Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/b90fbd97-8822-3745-b4a2-f3e544e9c78f.roa
File: b90fbd97-8822-3745-b4a2-f3e544e9c78f.roa (raw, json)
Hash identifier: ZpN3zjphH6Sl1/DTRY2JXAg3LJoqkzoW5NcMu1edL/g=
Subject key identifier: A6:19:C7:B3:F0:D9:B5:0E:A0:EB:59:B1:B7:CD:05:5F:33:D1:0D:BD
Certificate issuer: /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
Certificate serial: 010D0C9F43285848EC96AEE9F59E2E5DDF03E780
Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/b90fbd97-8822-3745-b4a2-f3e544e9c78f.roa
Signing time: Tue 18 Feb 2025 14:00:52 +0000
ROA not before: Tue 18 Feb 2025 14:00:52 +0000
ROA not after: Mon 19 May 2025 13:00:52 +0000
asID: 7181
IP address blocks: 208.69.108.0/22 maxlen: 24
208.88.240.0/22 maxlen: 24
209.59.0.0/19 maxlen: 24
209.92.7.0/24 maxlen: 24
209.92.39.0/24 maxlen: 24
209.92.44.0/24 maxlen: 24
209.92.53.0/24 maxlen: 24
209.92.56.0/24 maxlen: 24
209.92.62.0/24 maxlen: 24
209.92.68.0/24 maxlen: 24
209.92.70.0/23 maxlen: 24
209.92.74.0/23 maxlen: 24
209.92.79.0/24 maxlen: 24
209.92.88.0/24 maxlen: 24
209.92.90.0/23 maxlen: 24
209.92.137.0/24 maxlen: 24
209.92.224.0/21 maxlen: 24
209.177.16.0/22 maxlen: 24
216.27.0.0/18 maxlen: 24
216.27.64.0/19 maxlen: 24
216.46.48.0/20 maxlen: 24
216.48.112.0/20 maxlen: 24
216.58.224.0/19 maxlen: 24
216.150.128.0/19 maxlen: 24
216.182.80.0/20 maxlen: 24
216.211.128.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ec:96:ae:e9:f5:9e:2e:5d:df:03:e7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
Validity
Not Before: Feb 18 14:00:52 2025 GMT
Not After : May 19 13:00:52 2025 GMT
Subject: CN=ea6f10dd-3a18-4262-b1b4-22cc00365c66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2f:90:87:51:78:3b:b6:50:f7:26:de:97:de:
cd:a3:81:cf:c3:1f:e4:69:27:e9:07:b8:94:3a:35:
ce:cf:40:40:0a:c5:5a:13:19:42:c3:83:76:fb:a0:
45:e7:8d:ab:97:9f:0d:b8:dc:63:1e:3e:75:66:b6:
ef:93:1a:36:be:50:d8:61:89:93:09:b9:d1:ce:93:
16:f4:7f:a4:97:64:64:b2:3a:a2:e9:f6:16:01:3e:
e6:96:69:34:3a:04:0a:63:a1:46:24:46:9c:c4:a9:
d1:f3:9f:8f:7c:f9:b8:aa:b7:58:6c:64:35:90:ee:
58:b5:cd:a3:c2:01:b3:8a:6b:90:14:d3:da:28:e0:
73:f5:ff:9f:eb:52:b1:e4:21:7f:b5:e8:d1:d1:80:
f1:cf:e8:9b:3b:ca:40:72:f3:bc:79:e6:bf:26:20:
71:f2:f5:e9:96:51:6c:b7:fd:c5:5b:64:ad:a9:e1:
45:da:1c:4b:55:c8:36:fe:06:00:6b:d2:3a:4d:95:
a2:ae:0c:93:e2:22:c9:43:27:ea:ce:e5:47:a9:4f:
da:dc:c7:1c:81:1b:26:63:3b:0d:99:03:75:6d:83:
ae:ec:10:d3:19:27:27:a4:a2:0f:a1:c7:7a:95:e4:
40:de:ba:46:92:ba:5b:c1:2a:58:fe:aa:ea:c3:0a:
dd:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:19:C7:B3:F0:D9:B5:0E:A0:EB:59:B1:B7:CD:05:5F:33:D1:0D:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/b90fbd97-8822-3745-b4a2-f3e544e9c78f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl
X509v3 Authority Key Identifier:
keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
sbgp-ipAddrBlock: critical
IPv4:
208.69.108.0/22
208.88.240.0/22
209.59.0.0/19
209.92.7.0/24
209.92.39.0/24
209.92.44.0/24
209.92.53.0/24
209.92.56.0/24
209.92.62.0/24
209.92.68.0/24
209.92.70.0/23
209.92.74.0/23
209.92.79.0/24
209.92.88.0/24
209.92.90.0/23
209.92.137.0/24
209.92.224.0/21
209.177.16.0/22
216.27.0.0-216.27.95.255
216.46.48.0/20
216.48.112.0/20
216.58.224.0/19
216.150.128.0/19
216.182.80.0/20
216.211.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:cd:d1:86:ce:1b:8e:87:45:e9:c6:14:73:51:8b:04:42:90:
eb:9a:a8:45:85:50:7c:03:9f:d0:04:5c:96:df:a8:97:11:45:
a0:17:99:5d:80:2f:3f:14:97:67:c3:f8:d9:67:d3:21:af:cc:
b7:b8:64:45:8f:72:45:24:f8:fb:7a:99:85:30:df:ee:81:17:
d7:7c:e6:5a:fd:d5:df:d5:da:f3:d3:b8:ad:ac:80:3f:18:3d:
31:ce:87:1c:ba:02:03:1b:b1:38:49:f6:17:68:25:04:3e:1f:
e2:7a:4c:6f:a3:4c:bb:6b:3d:20:a1:e6:93:90:c2:59:6b:eb:
21:73:67:de:85:27:f7:26:bb:16:e9:68:dd:c9:c5:ca:a1:ac:
8f:9c:44:7e:af:1d:6e:ae:d0:2b:c2:54:5e:2f:00:77:9a:21:
ba:a1:02:af:6d:82:94:e6:8e:3e:5e:5d:60:49:38:96:cc:83:
7d:5f:a7:d8:17:46:17:61:8b:9c:27:67:70:e0:33:4a:e6:08:
36:77:b7:92:88:9a:a6:f9:98:fe:52:af:ad:cb:ee:8a:09:28:
8e:a6:eb:72:f0:74:78:a7:40:fd:ac:68:fa:fb:56:01:48:55:
ff:60:dc:b5:40:43:9f:11:e2:26:71:5d:9a:cb:b3:3f:31:bd:
ee:3d:d7:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:43:03 2025 by rpki-client