Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f87263de-03f3-4ca8-b91e-c66fd2256e31/7647b4db-8511-3822-b9e4-a81b15c8588a.roa
File: 7647b4db-8511-3822-b9e4-a81b15c8588a.roa (raw, json)
Hash identifier: gRmu+5bmcRDfn+sSOovw77ILseSwoiphkmUqwlXhGgE=
Subject key identifier: F9:C9:DF:F1:2D:DD:49:50:12:AB:A4:2D:B1:31:C4:EA:11:43:66:CC
Certificate issuer: /CN=f87263de-03f3-4ca8-b91e-c66fd2256e31
Certificate serial: 010D0C9F43285848F7C141252967F072CE670400
Authority key identifier: 87:51:79:C3:0A:FE:8E:F0:D2:87:15:56:A0:53:3B:7E:0E:35:4C:0A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f87263de-03f3-4ca8-b91e-c66fd2256e31.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f87263de-03f3-4ca8-b91e-c66fd2256e31/7647b4db-8511-3822-b9e4-a81b15c8588a.roa
Signing time: Sat 22 Feb 2025 14:00:52 +0000
ROA not before: Sat 22 Feb 2025 14:00:52 +0000
ROA not after: Fri 23 May 2025 13:00:52 +0000
asID: 34465
IP address blocks: 23.147.136.0/24 maxlen: 24
64.40.196.0/22 maxlen: 24
2602:29f:100::/44 maxlen: 48
2602:29f:270::/44 maxlen: 48
2602:29f:310::/44 maxlen: 48
2602:29f:440::/44 maxlen: 48
2602:29f:490::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f7:c1:41:25:29:67:f0:72:ce:67:04:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f87263de-03f3-4ca8-b91e-c66fd2256e31
Validity
Not Before: Feb 22 14:00:52 2025 GMT
Not After : May 23 13:00:52 2025 GMT
Subject: CN=9a7060f9-a429-40f7-80f4-82181dd16b97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a8:9e:5f:7e:0e:da:2f:f0:84:d5:0b:17:32:
14:78:58:bb:09:3f:e1:40:d6:88:d3:af:bc:60:4c:
99:9d:3b:74:36:4c:1a:b6:2e:0a:3a:dd:9c:84:b2:
33:76:5a:72:56:97:a9:dd:bb:1b:3c:26:8a:ac:01:
69:9e:66:ed:70:95:b1:1f:3d:31:41:44:fd:31:6a:
2b:db:e1:b9:03:b3:14:43:3f:06:6d:89:83:e1:aa:
2b:8f:57:9e:d5:0e:b3:7e:9b:3c:a4:8f:a6:42:ec:
8c:8e:d7:a4:98:80:04:e7:45:e4:55:f6:8f:a6:78:
f8:fb:ff:52:1a:17:a7:ef:5e:a4:1b:3c:5a:70:e4:
29:47:a3:b5:04:69:77:59:09:b4:b8:12:7b:73:21:
19:cb:89:71:73:ac:e6:84:17:2b:e4:87:6e:d6:e6:
1b:c1:e1:ef:9c:6f:85:88:a4:22:3f:86:6c:a7:3e:
ae:3d:5c:ce:45:27:d5:f8:b3:71:05:38:46:4e:c9:
02:b4:7d:b0:c9:8e:83:c9:0f:4c:c9:0b:86:f2:0b:
d5:5f:7c:ca:32:6b:67:e7:c0:58:b5:3c:e0:1f:26:
7a:50:c6:b3:4c:1d:62:f9:d4:3c:f6:15:50:06:11:
65:11:d0:e4:52:9a:8a:21:3b:c6:c5:3c:17:cc:c4:
06:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:C9:DF:F1:2D:DD:49:50:12:AB:A4:2D:B1:31:C4:EA:11:43:66:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f87263de-03f3-4ca8-b91e-c66fd2256e31/7647b4db-8511-3822-b9e4-a81b15c8588a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f87263de-03f3-4ca8-b91e-c66fd2256e31/f87263de-03f3-4ca8-b91e-c66fd2256e31.crl
X509v3 Authority Key Identifier:
keyid:87:51:79:C3:0A:FE:8E:F0:D2:87:15:56:A0:53:3B:7E:0E:35:4C:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f87263de-03f3-4ca8-b91e-c66fd2256e31.cer
sbgp-ipAddrBlock: critical
IPv4:
23.147.136.0/24
64.40.196.0/22
IPv6:
2602:29f:100::/44
2602:29f:270::/44
2602:29f:310::/44
2602:29f:440::/44
2602:29f:490::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:5e:3d:9d:16:6d:72:35:cc:f2:fc:72:28:1b:53:e3:5f:01:
ea:fc:69:0e:0c:10:cf:82:4f:5a:26:19:60:b6:29:0a:b4:20:
c6:de:ab:55:c1:99:b1:25:97:2a:59:c8:b8:61:d6:96:72:f0:
9f:3b:1b:a8:a6:71:ad:e5:fd:31:f1:c8:e7:81:c7:4b:0f:e6:
20:5f:b3:0d:81:71:aa:f2:34:b2:2e:59:26:d7:cf:7d:3b:fc:
ed:03:08:3b:a2:b4:ed:3f:ca:74:cd:c6:bf:95:e9:ce:03:2b:
32:a3:6e:61:59:10:15:15:ac:bc:d1:c6:96:7f:0e:0e:bb:15:
d7:f1:ac:3e:56:ac:d3:3d:e2:9c:58:8e:08:e7:5e:6d:98:7a:
5a:74:83:e6:a0:af:4d:57:39:8a:3c:82:eb:c0:cb:e4:90:d0:
d1:11:d7:b7:48:99:73:a9:58:e3:a7:b4:53:a4:fd:64:fd:a7:
0f:0e:09:10:27:74:54:61:87:4d:1d:9c:6b:84:61:e8:68:ad:
63:fe:d0:55:de:90:0c:68:25:e5:42:4d:b0:d3:17:3a:41:45:
cc:eb:6c:99:94:68:cd:de:28:51:3e:b6:64:7e:d4:6e:9e:8f:
8a:4f:ba:31:c1:3d:2f:f7:32:55:5d:08:b9:99:b4:79:06:ad:
4b:93:44:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:00:41 2025 by rpki-client