Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/615e35f9-bfe1-4c69-bb32-cd252c125c65/cebb264b-8916-3bf8-971e-9c880ec664a8.roa
File: cebb264b-8916-3bf8-971e-9c880ec664a8.roa (raw, json)
Hash identifier: 8pewW0KJHQcgJwu/M7lvbSlBm9eprDjLgdWF/s4iGcQ=
Subject key identifier: 88:3D:AC:71:88:15:F5:E7:FE:33:2F:C6:BC:39:22:91:4B:AF:C8:D5
Certificate issuer: /CN=615e35f9-bfe1-4c69-bb32-cd252c125c65
Certificate serial: 010D0C9F43285848DBD66554B91933D17BB28F40
Authority key identifier: 7C:F3:67:47:B2:5A:27:B5:5B:BF:CC:83:68:DC:5D:B2:B8:44:D2:C2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/615e35f9-bfe1-4c69-bb32-cd252c125c65.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/615e35f9-bfe1-4c69-bb32-cd252c125c65/cebb264b-8916-3bf8-971e-9c880ec664a8.roa
Signing time: Wed 12 Feb 2025 14:00:53 +0000
ROA not before: Wed 12 Feb 2025 14:00:53 +0000
ROA not after: Tue 13 May 2025 13:00:53 +0000
asID: 53698
IP address blocks: 23.174.128.0/24 maxlen: 24
23.174.129.0/24 maxlen: 24
23.175.16.0/24 maxlen: 24
165.140.128.0/23 maxlen: 24
192.33.139.0/24 maxlen: 24
209.209.4.0/22 maxlen: 24
2604:6040::/36 maxlen: 56
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:db:d6:65:54:b9:19:33:d1:7b:b2:8f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=615e35f9-bfe1-4c69-bb32-cd252c125c65
Validity
Not Before: Feb 12 14:00:53 2025 GMT
Not After : May 13 13:00:53 2025 GMT
Subject: CN=51814cbd-736e-4f72-8c38-11d1f6d64ea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:52:e6:c0:3e:de:f2:70:a5:a9:e2:07:e1:23:
d8:01:27:78:63:29:bc:6f:72:ad:c1:52:fb:43:7b:
d8:42:3c:7f:64:97:79:13:0d:07:16:78:1e:26:46:
72:28:ba:4e:41:fa:50:b6:d8:2f:e3:46:69:9f:61:
7c:69:9a:1c:57:21:b6:89:a6:71:7c:8c:a7:1b:9b:
38:03:cd:8d:cb:f4:bb:70:95:fc:26:86:15:4c:9c:
97:4a:b5:15:99:74:6b:ac:16:05:e3:09:c9:9a:c8:
fb:73:6c:f2:94:76:aa:1d:65:49:3c:28:d1:9c:80:
e0:38:e3:4e:5f:d0:b4:d2:96:7e:24:c0:9b:3e:cd:
24:6b:1e:ae:65:af:96:fd:bd:72:dc:b7:56:86:3d:
4d:6b:de:92:c8:26:bf:85:63:ee:21:63:1a:62:20:
b1:86:76:a2:02:de:ac:28:dd:c1:c0:0f:b5:31:e0:
c8:15:e6:a7:a5:19:75:88:90:d6:48:c5:e7:f8:84:
58:83:e2:24:a7:a2:73:6c:1d:02:60:5d:15:0a:ab:
8c:dd:e7:2d:9b:67:9c:dc:7b:a4:4b:cd:9b:0d:e7:
e1:f4:48:cf:d3:09:7f:92:fc:37:c9:aa:a3:78:fc:
42:1f:63:ae:01:b9:54:6c:f1:00:38:fd:ee:39:55:
68:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:3D:AC:71:88:15:F5:E7:FE:33:2F:C6:BC:39:22:91:4B:AF:C8:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/615e35f9-bfe1-4c69-bb32-cd252c125c65/cebb264b-8916-3bf8-971e-9c880ec664a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/615e35f9-bfe1-4c69-bb32-cd252c125c65/615e35f9-bfe1-4c69-bb32-cd252c125c65.crl
X509v3 Authority Key Identifier:
keyid:7C:F3:67:47:B2:5A:27:B5:5B:BF:CC:83:68:DC:5D:B2:B8:44:D2:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/615e35f9-bfe1-4c69-bb32-cd252c125c65.cer
sbgp-ipAddrBlock: critical
IPv4:
23.174.128.0/23
23.175.16.0/24
165.140.128.0/23
192.33.139.0/24
209.209.4.0/22
IPv6:
2604:6040::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:b0:ee:e9:df:ed:8e:b3:35:5f:73:d5:5c:9e:89:7c:53:4e:
d7:4d:35:fd:ba:7a:3b:7e:7a:79:34:77:ed:d9:f0:9b:c0:a3:
e0:42:fa:51:79:a6:33:b0:9a:17:77:ba:33:b2:ab:0a:cd:da:
bc:c6:91:7a:14:98:03:b1:46:e9:64:d3:79:3a:b9:fb:f1:da:
74:7f:d4:f2:f1:15:01:38:f4:2b:9a:b3:cd:90:a8:a5:13:38:
5a:53:8f:12:43:fe:d2:86:91:5c:56:76:5e:e2:18:d8:2f:f9:
fa:30:22:16:24:51:a3:00:21:db:cd:5c:a8:c7:0d:47:c7:2e:
f9:81:30:c0:44:c2:6b:d8:91:6a:fd:9f:a4:85:ba:e5:a6:c3:
38:30:3c:4c:2f:1a:a8:86:c9:9e:82:1d:c7:ff:0e:a1:2e:30:
6a:f4:a9:b7:b8:4a:b0:30:77:d5:70:87:dc:93:49:9d:ff:15:
90:ec:af:16:29:91:18:06:48:7e:bc:35:b6:d1:4b:51:35:ec:
66:41:f0:e4:81:8d:82:d3:02:eb:00:19:97:25:8e:5c:b8:59:
61:e2:01:e5:a4:8b:8e:87:60:fa:21:ab:fa:89:bb:ff:54:38:
ab:5f:f3:2f:60:a6:02:d4:af:5b:aa:d2:f1:16:4e:52:70:ab:
78:08:ef:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:53:06 2025 by rpki-client