Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b45f6374-6cde-4681-a96a-9233e2715465/4a83ea86-cde7-38d1-8ea4-78d6b8ae162b.roa
File: 4a83ea86-cde7-38d1-8ea4-78d6b8ae162b.roa (raw, json)
Hash identifier: kM1k6L/mMi7XWkHvDTmZ/Rx/I4Rvba0r0Kp0RxDKYnY=
Subject key identifier: CF:03:13:71:67:43:04:61:58:11:57:C0:6E:83:0F:7E:5F:9B:60:0A
Certificate issuer: /CN=b45f6374-6cde-4681-a96a-9233e2715465
Certificate serial: 010D0C9F43285848D21142C2A6B152791FA79600
Authority key identifier: 12:39:E2:63:A9:4F:E4:5A:B7:C9:13:A2:AC:35:02:79:4A:5E:B5:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b45f6374-6cde-4681-a96a-9233e2715465.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b45f6374-6cde-4681-a96a-9233e2715465/4a83ea86-cde7-38d1-8ea4-78d6b8ae162b.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 33044
IP address blocks: 192.40.240.0/22 maxlen: 24
192.122.206.0/24 maxlen: 24
199.7.136.0/22 maxlen: 24
199.91.112.0/22 maxlen: 24
199.91.252.0/22 maxlen: 24
205.211.166.0/23 maxlen: 24
2606:8900::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:11:42:c2:a6:b1:52:79:1f:a7:96:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45f6374-6cde-4681-a96a-9233e2715465
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=3e19dd97-ad52-41d6-b3e8-3837187b0d0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c3:c0:38:86:59:8c:a6:ff:09:d0:82:60:69:
d5:ef:68:31:c2:b8:4a:9b:4b:b1:a8:eb:e4:cd:7f:
6c:75:38:34:e9:e7:d4:49:41:33:d5:9b:42:fe:a2:
c6:19:63:6d:8e:64:39:ac:d9:e9:f7:bd:25:5c:34:
56:11:4e:8e:7c:7c:b2:2a:f5:ac:24:85:7c:8e:fb:
d4:be:03:80:23:c3:b3:0e:a6:0f:25:04:d2:55:c3:
d1:47:cc:b8:43:d7:a4:21:89:20:4c:30:35:ed:16:
87:86:5a:ba:25:24:ae:bc:ff:4c:6a:f5:d7:9c:e2:
83:74:0f:41:27:23:ec:30:80:e9:00:94:66:5d:39:
c0:41:b8:52:e2:87:10:37:5b:89:7f:b3:6f:cd:3d:
50:b2:d0:82:8d:9f:9b:57:27:a8:41:c2:25:3d:30:
3d:7e:16:8e:aa:9a:d4:fc:06:f2:49:f5:cc:1c:ff:
a7:dc:72:3b:8d:9a:a2:5b:d9:97:79:cb:d9:e0:14:
8b:27:53:e7:cf:9f:1f:72:59:7f:6a:47:cf:c5:ec:
c0:ab:36:1e:e2:ec:1d:6f:6b:cc:8d:4e:47:23:de:
9d:bc:8c:9a:99:33:05:bf:1b:4f:4d:49:da:82:c9:
6a:d0:76:90:fa:7f:75:91:b5:c1:2e:47:e6:c1:a0:
81:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:03:13:71:67:43:04:61:58:11:57:C0:6E:83:0F:7E:5F:9B:60:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b45f6374-6cde-4681-a96a-9233e2715465/4a83ea86-cde7-38d1-8ea4-78d6b8ae162b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b45f6374-6cde-4681-a96a-9233e2715465/b45f6374-6cde-4681-a96a-9233e2715465.crl
X509v3 Authority Key Identifier:
keyid:12:39:E2:63:A9:4F:E4:5A:B7:C9:13:A2:AC:35:02:79:4A:5E:B5:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b45f6374-6cde-4681-a96a-9233e2715465.cer
sbgp-ipAddrBlock: critical
IPv4:
192.40.240.0/22
192.122.206.0/24
199.7.136.0/22
199.91.112.0/22
199.91.252.0/22
205.211.166.0/23
IPv6:
2606:8900::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:c7:71:20:d4:9b:45:be:bb:a0:2a:69:b0:5f:5a:04:bf:4d:
b3:b2:22:0c:ce:7c:97:f3:7f:1d:db:57:5d:2b:c7:01:14:eb:
e7:57:22:e8:79:c5:c7:d0:e8:17:77:ef:86:eb:ab:2a:44:f5:
e0:33:3c:37:33:46:b8:63:0f:08:e8:70:16:a0:4d:e9:cc:9f:
b3:0f:ee:e3:04:65:3a:16:2f:67:74:f6:e3:e7:32:67:73:64:
6f:78:05:8d:8e:4a:54:0f:c2:ee:18:63:66:7a:20:8e:dc:32:
65:63:eb:de:ee:3b:f9:3a:5a:de:ca:25:45:a4:1a:32:3a:69:
b5:36:4e:4c:d5:78:b3:b1:0e:34:ab:e6:12:b4:14:01:fd:fd:
3f:8f:b9:3e:0e:1f:7f:10:a7:36:6a:bf:8d:10:20:c1:6f:00:
1b:7d:08:4c:55:ea:69:d0:17:4d:46:b2:f9:0f:a8:50:93:56:
62:ff:50:ca:ba:e6:3e:cb:84:be:13:fe:36:47:82:58:21:08:
6e:cf:c5:d6:b4:0c:8b:66:56:0f:b0:1e:6c:96:62:64:2d:7f:
fe:e0:8a:67:b6:5c:4b:4c:2b:5b:2b:d3:b1:29:42:fd:58:11:
b6:d1:cd:43:52:88:2e:77:82:a5:87:fa:b6:2f:c7:58:85:7d:
70:c4:5c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 16:16:51 2025 by rpki-client