Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45366c7b-8de5-4622-9f3d-89bb36e57df5/c830abb1-8081-3ae6-93ef-70c36f800c3c.roa
File: c830abb1-8081-3ae6-93ef-70c36f800c3c.roa (raw, json)
Hash identifier: EakLAwl5pypb3B0uYvAMpVSH6er7OjwOXR2syCRPXSY=
Subject key identifier: AE:27:2F:BE:19:63:27:4E:68:AB:8F:DD:8F:64:39:6E:85:7D:CD:D8
Certificate issuer: /CN=45366c7b-8de5-4622-9f3d-89bb36e57df5
Certificate serial: 010D0C9F43285849176AD19D0905E2DDB6ABAE00
Authority key identifier: AF:BF:85:DF:F0:14:8F:E3:C6:66:08:E2:00:0C:82:25:FE:EF:98:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45366c7b-8de5-4622-9f3d-89bb36e57df5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45366c7b-8de5-4622-9f3d-89bb36e57df5/c830abb1-8081-3ae6-93ef-70c36f800c3c.roa
Signing time: Wed 05 Mar 2025 22:12:39 +0000
ROA not before: Wed 05 Mar 2025 22:12:39 +0000
ROA not after: Tue 03 Jun 2025 21:12:39 +0000
asID: 1299
IP address blocks: 104.245.248.0/21 maxlen: 24
146.71.16.0/20 maxlen: 24
160.79.80.0/20 maxlen: 24
161.115.16.0/20 maxlen: 24
192.30.160.0/20 maxlen: 24
2606:c440::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:17:6a:d1:9d:09:05:e2:dd:b6:ab:ae:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45366c7b-8de5-4622-9f3d-89bb36e57df5
Validity
Not Before: Mar 5 22:12:39 2025 GMT
Not After : Jun 3 21:12:39 2025 GMT
Subject: CN=0a5eda98-a424-44e0-88e3-b25a73a3608f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c8:2f:45:26:92:8d:36:22:96:36:e9:8c:2e:
b9:3e:78:c7:cd:54:4d:0e:7a:36:dc:9d:1c:f6:bf:
71:b1:b2:a2:7b:f1:f2:08:d2:3f:30:0d:ba:ae:7f:
6e:fa:e7:26:03:17:39:00:dd:89:fd:30:bc:a0:80:
59:c1:2d:82:44:cb:66:7a:19:ad:da:ce:cb:80:7c:
3e:bf:da:2e:51:39:c1:98:43:41:9b:e1:d0:0e:33:
35:4d:40:aa:8b:a0:8b:96:75:3e:32:0a:52:db:05:
9d:90:34:32:28:09:ca:1a:42:0c:3c:31:dc:c4:d4:
7a:93:13:de:ff:25:15:ee:ff:71:57:d1:57:63:73:
ab:71:1e:e7:c6:1d:1e:5c:d4:a4:17:00:c4:f8:64:
8d:10:09:cd:2e:87:69:38:dc:1a:c5:b4:fb:2e:29:
cf:44:c5:1f:cc:2a:c3:2f:01:c2:41:eb:60:58:9d:
4d:ef:3e:0a:75:15:56:c6:02:e3:24:fc:43:5f:dd:
60:41:b9:cd:d8:42:32:ac:c9:bd:b2:09:c9:18:33:
18:c5:e7:74:75:ea:9b:a1:00:44:06:3b:e6:b4:96:
31:4e:56:04:ae:9c:41:84:d0:02:49:cc:0f:a2:4e:
89:d5:d3:c7:4e:9e:68:69:62:1b:46:a0:fa:a5:f6:
c6:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:27:2F:BE:19:63:27:4E:68:AB:8F:DD:8F:64:39:6E:85:7D:CD:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45366c7b-8de5-4622-9f3d-89bb36e57df5/c830abb1-8081-3ae6-93ef-70c36f800c3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45366c7b-8de5-4622-9f3d-89bb36e57df5/45366c7b-8de5-4622-9f3d-89bb36e57df5.crl
X509v3 Authority Key Identifier:
keyid:AF:BF:85:DF:F0:14:8F:E3:C6:66:08:E2:00:0C:82:25:FE:EF:98:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45366c7b-8de5-4622-9f3d-89bb36e57df5.cer
sbgp-ipAddrBlock: critical
IPv4:
104.245.248.0/21
146.71.16.0/20
160.79.80.0/20
161.115.16.0/20
192.30.160.0/20
IPv6:
2606:c440::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:32:98:3d:70:64:95:6e:5f:65:85:71:be:a9:a3:f6:c6:80:
01:1c:08:52:5c:d1:ec:d7:22:ab:c0:1f:f9:0a:5e:67:22:16:
94:1f:83:c9:7c:21:49:c2:4a:80:43:8a:4c:19:2f:51:6b:6b:
00:d8:c1:42:b6:8e:9e:ca:80:85:b0:a6:e7:85:b8:a6:c0:47:
10:31:24:e5:1b:27:36:8f:7a:71:8e:bf:2f:74:dd:fd:0c:3d:
c8:72:67:79:df:fa:e8:85:cc:38:d4:a4:d1:44:51:16:0f:58:
93:2f:e0:66:eb:4d:1c:c9:e4:85:a6:5d:f4:c9:e7:06:e3:de:
4e:21:cb:b7:ca:82:46:e8:94:df:1a:e8:cd:e1:47:b5:5e:b0:
63:59:4d:44:6a:de:cd:19:b3:6d:bd:ea:9f:57:81:a1:f7:28:
11:8d:45:1d:1b:d0:70:2b:8a:1c:b7:a7:1a:4d:af:7e:07:d8:
52:85:f6:35:68:1b:ce:90:4e:b6:35:83:31:ed:ea:6a:e6:15:
d4:0f:3a:d7:17:ad:b0:4b:a4:49:7f:1b:7b:a3:d1:3e:52:e3:
6d:cd:f7:52:e6:9e:dd:52:bd:17:8a:a9:03:9e:37:4f:c1:6d:
66:0f:dc:47:20:bd:03:b8:80:62:6b:65:e2:38:2e:99:29:5d:
c9:07:4d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:35:56 2025 by rpki-client