:00:39 +0000
ROA not after: Tue 06 May 2025 01:00:39 +0000
asID: 399759
IP address blocks: 206.168.52.0/22 maxlen: 22
206.168.52.0/24 maxlen: 24
206.168.53.0/24 maxlen: 24
206.168.54.0/24 maxlen: 24
206.168.55.0/24 maxlen: 24
216.73.168.0/22 maxlen: 22
216.73.168.0/24 maxlen: 24
216.73.169.0/24 maxlen: 24
216.73.170.0/24 maxlen: 24
216.73.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c6:e6:2f:2c:a5:b5:58:58:70:31:3b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0e47806-215f-45bb-9c6b-3331009060f2
Validity
Not Before: Feb 5 02:00:39 2025 GMT
Not After : May 6 01:00:39 2025 GMT
Subject: CN=04cc800b-86c1-409a-87a2-c48a48ad6ff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:52:a5:96:d0:39:3b:be:27:4a:5f:98:dc:84:
11:6c:23:d5:49:cb:a7:46:0f:22:e9:b6:47:0b:c8:
0c:3a:71:3f:8a:b9:09:55:9c:b0:f0:22:1a:25:75:
91:1b:cd:a8:91:52:28:5e:f9:6e:3b:35:b8:08:dc:
e0:35:2d:f9:99:2e:f9:6d:33:e1:c8:6b:11:89:b4:
d5:ba:a8:60:bf:2b:34:85:46:4b:99:09:74:70:3c:
b9:6f:0f:f0:78:84:73:ac:d6:46:c9:9a:8f:5a:29:
9d:ae:6e:73:bc:83:4f:9b:6b:33:6c:a5:f4:33:5b:
87:b8:df:48:b4:c3:16:ee:25:b9:5b:db:b4:29:88:
14:57:a3:bf:44:70:0c:f8:ae:ef:27:0c:b2:2e:7d:
2f:bb:95:08:36:7b:4e:3c:12:cc:18:17:68:6d:12:
dc:39:86:e7:38:49:b5:84:89:8d:c0:41:6a:5e:cd:
c1:29:73:0e:30:23:93:33:76:87:78:6c:3c:16:6d:
e2:47:47:50:f0:aa:b4:35:ee:ad:4a:c1:ca:89:05:
cf:dd:95:36:cb:35:d1:e4:32:26:d7:54:b8:6b:ee:
c2:7c:8e:90:05:45:b8:ac:9c:52:65:db:90:ca:0b:
f3:fb:5a:a6:5e:ac:65:ed:8d:9e:fa:67:2b:79:c7:
0f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:0F:36:0C:49:D6:BB:39:61:B8:CC:ED:12:7B:EA:4A:50:81:66:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d0e47806-215f-45bb-9c6b-3331009060f2/e3650678-6b91-38f2-8d17-5b3238ed291f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d0e47806-215f-45bb-9c6b-3331009060f2/d0e47806-215f-45bb-9c6b-3331009060f2.crl
X509v3 Authority Key Identifier:
keyid:3E:78:E4:16:F0:F2:15:DD:AD:99:E9:30:4B:18:DA:CD:DC:8D:EA:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d0e47806-215f-45bb-9c6b-3331009060f2.cer
sbgp-ipAddrBlock: critical
IPv4:
206.168.52.0/22
216.73.168.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:ed:35:47:a3:a5:e3:9f:cc:86:72:bb:29:5c:ca:b7:d8:48:
0a:e0:8e:3e:b1:49:1c:e5:18:ec:d1:0b:ec:e4:8c:af:f4:47:
49:9d:52:f6:a2:f7:ae:61:ce:f0:ca:89:11:31:3d:ee:90:f8:
2d:30:df:29:5f:06:b4:93:f5:74:62:0a:de:d2:e7:c2:a2:bb:
3c:94:bd:41:54:ed:e7:32:ae:76:6f:aa:f3:af:b2:3a:cb:e0:
7a:e5:85:b0:c0:5a:b7:a4:6b:94:2c:ba:be:55:0c:3d:fc:17:
b9:9e:47:2b:a8:17:54:3b:2b:06:89:36:92:73:d5:99:51:f0:
17:c8:e3:ab:67:be:e3:ae:46:0c:1d:d2:36:49:47:e5:62:4c:
eb:b1:b8:8c:6a:0c:32:91:5d:e8:e0:ce:92:25:4b:3d:f1:bc:
fc:be:46:56:b9:92:39:12:03:9e:30:85:06:1c:8b:83:c0:ac:
59:db:91:02:67:7f:59:36:32:3f:69:0a:4b:09:92:64:2a:e7:
f7:20:09:c0:90:4f:fa:99:8a:13:c0:b4:48:b3:ac:93:fb:1e:
d8:1a:54:2e:f3:4f:3a:c7:e6:66:53:30:47:d3:5f:88:b7:60:
f3:f4:0b:17:74:db:cb:45:3a:94:4f:44:be:9f:ec:6e:b1:19:
d3:fe:c9:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:14:37 2025 by rpki-client