Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45/68d1a941-51ad-3750-8235-b215425c89f4.roa
File: 68d1a941-51ad-3750-8235-b215425c89f4.roa (raw, json)
Hash identifier: qPNP31xhO5E+dDpL00e8hzksMWrsmqsOSFvrGwlolr4=
Subject key identifier: 0B:13:82:CE:E3:8B:A0:04:8D:A9:6B:54:BF:4C:F4:70:AC:A2:6C:B4
Certificate issuer: /CN=d512566a-2d54-474a-a1b0-93c74d4f7e45
Certificate serial: 010D0C9F4328584910E180040683F10C456BF240
Authority key identifier: 1F:FA:6D:95:AF:5A:0B:BF:31:14:4C:3C:C6:AF:E5:51:0F:41:55:F6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45/68d1a941-51ad-3750-8235-b215425c89f4.roa
Signing time: Mon 03 Mar 2025 14:00:53 +0000
ROA not before: Mon 03 Mar 2025 14:00:53 +0000
ROA not after: Sun 01 Jun 2025 13:00:53 +0000
asID: 19905
IP address blocks: 167.245.8.0/22 maxlen: 22
167.245.12.0/22 maxlen: 22
167.245.16.0/22 maxlen: 22
167.245.20.0/22 maxlen: 22
167.245.24.0/22 maxlen: 22
167.245.28.0/22 maxlen: 22
167.245.32.0/22 maxlen: 22
167.245.36.0/22 maxlen: 22
167.245.54.0/23 maxlen: 23
167.245.56.0/22 maxlen: 22
167.245.62.0/23 maxlen: 23
167.245.64.0/20 maxlen: 20
167.245.88.0/22 maxlen: 22
167.245.92.0/22 maxlen: 22
167.245.104.0/22 maxlen: 22
167.245.139.0/24 maxlen: 24
167.245.160.0/19 maxlen: 19
167.245.243.0/24 maxlen: 24
167.245.245.0/24 maxlen: 24
167.245.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:10:e1:80:04:06:83:f1:0c:45:6b:f2:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d512566a-2d54-474a-a1b0-93c74d4f7e45
Validity
Not Before: Mar 3 14:00:53 2025 GMT
Not After : Jun 1 13:00:53 2025 GMT
Subject: CN=0a58635a-814d-489a-bfce-70081f64428d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:bb:9c:78:bc:1f:76:a3:2c:f0:a8:0b:74:b4:
74:fc:a1:82:8b:bf:27:70:ed:ea:85:f6:ec:72:eb:
53:28:d5:04:d2:65:06:05:9e:20:8f:9d:6e:54:6d:
7d:49:85:d7:f3:ee:5a:ca:13:ed:30:14:a8:ee:d1:
97:f8:33:3b:2a:07:62:46:3a:c5:16:df:cc:b0:96:
1b:b3:b1:00:b6:91:9a:ca:d0:60:29:a6:92:d4:97:
f0:70:c7:b3:24:68:47:ea:a4:93:64:b6:15:e6:1f:
01:91:2a:90:ea:8e:91:8e:11:76:2d:73:24:d8:8c:
73:16:47:ea:cb:11:b1:bf:7d:27:f9:c9:d8:b2:7f:
74:dc:5d:ab:db:88:fb:41:a6:bd:7d:09:72:90:c6:
95:c2:1e:5a:7f:97:8e:e2:52:ca:70:cd:08:cd:3d:
8e:b0:ae:9b:cc:01:ff:b4:6e:36:5c:d7:c5:a0:de:
5d:92:b8:a8:1e:9a:d6:a1:4a:fe:7d:da:16:60:49:
c2:40:98:8d:1b:7f:c9:d1:29:65:40:5c:62:42:d4:
cf:c6:ef:04:41:9b:3e:74:0d:78:fc:1c:04:5b:31:
c0:38:17:cc:63:01:b1:68:26:a3:41:50:fc:f0:2f:
e7:07:b5:0b:7e:70:0c:0a:8a:d0:ee:5a:da:ae:91:
2a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:13:82:CE:E3:8B:A0:04:8D:A9:6B:54:BF:4C:F4:70:AC:A2:6C:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45/68d1a941-51ad-3750-8235-b215425c89f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45/d512566a-2d54-474a-a1b0-93c74d4f7e45.crl
X509v3 Authority Key Identifier:
keyid:1F:FA:6D:95:AF:5A:0B:BF:31:14:4C:3C:C6:AF:E5:51:0F:41:55:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45.cer
sbgp-ipAddrBlock: critical
IPv4:
167.245.8.0-167.245.39.255
167.245.54.0-167.245.59.255
167.245.62.0-167.245.79.255
167.245.88.0/21
167.245.104.0/22
167.245.139.0/24
167.245.160.0/19
167.245.243.0/24
167.245.245.0/24
167.245.247.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:90:bd:de:3a:18:9a:aa:4c:ff:ec:12:90:3d:54:59:a9:e7:
0b:6d:ec:ac:ee:11:95:3e:9d:6d:f1:df:0a:2e:b9:b0:58:34:
44:2e:a9:4d:ca:6e:c8:87:e6:d7:c9:26:f2:df:7f:ed:d0:b6:
be:dc:f9:28:76:64:93:21:ae:f1:bc:0e:97:1b:14:2a:b8:90:
d2:e8:b6:34:69:1a:e3:3f:3d:e4:8a:c2:a6:bf:80:55:17:61:
a3:fe:74:51:87:3c:a3:51:cf:9f:9d:b7:bf:7a:89:06:6d:f0:
c7:be:b6:24:0a:1d:c3:b7:62:a7:67:3a:69:4d:67:8c:0f:fa:
10:b6:ef:17:e9:fb:a4:6f:ef:7b:27:2d:71:4e:f7:49:76:d0:
32:2a:5a:43:b2:01:12:44:d1:0b:28:d5:86:91:50:11:ae:57:
5e:41:fb:52:64:6c:1f:51:ef:35:0e:9a:a3:11:91:ad:43:5e:
1c:1d:2c:7f:ba:38:c4:58:c7:9d:02:df:70:24:6f:05:54:5f:
74:bb:5f:6b:da:f4:7f:3b:2c:22:b6:ed:e6:91:1e:b8:17:15:
5e:76:9b:a4:bc:a1:54:5c:d5:7b:41:46:b7:eb:17:f5:56:bb:
38:05:32:7c:89:e5:e0:8f:b7:e8:28:a2:ce:9e:81:cb:44:29:
21:9e:d1:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 23:24:09 2025 by rpki-client