Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/c2709bb2-a4fd-3cdf-be31-74b81fdaa856.roa
File: c2709bb2-a4fd-3cdf-be31-74b81fdaa856.roa (raw, json)
Hash identifier: GndTj74+arJLOBXPTScSbRHSifMaWQm8ZJSSvE0kNuo=
Subject key identifier: 64:C0:51:D3:9E:72:AB:3E:66:F1:7F:E3:DE:DE:C1:A5:37:45:55:2B
Certificate issuer: /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
Certificate serial: 010D0C9F43285849287E529175943663F9318B50
Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/c2709bb2-a4fd-3cdf-be31-74b81fdaa856.roa
Signing time: Wed 12 Mar 2025 01:00:39 +0000
ROA not before: Wed 12 Mar 2025 01:00:39 +0000
ROA not after: Tue 10 Jun 2025 01:00:39 +0000
asID: 394094
IP address blocks: 72.249.184.0/24 maxlen: 24
173.237.184.0/24 maxlen: 24
174.136.40.0/24 maxlen: 24
174.136.44.0/24 maxlen: 24
174.136.48.0/24 maxlen: 24
207.210.233.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:28:7e:52:91:75:94:36:63:f9:31:8b:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
Validity
Not Before: Mar 12 01:00:39 2025 GMT
Not After : Jun 10 01:00:39 2025 GMT
Subject: CN=36c3409e-d061-4543-af0f-16e4d3c502f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ed:8c:d9:8f:d8:d5:f2:7b:1e:b7:1d:2f:f9:
93:cb:33:ea:21:38:7a:a1:90:8e:af:ef:96:32:55:
2e:86:84:d9:1a:5b:55:2b:5d:3c:f6:64:df:5f:68:
04:b7:60:97:d9:65:28:ee:16:c7:2c:3a:d9:ab:57:
12:d4:c5:af:d4:44:f7:14:7c:9f:9a:70:d0:70:bf:
2e:6e:bd:91:ff:9e:04:e7:6d:31:94:6e:41:7d:18:
f4:ca:3b:df:1c:9e:08:47:f8:82:69:2f:79:74:cd:
88:95:d5:14:1c:eb:c5:a8:6c:35:ce:91:06:c6:b6:
cb:85:1a:7c:81:e6:11:0b:ec:d3:03:db:97:1c:80:
01:5c:0a:0f:ae:ad:65:b2:76:e0:29:7e:25:ac:2f:
3a:78:9d:bf:99:2d:9e:df:9b:16:d0:c7:01:fb:38:
e3:60:c1:7a:8b:40:f4:de:1b:5a:8c:e9:57:3f:94:
f4:6e:0b:04:57:7a:e5:0f:51:d3:e7:1f:fb:13:b9:
25:e4:23:2d:11:3b:fa:e9:ba:c5:76:5f:b1:d8:a4:
56:8e:7a:30:64:7b:d2:55:76:3e:c0:be:a1:0f:62:
4f:25:b8:4c:15:b1:1f:fd:ed:ef:e9:a7:a2:91:68:
45:29:f0:f0:6a:20:2b:34:a6:86:7d:d1:50:29:83:
ad:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:C0:51:D3:9E:72:AB:3E:66:F1:7F:E3:DE:DE:C1:A5:37:45:55:2B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/c2709bb2-a4fd-3cdf-be31-74b81fdaa856.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl
X509v3 Authority Key Identifier:
keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
sbgp-ipAddrBlock: critical
IPv4:
72.249.184.0/24
173.237.184.0/24
174.136.40.0/24
174.136.44.0/24
174.136.48.0/24
207.210.233.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:f2:6e:1a:07:16:05:47:b5:89:b1:e8:31:04:1d:e2:0a:b2:
4a:0c:71:34:a0:bf:96:63:b0:ff:32:4c:bb:76:83:d3:83:75:
44:e4:49:54:fb:67:85:10:70:b9:e3:aa:5e:7e:2c:1a:f0:fd:
f8:14:38:5e:6f:8c:e7:9a:51:3f:ba:3b:f4:0c:f1:2b:26:a3:
30:83:71:be:6d:c0:2f:03:96:f7:28:cd:9d:f5:91:0f:c8:32:
7a:5c:5a:e7:db:f7:3c:94:9c:a2:f3:b4:62:ce:5d:43:84:d1:
2f:80:15:78:f4:f5:1a:81:64:6c:81:ac:9c:e3:4a:e6:08:00:
70:63:7e:ab:4c:f6:9d:f5:d9:d6:77:99:3e:37:35:7f:f8:cf:
f1:dc:94:38:a0:19:6d:50:40:69:7c:a1:69:81:fa:d4:6e:b0:
2e:48:15:4e:b6:1e:3d:99:fa:c0:4c:c0:59:05:59:90:ee:79:
6e:9e:e5:10:cc:09:9a:1d:17:33:ad:73:f0:36:0d:7b:0a:b3:
db:8c:b3:a5:be:56:7c:9d:ae:37:64:e5:27:bf:5a:57:1d:71:
ca:bd:18:79:30:f0:7b:4e:2c:f1:f7:a0:d6:21:d3:fc:a6:ab:
8c:d7:9b:2d:1f:30:e5:86:b5:4f:7f:8a:5a:26:ba:32:6d:75:
47:69:15:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:47:46 2025 by rpki-client