Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/495553e5-6804-3997-88ac-54c613b38c17.roa
File: 495553e5-6804-3997-88ac-54c613b38c17.roa (raw, json)
Hash identifier: gqpl6SmwRXQjl1SE0nB3uuV+I6Pt11t0/buoXAYMTow=
Subject key identifier: 8B:8E:B4:5A:EE:6B:13:54:9A:0D:E0:9C:8D:4D:E5:29:F2:A9:C7:43
Certificate issuer: /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
Certificate serial: 010D0C9F432858489075F10D2875CECA95E13980
Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/495553e5-6804-3997-88ac-54c613b38c17.roa
Signing time: Thu 16 Jan 2025 14:00:50 +0000
ROA not before: Thu 16 Jan 2025 14:00:50 +0000
ROA not after: Wed 16 Apr 2025 13:00:50 +0000
asID: 6621
IP address blocks: 67.142.0.0/19 maxlen: 19
67.142.100.0/22 maxlen: 22
67.142.104.0/22 maxlen: 22
67.142.108.0/22 maxlen: 22
67.142.112.0/22 maxlen: 22
67.142.116.0/22 maxlen: 22
67.142.120.0/22 maxlen: 22
67.142.124.0/22 maxlen: 22
67.142.128.0/20 maxlen: 20
67.142.144.0/21 maxlen: 21
67.142.152.0/22 maxlen: 22
67.142.157.0/24 maxlen: 24
67.142.158.0/23 maxlen: 23
67.142.160.0/19 maxlen: 19
67.142.160.0/24 maxlen: 24
67.142.176.0/24 maxlen: 24
67.142.184.0/24 maxlen: 24
67.142.185.0/24 maxlen: 24
67.142.186.0/24 maxlen: 24
67.142.188.0/24 maxlen: 24
67.142.189.0/24 maxlen: 24
67.142.193.0/24 maxlen: 24
67.142.194.0/23 maxlen: 23
67.142.196.0/22 maxlen: 22
67.142.200.0/23 maxlen: 23
67.142.202.0/24 maxlen: 24
67.142.206.0/23 maxlen: 23
67.142.208.0/20 maxlen: 20
67.142.224.0/20 maxlen: 20
67.142.240.0/23 maxlen: 23
67.142.242.0/24 maxlen: 24
67.142.244.0/22 maxlen: 22
67.142.248.0/23 maxlen: 23
67.142.250.0/24 maxlen: 24
67.142.252.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:90:75:f1:0d:28:75:ce:ca:95:e1:39:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
Validity
Not Before: Jan 16 14:00:50 2025 GMT
Not After : Apr 16 13:00:50 2025 GMT
Subject: CN=4b1b8e52-5764-44ef-8b50-aa44f68becb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b1:e5:c0:ad:f1:ef:41:04:12:e1:92:6f:17:
a4:41:16:3f:f1:1e:6c:21:cd:ad:d6:e3:8b:06:23:
24:27:14:55:98:38:cb:bf:8e:0d:f6:4f:03:0b:7a:
9b:ef:14:5f:79:e7:e1:1f:07:4a:80:cb:0a:8f:85:
42:49:eb:3d:07:3b:19:72:43:01:e8:31:c4:0d:a9:
c7:bf:80:87:57:0e:f1:e3:63:f6:c2:d4:3b:36:ae:
47:50:0b:e4:7b:c2:78:72:c3:67:7c:99:37:86:24:
94:69:03:4d:4a:1c:7f:a7:25:fa:64:2f:6c:ca:ea:
6a:a9:02:82:c7:7c:30:f9:06:90:9c:75:c5:4f:3c:
8c:07:6a:f0:9f:ea:18:af:33:79:3b:8f:cc:4f:23:
ee:14:57:ee:f6:bb:0a:e1:5d:6b:3b:9c:ca:96:00:
39:32:80:7c:59:d6:78:cb:3f:66:cb:62:a5:5d:df:
d0:fc:02:32:50:02:83:7a:a8:8f:51:64:b4:5c:fc:
c0:80:27:0e:74:00:e2:b0:b2:59:df:13:99:ef:23:
75:de:ad:11:50:04:6b:39:5d:cb:04:69:2b:75:1e:
09:80:16:53:db:5e:b7:2b:56:40:af:5e:7e:8c:57:
4f:f3:a5:4f:1b:12:76:8a:bf:03:fc:61:3e:d0:3c:
3d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:8E:B4:5A:EE:6B:13:54:9A:0D:E0:9C:8D:4D:E5:29:F2:A9:C7:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/495553e5-6804-3997-88ac-54c613b38c17.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl
X509v3 Authority Key Identifier:
keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
sbgp-ipAddrBlock: critical
IPv4:
67.142.0.0/19
67.142.100.0-67.142.155.255
67.142.157.0-67.142.191.255
67.142.193.0-67.142.202.255
67.142.206.0-67.142.242.255
67.142.244.0-67.142.250.255
67.142.252.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:c8:18:a4:a3:c5:3d:ae:af:35:50:01:4c:af:a1:d5:f7:4d:
a6:ae:8b:b5:ee:10:46:a4:71:09:be:4d:ce:34:93:02:99:fd:
d6:d6:89:fc:84:36:ae:3e:fe:f8:e6:14:a8:ff:76:c5:2d:cf:
5a:44:56:78:7a:5b:9a:9f:d0:44:6f:83:41:7b:b5:da:66:3b:
4c:55:f2:a6:b5:0f:ba:7e:77:7e:3b:40:4f:5c:10:75:49:df:
bf:61:e1:68:18:f6:72:89:70:df:e1:e1:86:1d:0f:f5:12:af:
26:eb:fa:4c:eb:f9:48:b4:eb:dd:2d:b3:be:7d:9a:4b:65:e8:
6b:9f:c3:44:90:27:8b:a2:19:9b:b2:f0:5d:5a:26:31:57:d2:
24:1e:cf:e6:15:b9:34:70:f6:21:66:fe:a7:89:31:7f:a5:59:
02:f8:0e:ce:20:e3:15:da:85:65:e7:5a:6e:91:16:2d:f4:33:
cd:ff:0d:9e:c3:5f:be:ec:3f:1c:d1:66:d5:7a:08:b3:22:1d:
5f:e5:41:88:06:1e:1c:72:5a:77:22:6f:76:c1:37:ce:4c:3d:
7d:98:07:93:15:0e:a8:64:72:a7:44:0c:03:14:76:de:28:3e:
99:8c:6e:43:3e:91:6e:92:4f:bb:c4:19:c0:28:1b:c1:da:92:
fc:f5:a0:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:23:08 2025 by rpki-client