Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/559851e2-825a-350f-a3ac-2c9e80f12a3c.roa
File: 559851e2-825a-350f-a3ac-2c9e80f12a3c.roa (raw, json)
Hash identifier: URs/rJeG+vfjm+/LA/db5yBJXaXK2704+nwJlgzIGiA=
Subject key identifier: 74:04:A8:91:D3:31:0B:14:0C:9F:EE:12:BC:BE:14:DB:84:6C:1F:61
Certificate issuer: /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
Certificate serial: 010D0C9F43285849287E51FC63CDF8D30839DB40
Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/559851e2-825a-350f-a3ac-2c9e80f12a3c.roa
Signing time: Wed 12 Mar 2025 01:00:39 +0000
ROA not before: Wed 12 Mar 2025 01:00:39 +0000
ROA not after: Tue 10 Jun 2025 01:00:39 +0000
asID: 33494
IP address blocks: 174.136.24.0/24 maxlen: 24
174.136.32.0/24 maxlen: 24
174.136.34.0/23 maxlen: 24
174.136.41.0/24 maxlen: 24
174.136.42.0/24 maxlen: 24
174.136.50.0/24 maxlen: 24
174.136.55.0/24 maxlen: 24
174.136.56.0/24 maxlen: 24
174.136.58.0/23 maxlen: 24
174.136.60.0/23 maxlen: 24
174.136.62.0/24 maxlen: 24
174.136.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:28:7e:51:fc:63:cd:f8:d3:08:39:db:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
Validity
Not Before: Mar 12 01:00:39 2025 GMT
Not After : Jun 10 01:00:39 2025 GMT
Subject: CN=10d4addf-b48b-47a9-a6f3-a792034d8b52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ed:c9:c9:74:08:a3:67:93:c5:d7:73:68:ba:
19:94:4b:af:9b:13:de:9d:d2:cf:f8:e6:61:ab:60:
29:54:25:a6:50:0a:51:76:5e:62:5a:f0:00:bf:71:
f6:a9:75:46:5b:57:19:f4:cc:60:f0:58:fc:93:f6:
8d:8a:b4:82:1f:b6:9c:ff:f9:59:3e:ee:8e:c3:ae:
13:a1:30:b2:cf:ec:44:01:ab:3f:85:07:e4:35:35:
2f:b2:e6:79:16:e1:4e:26:66:15:22:2b:21:80:05:
f0:62:01:8f:da:5c:e5:35:0f:cc:5b:8c:a8:a7:64:
fa:a8:7c:e5:23:86:43:59:77:24:1b:71:40:82:0d:
fb:f6:3d:b7:1c:fc:f6:de:61:c3:2c:17:52:1d:33:
a2:b5:f4:6c:6d:e9:1d:94:e3:e1:6a:bd:eb:ce:8c:
b0:e8:dc:db:c7:06:99:83:99:ca:8d:f3:29:cc:4d:
a5:b1:fb:b7:1b:af:b9:92:eb:45:7e:3e:54:52:bb:
22:3a:c8:ed:3b:93:6b:c7:1d:71:b2:5d:b6:71:ae:
3c:6d:f9:4c:92:08:fc:40:43:cd:f2:a1:fa:54:b0:
a8:76:fd:10:14:0d:f9:57:70:72:14:d3:67:19:81:
72:43:95:a2:47:97:f6:82:48:b7:04:5c:84:54:3f:
61:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:04:A8:91:D3:31:0B:14:0C:9F:EE:12:BC:BE:14:DB:84:6C:1F:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/559851e2-825a-350f-a3ac-2c9e80f12a3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl
X509v3 Authority Key Identifier:
keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
sbgp-ipAddrBlock: critical
IPv4:
174.136.24.0/24
174.136.32.0/24
174.136.34.0/23
174.136.41.0-174.136.42.255
174.136.50.0/24
174.136.55.0-174.136.56.255
174.136.58.0-174.136.63.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:10:c9:65:9c:e6:63:16:c1:2c:06:36:b6:f6:7e:81:c6:ac:
6c:f6:1e:f0:f5:c4:fe:37:9c:ae:06:c3:7a:65:c8:c7:79:1e:
8a:b5:4b:2d:16:53:61:19:1b:4b:e4:ad:c3:c9:2a:33:72:a8:
20:09:f2:ac:0b:e8:96:68:96:24:d9:9d:b9:e4:fc:51:22:4d:
8b:12:90:63:c1:63:96:19:cf:13:8c:3f:31:b7:bf:2d:c7:80:
f9:20:b5:42:b0:ec:6d:79:ab:16:43:3d:86:b7:35:a7:57:56:
45:51:1b:00:83:aa:35:c3:ba:dd:19:03:65:dc:2c:36:5e:34:
c7:90:f9:c0:40:dd:4e:12:08:43:eb:98:12:25:9d:e9:fd:6f:
fc:5c:9d:8d:0e:d4:02:91:c5:96:9e:3c:ef:7a:4e:ec:c7:c3:
35:23:4a:6d:85:bd:ac:95:2d:50:76:cb:50:83:9e:5d:66:56:
97:7f:0c:f7:9a:1e:22:8a:5f:e5:32:ef:39:a0:12:7d:4b:b4:
b1:2d:2b:b3:f8:cb:8d:4f:8c:10:5e:fb:0e:c5:65:c5:a5:ca:
52:d7:68:27:6f:cc:51:a0:47:46:b8:ce:75:bf:46:06:36:b2:
72:96:f5:30:5c:8f:3d:dc:0a:27:a7:70:8d:97:c1:fc:06:10:
1d:22:eb:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:40:34 2025 by rpki-client