Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/edecac80-d7c3-48ad-8738-ec98e8c08265/72a9b18c-829a-370b-bfe9-a7a7bf304280.roa
File: 72a9b18c-829a-370b-bfe9-a7a7bf304280.roa (raw, json)
Hash identifier: H7HEqmeAEdo7eXn+M+SORIIbq08V8ua6sMEHbjv5E7A=
Subject key identifier: CE:25:7C:C4:CE:B4:25:14:1E:D8:EB:08:0A:8B:61:48:E8:D7:DB:55
Certificate issuer: /CN=edecac80-d7c3-48ad-8738-ec98e8c08265
Certificate serial: 010D0C9F432858490F7BFD342B45204A8A57DC00
Authority key identifier: 2E:20:36:CA:D5:38:06:D3:8E:AD:50:81:EA:65:9C:73:93:A2:0D:09
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/edecac80-d7c3-48ad-8738-ec98e8c08265.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/edecac80-d7c3-48ad-8738-ec98e8c08265/72a9b18c-829a-370b-bfe9-a7a7bf304280.roa
Signing time: Mon 03 Mar 2025 02:00:39 +0000
ROA not before: Mon 03 Mar 2025 02:00:39 +0000
ROA not after: Sun 01 Jun 2025 01:00:39 +0000
asID: 394475
IP address blocks: 204.246.32.0/21 maxlen: 24
209.35.178.0/24 maxlen: 24
209.35.181.0/24 maxlen: 24
209.35.182.0/24 maxlen: 24
209.35.183.0/24 maxlen: 24
216.185.192.0/20 maxlen: 24
2605:bf40::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0f:7b:fd:34:2b:45:20:4a:8a:57:dc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edecac80-d7c3-48ad-8738-ec98e8c08265
Validity
Not Before: Mar 3 02:00:39 2025 GMT
Not After : Jun 1 01:00:39 2025 GMT
Subject: CN=5b5f8e3a-53c6-4d47-8d4e-c05597f9bc74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a3:9b:cc:f2:da:42:26:65:aa:be:3b:35:dc:
61:fb:42:d5:c7:88:93:0a:11:95:65:18:7e:6c:a2:
8c:56:91:5b:5f:04:bc:6c:6e:76:27:1b:74:0d:b2:
14:b2:ca:29:ab:a7:34:5f:43:e5:d8:f6:85:02:dd:
17:f0:0d:e9:95:d4:86:f3:34:2c:9b:f8:4b:48:20:
fb:31:c1:68:d9:ff:96:0b:55:2d:4d:0f:18:18:2e:
f6:96:8b:e7:0d:57:e1:9f:ca:43:48:93:99:eb:10:
00:f1:d2:40:5f:0b:19:a7:5a:33:88:36:3b:3b:a7:
96:08:81:c0:f1:6e:8a:4a:ed:73:82:c5:fc:81:ba:
3e:42:6a:40:64:ff:1b:6c:4d:c6:e4:ce:f7:c3:a6:
b6:30:4a:e7:2c:ca:85:92:7d:e0:b0:ea:24:5a:70:
2e:d3:61:a4:e2:56:4d:3f:81:ec:45:4a:23:3d:49:
c3:3e:ef:68:29:3e:aa:3e:ba:1c:66:48:0a:af:b0:
89:3d:7a:1b:61:47:75:8d:2e:f1:1f:8f:55:39:83:
64:2c:81:b1:8e:59:00:ce:31:44:3b:3a:17:f4:15:
34:9e:9f:b8:1b:32:08:cb:42:cb:cb:f2:c3:06:68:
f6:25:42:2f:ff:ee:8e:39:9f:cd:8b:ff:a0:c6:07:
f5:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:25:7C:C4:CE:B4:25:14:1E:D8:EB:08:0A:8B:61:48:E8:D7:DB:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/edecac80-d7c3-48ad-8738-ec98e8c08265/72a9b18c-829a-370b-bfe9-a7a7bf304280.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/edecac80-d7c3-48ad-8738-ec98e8c08265/edecac80-d7c3-48ad-8738-ec98e8c08265.crl
X509v3 Authority Key Identifier:
keyid:2E:20:36:CA:D5:38:06:D3:8E:AD:50:81:EA:65:9C:73:93:A2:0D:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/edecac80-d7c3-48ad-8738-ec98e8c08265.cer
sbgp-ipAddrBlock: critical
IPv4:
204.246.32.0/21
209.35.178.0/24
209.35.181.0-209.35.183.255
216.185.192.0/20
IPv6:
2605:bf40::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:46:8b:a1:00:4a:f0:f3:8f:27:f7:7d:b6:f8:f5:27:e9:ec:
c7:fd:20:40:1b:f6:be:5e:69:61:a1:c9:1c:56:e6:5b:0b:ce:
f8:4f:85:5f:14:36:f7:85:6d:2d:6d:a9:97:60:78:3b:a7:93:
e8:3c:6b:b2:6b:f2:c1:04:6c:c2:bd:81:e8:76:c3:a2:a5:32:
d9:16:08:6e:25:8e:b8:8a:a3:3f:98:39:3d:7c:ee:31:e5:ce:
4a:81:8f:0b:18:1a:89:77:ae:dc:54:e0:0b:cc:21:96:de:7e:
36:54:59:5a:73:b1:3f:e8:71:f9:0b:7e:3f:71:fe:9f:25:82:
67:b7:35:c3:a2:21:9d:f0:15:84:61:cb:00:b8:29:bb:df:c8:
7b:fa:17:d4:b7:24:5b:cf:af:0d:57:2d:01:60:6a:06:d2:68:
58:9d:52:5f:a5:36:69:7c:49:3d:9b:d9:63:94:95:55:75:84:
b6:c4:1a:07:3f:4a:04:63:8a:ac:c8:05:6e:45:6d:90:cb:a8:
0d:82:88:71:7d:49:b9:ee:ca:dd:f9:0d:c3:cd:b3:b0:35:f1:
b1:19:19:59:0a:dd:31:58:72:4c:40:9c:ea:03:ef:6c:7c:12:
b3:0d:f4:bc:67:68:a3:92:c2:e8:99:92:b1:26:73:99:fd:93:
4f:cc:cd:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:35:20 2025 by rpki-client