Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/5b036da1-7aaf-32b5-ad5c-5caff71c8950.roa
File: 5b036da1-7aaf-32b5-ad5c-5caff71c8950.roa (raw, json)
Hash identifier: tA9hE6MSXHXOrVhHTrPTHDCd/gHonz5hETHowwzEtnA=
Subject key identifier: 20:1E:90:B0:FC:5B:CB:80:FF:C7:1E:2B:F2:5B:AB:1C:C8:A9:2E:0D
Certificate issuer: /CN=4b81c928-08cc-4234-b15c-0f1a197c6e00
Certificate serial: 010D0C9F43285848C6E62F1672C088CDA7929500
Authority key identifier: 1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/5b036da1-7aaf-32b5-ad5c-5caff71c8950.roa
Signing time: Wed 05 Feb 2025 02:00:39 +0000
ROA not before: Wed 05 Feb 2025 02:00:39 +0000
ROA not after: Tue 06 May 2025 01:00:39 +0000
asID: 32035
IP address blocks: 66.43.92.0/24 maxlen: 24
66.43.96.0/23 maxlen: 24
66.43.98.0/24 maxlen: 24
66.43.101.0/24 maxlen: 24
66.43.105.0/24 maxlen: 24
66.43.106.0/24 maxlen: 24
66.43.108.0/24 maxlen: 24
66.43.110.0/24 maxlen: 24
66.43.112.0/21 maxlen: 24
69.28.96.0/19 maxlen: 24
69.168.192.0/19 maxlen: 24
69.170.160.0/19 maxlen: 24
74.85.0.0/19 maxlen: 24
207.232.80.0/20 maxlen: 24
209.141.64.0/19 maxlen: 24
209.141.96.0/20 maxlen: 24
2607:f778::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c6:e6:2f:16:72:c0:88:cd:a7:92:95:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b81c928-08cc-4234-b15c-0f1a197c6e00
Validity
Not Before: Feb 5 02:00:39 2025 GMT
Not After : May 6 01:00:39 2025 GMT
Subject: CN=db3e4b0a-0798-4290-a62d-c99160e30858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:41:d8:81:91:c2:fd:12:e7:08:d8:85:4d:b5:
fc:e0:6d:72:d1:58:74:4c:0f:58:9b:dc:a6:a1:9d:
ca:53:8b:e5:e1:b4:f1:12:14:10:53:84:5f:bd:fc:
95:aa:bd:4f:5d:1e:26:80:a8:cb:1b:e6:06:e1:8a:
a7:db:59:97:79:a8:6e:ac:aa:f3:54:10:1a:90:1a:
2c:23:0b:37:6a:ce:8c:bd:a7:72:9d:01:32:a6:df:
46:1c:5a:26:7a:7f:12:89:53:8a:11:a3:32:9e:05:
90:8a:be:89:bf:0f:6c:04:71:fa:57:b0:fb:de:43:
e2:bb:ab:f5:7f:12:37:af:d3:e1:eb:d1:f8:95:a3:
dd:37:e2:29:6f:b3:47:04:94:a8:bf:e1:dc:7c:77:
b1:65:2b:84:9a:92:55:10:72:51:a7:17:f2:5f:11:
98:56:d1:f9:25:f1:54:d2:bd:66:86:a8:d6:4e:bb:
48:b1:76:13:e0:fc:85:21:16:c9:15:39:3c:ab:c3:
c1:1e:56:57:07:cf:04:16:cd:3d:d8:08:84:66:18:
2d:90:0d:bd:95:90:ee:91:69:5c:54:70:6e:40:0f:
1e:1f:b5:55:51:9b:e7:02:ac:36:d3:55:88:f0:a1:
59:f9:ef:b7:5f:cf:38:16:0d:bf:14:2c:20:bb:a7:
c1:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:1E:90:B0:FC:5B:CB:80:FF:C7:1E:2B:F2:5B:AB:1C:C8:A9:2E:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/5b036da1-7aaf-32b5-ad5c-5caff71c8950.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl
X509v3 Authority Key Identifier:
keyid:1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer
sbgp-ipAddrBlock: critical
IPv4:
66.43.92.0/24
66.43.96.0-66.43.98.255
66.43.101.0/24
66.43.105.0-66.43.106.255
66.43.108.0/24
66.43.110.0/24
66.43.112.0/21
69.28.96.0/19
69.168.192.0/19
69.170.160.0/19
74.85.0.0/19
207.232.80.0/20
209.141.64.0-209.141.111.255
IPv6:
2607:f778::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:19:94:37:bb:86:dd:cb:28:70:2e:14:9b:1c:47:b6:55:d9:
6f:8f:33:12:ff:8d:3e:fb:35:31:30:46:90:2e:ad:73:3b:b2:
8f:bb:38:18:a0:5f:cc:5a:4d:86:9a:b3:91:3a:bb:01:e8:71:
8e:0a:22:9e:8d:a4:31:7d:88:d9:d1:70:15:1c:40:b1:61:ab:
61:d2:95:83:6e:b2:8b:17:81:b7:ab:a0:81:84:83:27:1b:cf:
c8:b6:33:c4:86:db:49:19:1f:e2:88:a6:ae:af:3a:8d:8a:c5:
4e:0e:fc:53:21:17:cb:9d:6a:c1:db:0d:d5:4a:12:b2:66:06:
3a:63:8f:f1:8e:80:a5:52:3e:31:26:27:53:b3:d8:25:84:51:
b2:24:96:cc:9d:dc:b4:9d:ec:3b:b5:17:e2:09:02:9d:6f:2e:
99:46:a4:c3:09:ea:0f:ed:db:a5:ce:1c:bb:d8:fd:36:a7:c0:
1f:06:98:01:20:c6:ab:a6:b2:cb:8c:37:9b:ae:0e:a8:4e:1e:
96:4f:c7:ee:d0:cb:ec:8b:37:e4:02:47:ac:ba:96:96:1e:5d:
1f:6e:c9:86:33:d2:8b:12:95:24:f5:6d:bf:ee:28:32:78:20:
67:1d:d0:7b:b2:c8:08:0f:f0:3c:f8:64:d8:38:bb:12:17:73:
7f:c4:d2:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:28:20 2025 by rpki-client