Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/bedd12db-cd0a-3b9f-abb2-b54d9dd3ecf1.roa
File: bedd12db-cd0a-3b9f-abb2-b54d9dd3ecf1.roa (raw, json)
Hash identifier: /KFtFEjgkiC81j5cyVX3u/6WoJ9DcyXhLAe8p0PISA8=
Subject key identifier: CB:12:A2:7A:3D:E9:59:6B:D9:87:82:83:E5:D3:41:60:AD:6C:A1:03
Certificate issuer: /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
Certificate serial: 010D0C9F432858489075F12AF4B2E621BAF74240
Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/bedd12db-cd0a-3b9f-abb2-b54d9dd3ecf1.roa
Signing time: Thu 16 Jan 2025 14:00:50 +0000
ROA not before: Thu 16 Jan 2025 14:00:50 +0000
ROA not after: Wed 16 Apr 2025 13:00:50 +0000
asID: 6621
IP address blocks: 67.143.0.0/19 maxlen: 19
67.143.32.0/20 maxlen: 20
67.143.64.0/21 maxlen: 21
67.143.72.0/21 maxlen: 21
67.143.80.0/20 maxlen: 20
67.143.96.0/23 maxlen: 23
67.143.98.0/24 maxlen: 24
67.143.100.0/22 maxlen: 22
67.143.104.0/21 maxlen: 21
67.143.112.0/20 maxlen: 20
67.143.128.0/22 maxlen: 22
67.143.132.0/22 maxlen: 22
67.143.136.0/22 maxlen: 22
67.143.140.0/22 maxlen: 22
67.143.144.0/22 maxlen: 22
67.143.148.0/22 maxlen: 22
67.143.152.0/22 maxlen: 22
67.143.156.0/22 maxlen: 22
67.143.160.0/22 maxlen: 22
67.143.164.0/22 maxlen: 22
67.143.168.0/22 maxlen: 22
67.143.172.0/22 maxlen: 22
67.143.174.0/23 maxlen: 23
67.143.180.0/22 maxlen: 22
67.143.184.0/22 maxlen: 22
67.143.188.0/22 maxlen: 22
67.143.191.0/24 maxlen: 24
67.143.192.0/22 maxlen: 22
67.143.196.0/22 maxlen: 22
67.143.200.0/22 maxlen: 22
67.143.204.0/22 maxlen: 22
67.143.208.0/22 maxlen: 22
67.143.212.0/22 maxlen: 22
67.143.216.0/22 maxlen: 22
67.143.220.0/22 maxlen: 22
67.143.224.0/21 maxlen: 21
67.143.232.0/21 maxlen: 21
67.143.240.0/21 maxlen: 21
67.143.248.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:90:75:f1:2a:f4:b2:e6:21:ba:f7:42:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
Validity
Not Before: Jan 16 14:00:50 2025 GMT
Not After : Apr 16 13:00:50 2025 GMT
Subject: CN=42524e88-3bf2-44a5-adc7-b709ca95aa76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:25:a2:cb:18:7e:39:91:9e:76:48:10:82:44:
0e:16:8e:60:83:5d:4e:ca:3c:93:6a:a2:0b:49:e7:
e0:87:a3:f2:49:63:40:e4:12:97:47:e7:d8:f5:c4:
33:72:cb:0b:29:a0:19:07:5e:96:80:dc:8d:e7:c4:
d0:71:c6:8c:04:2c:f2:95:47:54:42:78:32:91:14:
02:d0:bc:60:26:a9:b8:9f:dc:b7:23:1c:2b:97:f5:
86:a6:bd:9c:71:33:c7:e3:fe:13:53:24:72:7a:44:
99:1d:f7:cd:4b:65:3f:fe:d6:c5:7f:dd:b0:cb:fb:
c6:fd:c2:a1:42:a5:77:15:9c:5b:82:8e:f4:b1:b1:
d6:86:a7:08:f0:20:ef:89:df:74:14:e6:71:a3:bf:
2e:5c:26:74:fd:a6:7a:8d:f1:d6:7b:ee:5c:43:43:
b9:95:93:72:2f:d6:fa:47:41:7f:2e:59:99:64:75:
9d:ac:fe:67:31:37:db:76:5a:94:e2:77:c9:45:b5:
4d:f1:c6:f8:91:d4:f2:35:f3:a9:f7:c7:62:23:0f:
d7:8e:e2:96:20:da:40:1d:f8:13:03:74:a7:40:54:
c5:e8:0b:07:c4:76:99:72:79:1b:79:f9:52:9d:52:
a4:93:b7:a9:c8:a3:4b:f5:c0:7c:42:fd:94:d0:d6:
4d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:12:A2:7A:3D:E9:59:6B:D9:87:82:83:E5:D3:41:60:AD:6C:A1:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/bedd12db-cd0a-3b9f-abb2-b54d9dd3ecf1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl
X509v3 Authority Key Identifier:
keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
sbgp-ipAddrBlock: critical
IPv4:
67.143.0.0-67.143.47.255
67.143.64.0-67.143.98.255
67.143.100.0-67.143.175.255
67.143.180.0-67.143.255.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a6:2b:a6:05:59:bc:03:21:dc:29:4c:28:35:06:55:d9:4b:58:
2d:a5:42:94:0c:fd:dd:20:69:dc:1f:2e:6a:81:d7:16:d7:ca:
ff:46:c5:d7:d6:61:d4:29:d0:96:c9:7a:86:b1:8c:ab:7a:b1:
78:dc:60:96:17:aa:e2:b2:df:a2:ce:dd:69:9b:1f:b4:ec:c2:
85:84:76:9d:63:9b:05:ca:f0:c1:24:ea:3d:ad:dc:b7:bd:1b:
0f:ac:69:b2:cd:ad:74:7b:72:cb:ac:ad:57:0f:a3:2c:6e:4a:
fb:ce:8d:e7:f2:ce:83:a5:b6:1b:25:53:83:d5:31:fb:14:56:
d6:9d:19:ab:92:32:95:7c:ad:9e:d2:5d:d4:a1:0b:29:ca:d3:
8a:9c:6d:8d:16:9e:f0:07:a1:9a:7b:b0:e2:98:c0:7b:b7:8b:
f4:df:ad:da:5d:4e:30:24:e0:89:68:72:89:81:ef:0e:aa:f1:
ed:7d:41:36:bb:68:28:a6:61:32:50:1f:0a:22:e2:f3:e4:cc:
3f:27:aa:43:31:e4:3a:56:e6:3c:86:6a:da:7f:0f:ad:51:7a:
8b:74:f1:4f:7b:62:7f:d3:46:85:ca:4f:f9:f5:a9:78:77:84:
c4:e7:02:e8:40:2a:5c:5e:10:f9:c1:50:09:0c:81:92:d8:69:
4e:04:72:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:04:54 2025 by rpki-client