Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/e165df65-1e67-38a3-9403-e310e854e08d.roa
File: e165df65-1e67-38a3-9403-e310e854e08d.roa (raw, json)
Hash identifier: PozpX0/+ch2Kx3vqrKWugvwoZyj+IZicbW03l8Bbygw=
Subject key identifier: B4:3C:A4:FE:76:11:43:BB:A7:B5:FD:27:2C:E3:14:6D:C7:80:C5:5F
Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial: 010D0C9F432858491941856633641269F16ACEC0
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/e165df65-1e67-38a3-9403-e310e854e08d.roa
Signing time: Thu 06 Mar 2025 14:00:52 +0000
ROA not before: Thu 06 Mar 2025 14:00:52 +0000
ROA not after: Wed 04 Jun 2025 13:00:52 +0000
asID: 13347
IP address blocks: 45.58.251.0/24 maxlen: 24
69.91.162.0/24 maxlen: 24
69.91.163.0/24 maxlen: 24
69.91.164.0/24 maxlen: 24
69.91.167.0/24 maxlen: 24
69.91.174.0/24 maxlen: 24
69.91.175.0/24 maxlen: 24
69.91.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:19:41:85:66:33:64:12:69:f1:6a:ce:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Validity
Not Before: Mar 6 14:00:52 2025 GMT
Not After : Jun 4 13:00:52 2025 GMT
Subject: CN=b202173d-1096-4db3-a7ca-6b62fe66bc88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0d:0f:06:f5:ff:17:45:4e:6b:a0:9d:60:f7:
11:9c:9c:39:36:8b:f4:bc:20:82:09:95:dd:11:76:
17:1b:b2:60:bd:8e:9c:99:5c:12:59:b6:9d:7c:56:
10:39:12:ee:81:be:6f:76:a2:60:df:ec:cb:32:56:
dc:75:fa:2b:9a:97:c7:ae:9a:03:e0:18:ad:da:1d:
85:b2:f3:dc:c3:4f:63:94:8e:87:11:c7:81:e1:7d:
df:24:39:74:ba:e6:5c:3c:ee:06:e1:7a:74:a8:c2:
5f:97:9a:33:09:8b:65:de:6d:73:1b:12:bc:2d:79:
fe:6c:e8:b2:45:69:4c:d5:b1:ff:56:94:77:ea:27:
50:eb:81:a2:e7:18:ec:ac:29:ee:7c:ca:9d:5f:6e:
a9:01:00:22:08:ea:71:b5:d1:33:87:b3:3b:03:2e:
5f:df:a2:6c:8e:66:24:c7:a1:06:82:a7:aa:46:f6:
c9:1f:4d:8b:83:bb:83:f0:6e:aa:b0:99:4d:63:74:
7b:68:96:23:9b:3d:7a:52:92:f3:1a:92:ce:e7:49:
f2:27:cc:8d:e9:21:f0:9a:51:ce:d8:27:99:9e:a4:
51:7a:43:79:45:96:c8:c5:2f:ce:38:1a:dc:ea:0d:
3a:1e:2c:8b:68:41:7a:c5:c5:1a:d5:a2:1b:2e:e7:
a4:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:3C:A4:FE:76:11:43:BB:A7:B5:FD:27:2C:E3:14:6D:C7:80:C5:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/e165df65-1e67-38a3-9403-e310e854e08d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
X509v3 Authority Key Identifier:
keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
sbgp-ipAddrBlock: critical
IPv4:
45.58.251.0/24
69.91.162.0-69.91.164.255
69.91.167.0/24
69.91.174.0/23
69.91.186.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:0f:bb:59:c4:ff:08:d2:b9:ef:6d:5b:29:45:7d:45:91:ab:
34:01:de:23:11:b9:ee:08:a3:88:78:5e:c4:d4:1a:1c:f0:8b:
12:38:ee:a5:e7:73:77:86:d4:9d:bf:fe:0c:8a:02:c0:5c:9d:
85:ec:3c:ca:7f:81:f6:13:78:93:36:a1:9a:51:21:d3:81:89:
b6:9a:7e:91:38:df:ec:41:1d:db:f9:1f:d6:c8:e1:7e:9b:48:
6e:57:c2:d5:5c:26:75:c0:5d:2f:48:15:ab:19:41:e9:a1:59:
15:fb:7d:a2:21:d6:e5:53:08:6b:94:57:22:b6:6e:a2:bb:0d:
79:af:01:f5:40:0d:34:fc:34:e1:59:4a:a4:65:48:f4:8a:68:
74:12:72:12:8f:a2:45:bb:40:12:53:96:19:10:26:f7:d8:b3:
b5:89:5f:27:40:b9:01:0a:b9:28:6d:76:80:4e:91:bc:d3:78:
cb:54:2b:47:e3:74:2b:34:0c:64:ce:9e:59:6f:4e:ba:68:4b:
16:02:be:e3:41:8d:a9:41:f7:1e:36:2b:9d:94:5d:3d:69:4a:
92:e5:6d:72:35:d5:1a:59:55:99:a6:67:e9:88:5b:a1:69:97:
6b:f4:6e:2c:e3:59:a5:dd:4e:fa:77:fd:24:d6:b1:89:b8:5e:
b0:23:4b:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:01:05 2025 by rpki-client