Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/56af899d-738c-3949-b570-31516d10709c.roa
File: 56af899d-738c-3949-b570-31516d10709c.roa (raw, json)
Hash identifier: IilmyAvyPea0fV3pyV0OgDeGK9uXFnnub9aiEqpgYN8=
Subject key identifier: B9:16:17:07:D1:5C:B8:7C:EA:14:67:FC:3F:7C:0F:57:D4:E8:03:E4
Certificate issuer: /CN=7496889c-61af-4c61-8157-4b7f2fde690d
Certificate serial: 010D0C9F432858491246C73CA8A7C7B0CAADC200
Authority key identifier: 59:8A:C0:E6:5F:34:5A:76:4E:8D:20:18:B9:7D:01:9C:D1:12:B9:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/56af899d-738c-3949-b570-31516d10709c.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 855
IP address blocks: 198.164.1.0/24 maxlen: 24
198.164.2.0/24 maxlen: 24
198.164.4.0/23 maxlen: 24
198.164.26.0/23 maxlen: 24
198.164.30.0/23 maxlen: 24
198.164.67.0/24 maxlen: 24
198.164.68.0/24 maxlen: 24
198.164.96.0/24 maxlen: 24
198.164.97.0/24 maxlen: 24
198.164.98.0/24 maxlen: 24
198.164.110.0/23 maxlen: 24
198.164.121.0/24 maxlen: 24
198.164.124.0/24 maxlen: 24
198.164.160.0/24 maxlen: 24
198.164.171.0/24 maxlen: 24
198.164.182.0/24 maxlen: 24
198.164.187.0/24 maxlen: 24
198.164.188.0/24 maxlen: 24
198.164.199.0/24 maxlen: 24
198.164.200.0/24 maxlen: 24
198.164.201.0/24 maxlen: 24
198.164.207.0/24 maxlen: 24
198.164.208.0/22 maxlen: 24
198.164.219.0/24 maxlen: 24
198.164.220.0/24 maxlen: 24
198.164.223.0/24 maxlen: 24
198.164.225.0/24 maxlen: 24
198.164.233.0/24 maxlen: 24
198.164.234.0/24 maxlen: 24
198.164.241.0/24 maxlen: 24
198.164.242.0/23 maxlen: 24
198.164.244.0/22 maxlen: 24
198.164.249.0/24 maxlen: 24
198.164.250.0/23 maxlen: 24
198.164.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:c7:3c:a8:a7:c7:b0:ca:ad:c2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7496889c-61af-4c61-8157-4b7f2fde690d
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=742d6e88-21f1-45f2-8595-b8c9c069bcfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:57:f9:f8:71:7e:c0:c8:0e:b7:15:de:9b:d2:
81:a2:81:a2:c1:e1:e1:d5:11:a2:62:aa:89:44:91:
7d:19:7c:d3:ba:0d:2f:17:d2:52:0e:66:09:73:fb:
fb:53:2b:6a:bc:b7:61:aa:0f:a2:75:e2:f1:db:c1:
0c:08:34:5c:96:e8:bb:b3:0a:e8:7d:93:9b:bc:4b:
3a:78:04:10:d3:0d:dc:20:31:b4:2b:3f:85:4b:be:
16:7d:98:dc:56:1e:aa:d0:22:bc:11:3b:8c:bb:7a:
07:da:92:3c:56:00:43:fb:74:33:59:c6:d3:af:02:
d6:07:b4:1c:c8:ae:44:43:2e:d2:19:32:92:e3:64:
0d:54:46:3c:68:4a:6b:ef:91:83:b0:d2:0c:c9:4a:
50:11:d6:cc:94:8a:4c:1b:a5:8b:e8:bc:a8:31:c9:
27:83:64:54:fb:c5:02:a9:5b:2f:b1:01:03:34:2e:
5d:0f:82:3c:4a:b1:f8:4e:6c:f8:80:a2:c9:8c:64:
bf:f1:87:7e:b8:86:07:2c:67:3b:90:9d:38:fd:bf:
31:28:e5:61:31:c4:d8:bd:cd:fa:6e:f8:02:9b:28:
e1:23:5a:d2:9f:01:e3:ce:ac:e1:83:f7:53:63:01:
39:74:9c:58:06:05:14:f1:ac:b9:c1:6e:40:19:e7:
d8:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:16:17:07:D1:5C:B8:7C:EA:14:67:FC:3F:7C:0F:57:D4:E8:03:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/56af899d-738c-3949-b570-31516d10709c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/7496889c-61af-4c61-8157-4b7f2fde690d.crl
X509v3 Authority Key Identifier:
keyid:59:8A:C0:E6:5F:34:5A:76:4E:8D:20:18:B9:7D:01:9C:D1:12:B9:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer
sbgp-ipAddrBlock: critical
IPv4:
198.164.1.0-198.164.2.255
198.164.4.0/23
198.164.26.0/23
198.164.30.0/23
198.164.67.0-198.164.68.255
198.164.96.0-198.164.98.255
198.164.110.0/23
198.164.121.0/24
198.164.124.0/24
198.164.160.0/24
198.164.171.0/24
198.164.182.0/24
198.164.187.0-198.164.188.255
198.164.199.0-198.164.201.255
198.164.207.0-198.164.211.255
198.164.219.0-198.164.220.255
198.164.223.0/24
198.164.225.0/24
198.164.233.0-198.164.234.255
198.164.241.0-198.164.247.255
198.164.249.0-198.164.252.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:1f:13:4e:e8:38:76:e1:4b:bb:5e:71:da:8e:7b:d8:73:bc:
74:1b:d5:1f:0c:9e:0c:27:43:90:19:84:de:21:8d:35:57:01:
b1:96:d1:4d:ea:b2:9f:14:0f:ef:9b:15:61:e9:28:e0:03:a4:
52:87:ce:53:fb:9a:f9:4a:78:08:62:6d:e3:12:64:52:e5:f7:
24:4b:81:d5:b1:2d:84:c4:6c:27:0e:3d:1c:99:25:27:fb:77:
bd:70:ef:72:ec:0d:59:88:58:64:12:42:00:4c:ea:0c:6c:9b:
5c:e5:03:1f:21:74:3a:f1:37:5d:e0:78:f8:21:4b:8d:b6:44:
6c:b4:a3:60:9f:4e:0d:d6:d4:59:4b:6f:5a:d8:a9:66:22:6e:
f3:c1:5b:6a:a8:66:3c:34:50:bf:8b:7a:1c:90:9e:34:71:ad:
22:88:35:92:a5:76:0b:c8:1e:16:25:8e:30:42:51:b2:0c:59:
16:cd:b3:9d:71:23:ba:3d:fc:1a:58:c0:50:14:4a:72:d1:0b:
58:6b:ec:7f:6a:68:f2:7c:f7:6c:55:d8:b3:41:a2:bc:4e:3d:
20:6e:93:09:3b:70:b2:52:15:fd:f1:c6:43:1f:c7:cf:b0:be:
e0:24:b4:4e:bb:c9:b4:f1:66:4b:56:d8:86:88:1b:1a:64:45:
29:34:ef:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:45:48 2025 by rpki-client