
Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/6809335f-6340-3019-92c1-11e1e2e1eb1d.roa
File: 6809335f-6340-3019-92c1-11e1e2e1eb1d.roa (raw, json)
Hash identifier: 5aQFECdqGINXozV/vPe6i27HAEHRDgYGT5cdGcYcBTw=
Subject key identifier: 16:41:A8:D5:87:F5:E4:CB:44:04:EA:DD:86:CE:20:74:33:F1:05:07
Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial: 010D0C9F43285848888C2E924F4EF2F8B193F100
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/6809335f-6340-3019-92c1-11e1e2e1eb1d.roa
Signing time: Mon 13 Jan 2025 17:59:16 +0000
ROA not before: Mon 13 Jan 2025 17:59:16 +0000
ROA not after: Sun 13 Apr 2025 16:59:16 +0000
asID: 197450
IP address blocks: 64.64.103.0/24 maxlen: 24
98.159.236.0/23 maxlen: 24
173.239.233.0/24 maxlen: 24
173.244.40.0/24 maxlen: 24
173.244.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:88:8c:2e:92:4f:4e:f2:f8:b1:93:f1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Validity
Not Before: Jan 13 17:59:16 2025 GMT
Not After : Apr 13 16:59:16 2025 GMT
Subject: CN=7ca35d3b-d43b-475d-98ca-637b8fa45e3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e7:e6:db:21:12:0e:a1:7d:72:67:df:63:bf:
8f:4e:64:27:e5:6f:44:c1:5b:71:34:b9:fa:ff:89:
8b:fb:71:09:7c:6c:8e:ec:dc:02:8f:ad:40:0c:e4:
c0:04:a3:c4:10:ec:2c:92:3b:03:ca:23:62:ab:36:
f5:00:ea:f2:71:3a:36:ba:6b:a5:48:61:69:97:9b:
30:b9:df:06:6c:ba:d9:6f:82:69:b9:cb:02:e6:e5:
8a:dc:de:56:76:7b:48:76:dc:ee:a0:e2:cf:08:ae:
56:5a:3d:86:4d:a1:61:ff:c3:43:52:c2:52:35:fc:
a0:69:0d:b6:c5:c7:4f:68:44:b4:89:ba:30:fa:49:
f2:7b:f2:3b:ae:7e:c5:c1:d8:77:5b:1b:43:71:56:
9d:f6:7c:74:f8:a4:e9:69:bf:58:92:e2:a5:62:67:
ac:a7:31:6c:8f:48:1b:ea:80:7a:f5:d7:92:ed:7e:
04:ba:b0:2e:55:3e:a7:5c:74:00:62:05:09:3f:ad:
53:42:59:d3:07:6b:49:b6:55:cb:da:a2:d4:10:d9:
fb:23:d2:f5:d9:69:87:b0:b7:fc:7b:fe:7c:51:a7:
cd:ad:18:4f:c9:c2:8d:68:c0:36:5f:9b:71:a0:85:
2d:1f:38:f8:98:87:20:7a:6c:d1:9f:89:54:70:45:
88:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:41:A8:D5:87:F5:E4:CB:44:04:EA:DD:86:CE:20:74:33:F1:05:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/6809335f-6340-3019-92c1-11e1e2e1eb1d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
X509v3 Authority Key Identifier:
keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
sbgp-ipAddrBlock: critical
IPv4:
64.64.103.0/24
98.159.236.0/23
173.239.233.0/24
173.244.40.0/24
173.244.60.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:eb:4d:79:2b:19:f9:3e:47:cc:0a:c0:8f:3e:26:36:6c:25:
9b:bd:0c:f0:33:24:c9:25:d6:f1:00:c9:e3:44:a1:43:19:3f:
c1:0d:70:78:1b:87:6b:1b:b2:8b:51:9c:79:c1:8d:a7:96:c4:
30:d0:9e:c7:4d:77:4c:ce:46:44:73:35:01:e0:32:26:e6:7d:
09:8f:06:3d:07:6b:3b:f8:8f:49:ec:d2:8a:9f:1e:d7:39:61:
bf:b6:08:46:10:cb:b8:f8:08:fe:97:29:1c:b1:dd:1d:f6:99:
24:a0:78:06:0b:df:05:48:a6:f4:a0:02:3e:1e:f2:df:09:07:
d7:f3:fe:23:76:32:32:00:af:6b:b3:78:c6:e1:f9:48:b6:4e:
0d:36:c7:85:a0:27:fc:54:da:80:72:2b:a5:ab:82:94:d1:39:
7e:35:7e:c0:42:71:07:8a:86:ef:27:9e:53:1b:d8:98:6b:e4:
df:d6:e9:31:72:65:7b:f7:f3:4c:1c:a7:1a:06:d4:44:66:20:
47:4c:a3:13:a3:5c:0e:f3:86:03:fc:bb:7f:97:e3:43:6f:3c:
62:75:bd:bc:8a:f1:2d:d9:09:d5:e0:43:67:d7:0a:7f:8d:34:
89:ee:0f:e6:45:b6:90:3d:44:c9:6d:88:79:f5:d5:3c:ba:dc:
b6:99:b8:30
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:20:26 2025 by rpki-client