Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/19eaf767-3e5c-350c-8c6b-183a88c47ae1.roa
File: 19eaf767-3e5c-350c-8c6b-183a88c47ae1.roa (raw, json)
Hash identifier: 3mOiEDE0jrIZyx9eFbkPaNFGrsv2bLJqxyogr9kTaKI=
Subject key identifier: CD:F0:AF:41:9B:AD:27:B7:5C:62:FD:91:E7:AB:12:8C:FC:45:3E:BA
Certificate issuer: /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
Certificate serial: 010D0C9F43285849287E52720ABD9B2FCE915240
Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/19eaf767-3e5c-350c-8c6b-183a88c47ae1.roa
Signing time: Wed 12 Mar 2025 01:00:39 +0000
ROA not before: Wed 12 Mar 2025 01:00:39 +0000
ROA not after: Tue 10 Jun 2025 01:00:39 +0000
asID: 55045
IP address blocks: 72.249.45.0/24 maxlen: 24
72.249.76.0/23 maxlen: 24
72.249.104.0/23 maxlen: 24
72.249.125.0/24 maxlen: 24
72.249.126.0/23 maxlen: 24
72.249.144.0/23 maxlen: 24
72.249.170.0/23 maxlen: 24
174.136.0.0/23 maxlen: 24
174.136.4.0/23 maxlen: 24
206.123.88.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:28:7e:52:72:0a:bd:9b:2f:ce:91:52:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
Validity
Not Before: Mar 12 01:00:39 2025 GMT
Not After : Jun 10 01:00:39 2025 GMT
Subject: CN=2b95d3a5-f266-4384-ab23-a992766ff27d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:bb:35:74:13:05:1d:de:14:47:fc:9c:9c:2a:
16:8d:3e:31:ba:a3:f7:8e:18:3b:a4:5e:32:6b:e4:
4c:e3:de:16:2f:10:ac:0d:81:03:7d:9b:0f:94:d5:
e0:52:1b:71:9f:e7:a7:cd:d7:49:95:0d:e4:25:f0:
cc:80:f2:a0:f5:82:94:10:b7:70:0b:d9:81:b0:08:
0f:20:a5:d8:a2:ac:d6:0a:78:c0:0a:15:3e:07:cf:
5f:68:f5:29:24:8b:3b:56:95:bc:79:65:1b:b1:61:
c2:a9:27:34:a8:f5:19:10:69:52:8c:36:11:a1:07:
d1:2d:cd:dc:c3:10:d0:f6:1c:db:c2:d9:fc:f8:0f:
b4:c6:3f:cb:da:e8:be:8b:b8:9b:dc:b0:85:94:2c:
52:16:a1:22:43:5b:46:f4:5e:79:08:97:0a:95:ff:
0e:2f:4d:3a:fd:a0:4c:29:cb:ac:55:05:43:1e:22:
b7:b8:92:c7:d6:36:39:a9:eb:ee:8c:a0:22:88:a0:
27:a0:73:63:fb:f7:43:29:65:69:a1:73:3f:f7:de:
58:54:92:e3:81:c9:9b:81:50:f1:42:0a:98:5c:e2:
70:3f:2e:67:7e:fe:ef:f6:39:e3:2d:71:88:ff:a2:
4a:7e:31:4a:6e:3e:d6:0a:9e:a3:50:27:6c:3f:6d:
6b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:F0:AF:41:9B:AD:27:B7:5C:62:FD:91:E7:AB:12:8C:FC:45:3E:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/19eaf767-3e5c-350c-8c6b-183a88c47ae1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl
X509v3 Authority Key Identifier:
keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
sbgp-ipAddrBlock: critical
IPv4:
72.249.45.0/24
72.249.76.0/23
72.249.104.0/23
72.249.125.0-72.249.127.255
72.249.144.0/23
72.249.170.0/23
174.136.0.0/23
174.136.4.0/23
206.123.88.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:33:e9:5c:85:89:de:26:88:79:a9:6f:19:f7:c3:c2:33:2a:
03:27:05:cf:9e:12:6a:e1:cc:18:36:bc:b0:5d:9f:fb:a6:68:
ec:3b:77:ef:3e:fc:04:15:2f:20:29:9a:66:12:b0:08:c4:ae:
17:61:b0:a6:fb:25:7a:3f:ca:7d:31:01:52:d0:a0:31:25:a8:
49:91:3f:74:d1:39:34:02:8b:39:7b:fb:21:d1:23:5d:a4:ba:
20:6f:e0:ee:df:d0:46:ba:0b:32:a5:01:de:46:ad:3f:12:d1:
e0:d8:f1:be:23:ca:20:ba:20:ac:31:76:2c:e5:6a:0e:76:cb:
1c:d8:e8:94:ba:a2:31:92:5b:d9:3c:ea:cf:8e:43:6f:cb:29:
20:ee:fd:72:5c:ad:1a:e6:0e:66:8f:a1:35:cf:8b:80:4a:0f:
ce:a8:e0:dd:92:3e:d0:d0:69:c7:ad:34:72:b2:a9:29:c0:3f:
b6:00:7b:21:c2:03:75:d2:94:33:47:25:15:b7:a9:87:8b:97:
33:a8:e8:31:b4:54:38:96:e1:3e:69:f5:0f:a2:68:c6:42:59:
de:ab:4b:c6:d4:99:c3:54:6f:77:0a:3a:57:6a:26:d1:66:1d:
df:03:60:53:76:6e:de:03:f3:78:e5:4e:5d:e2:29:b4:30:9b:
dd:7d:d2:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:40:29 2025 by rpki-client