Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/290a97eb-7241-31b2-bc68-434e03367db9.roa
File: 290a97eb-7241-31b2-bc68-434e03367db9.roa (raw, json)
Hash identifier: k09NSdiW4b4Ge6ajBR2Jj8SHs9Gg3gAGy3RjjxvkEAA=
Subject key identifier: 30:04:B2:E2:44:E3:52:AA:89:61:75:59:38:1E:E6:C0:31:E7:52:65
Certificate issuer: /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
Certificate serial: 010D0C9F432858489075F411A612B22B6180BE00
Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/290a97eb-7241-31b2-bc68-434e03367db9.roa
Signing time: Thu 16 Jan 2025 14:00:50 +0000
ROA not before: Thu 16 Jan 2025 14:00:50 +0000
ROA not after: Wed 16 Apr 2025 13:00:50 +0000
asID: 63062
IP address blocks: 66.82.230.0/24 maxlen: 24
66.82.231.0/24 maxlen: 24
66.82.232.0/24 maxlen: 24
66.82.236.0/24 maxlen: 24
66.82.237.0/24 maxlen: 24
66.82.242.0/24 maxlen: 24
66.82.244.0/24 maxlen: 24
67.47.19.0/24 maxlen: 24
67.47.20.0/24 maxlen: 24
67.47.21.0/24 maxlen: 24
67.47.22.0/24 maxlen: 24
67.142.156.0/24 maxlen: 24
67.142.187.0/24 maxlen: 24
67.142.192.0/24 maxlen: 24
67.142.203.0/24 maxlen: 24
67.142.204.0/24 maxlen: 24
67.142.243.0/24 maxlen: 24
67.142.251.0/24 maxlen: 24
67.143.99.0/24 maxlen: 24
72.169.71.0/24 maxlen: 24
72.169.73.0/24 maxlen: 24
72.169.215.0/24 maxlen: 24
72.171.6.0/24 maxlen: 24
72.171.11.0/24 maxlen: 24
72.171.14.0/24 maxlen: 24
72.171.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:90:75:f4:11:a6:12:b2:2b:61:80:be:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
Validity
Not Before: Jan 16 14:00:50 2025 GMT
Not After : Apr 16 13:00:50 2025 GMT
Subject: CN=013197e0-e5b1-4799-8841-b696005f1b86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e5:15:66:cd:52:6c:a7:9a:2d:6c:7f:62:40:
d3:7e:fa:62:62:ab:3b:da:33:12:ee:0f:dc:9a:4b:
42:6f:26:b0:03:da:6f:74:01:d4:83:af:82:9e:c6:
f0:cd:3c:aa:da:2e:13:66:7a:25:67:0d:20:8d:16:
d2:f4:d1:7d:c4:bf:f8:c0:44:8d:d5:34:d2:24:c7:
ac:0b:a7:92:c5:3a:fc:df:e6:7e:a2:59:72:bd:d5:
69:a4:0a:4a:26:d1:86:9a:21:92:9d:27:d1:12:72:
b2:b2:a3:8d:70:3d:55:96:50:de:37:af:30:a3:b2:
30:84:cd:32:11:d4:9a:60:26:9a:c7:bc:f3:92:fd:
82:0b:e2:a8:d8:7d:43:2b:0c:93:c1:9d:f9:20:7e:
46:07:a1:7d:99:cd:42:34:55:b3:52:22:f4:97:23:
eb:31:b9:47:94:b1:63:d6:cb:05:08:4e:40:da:7d:
eb:b9:e4:38:3d:41:e1:ac:64:de:0f:5e:0e:af:a7:
33:3e:fd:b4:f8:38:e0:3c:92:c6:9f:d3:bb:d9:8c:
d0:9d:4c:26:65:92:f3:92:4e:ce:dd:43:6a:7c:65:
b8:07:7e:5c:ec:d6:39:a8:d2:8d:31:1e:db:6d:31:
01:8c:0b:dc:3d:a6:c6:ee:f1:da:e1:17:e2:0c:3d:
fd:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:04:B2:E2:44:E3:52:AA:89:61:75:59:38:1E:E6:C0:31:E7:52:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/290a97eb-7241-31b2-bc68-434e03367db9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl
X509v3 Authority Key Identifier:
keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
sbgp-ipAddrBlock: critical
IPv4:
66.82.230.0-66.82.232.255
66.82.236.0/23
66.82.242.0/24
66.82.244.0/24
67.47.19.0-67.47.22.255
67.142.156.0/24
67.142.187.0/24
67.142.192.0/24
67.142.203.0-67.142.204.255
67.142.243.0/24
67.142.251.0/24
67.143.99.0/24
72.169.71.0/24
72.169.73.0/24
72.169.215.0/24
72.171.6.0/24
72.171.11.0/24
72.171.14.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:6d:98:85:54:51:6e:20:f1:cb:ad:bb:78:90:b6:38:e4:fd:
6d:9b:6d:9f:ec:98:54:36:97:52:d9:5d:2b:3e:f4:c9:f6:4b:
c1:91:ad:a3:d0:9f:0b:75:ef:c0:c4:d5:15:2c:27:b1:45:ca:
fd:20:9a:60:84:c7:61:37:ab:75:54:c0:09:90:69:a4:b2:18:
3b:47:f8:e5:58:22:ac:8f:f1:5c:78:0a:0d:7e:5e:13:c2:be:
a9:9c:d7:34:05:d6:39:85:8d:a9:34:24:9a:ff:24:77:1b:45:
ff:3a:ab:19:1b:dc:3f:39:1b:37:0c:2a:62:15:00:8a:76:8c:
59:d0:19:57:79:2a:1e:4e:75:19:a8:a2:3c:85:dc:02:d8:c2:
8c:27:2c:f8:f1:91:53:06:63:94:a8:1d:bb:58:cd:73:4a:1a:
d7:f5:37:17:02:5a:5c:77:79:7a:8e:dc:37:e3:e4:29:ed:bb:
b6:52:e2:1b:57:d0:9f:1d:06:c9:b5:8b:e6:fe:90:ac:50:58:
7a:90:23:09:3b:b6:af:9f:b4:b7:fa:0b:13:76:ec:23:11:42:
f8:57:00:b1:d9:2d:89:26:48:ed:3f:e1:a9:50:fa:40:e4:42:
a8:d6:00:17:cb:3e:ef:da:5b:2e:30:31:ea:53:fe:39:5e:e5:
c1:df:55:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:24:43 2025 by rpki-client