Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/0bb4a0d3-795a-3daf-b536-e6adaa95796a.roa
File: 0bb4a0d3-795a-3daf-b536-e6adaa95796a.roa (raw, json)
Hash identifier: 43moTOsRJCcEb7PS38luVpQvW6AbNrBJo64bVl1hGDQ=
Subject key identifier: 50:04:58:94:20:53:7E:F2:D8:88:BB:4E:47:66:7D:30:C3:27:32:27
Certificate issuer: /CN=05ec8359-4ede-4036-8702-23e5dd37a9ba
Certificate serial: 010D0C9F43285848D210E5F854C02272E0EBF580
Authority key identifier: 36:0A:E8:03:24:2B:BA:C6:75:78:32:2C:14:A5:B9:5D:11:5A:00:90
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/0bb4a0d3-795a-3daf-b536-e6adaa95796a.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 912
IP address blocks: 64.72.224.0/24 maxlen: 24
64.72.226.0/23 maxlen: 24
67.21.192.0/24 maxlen: 24
67.226.190.0/24 maxlen: 24
72.15.144.0/20 maxlen: 24
74.122.128.0/21 maxlen: 24
162.213.8.0/22 maxlen: 24
173.212.191.0/24 maxlen: 24
192.69.132.0/22 maxlen: 24
199.7.232.0/21 maxlen: 24
199.68.176.0/22 maxlen: 24
199.68.181.0/24 maxlen: 24
199.68.182.0/24 maxlen: 24
199.188.70.0/24 maxlen: 24
207.54.126.0/24 maxlen: 24
208.66.0.0/22 maxlen: 24
208.83.208.0/24 maxlen: 24
208.83.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:10:e5:f8:54:c0:22:72:e0:eb:f5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05ec8359-4ede-4036-8702-23e5dd37a9ba
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=e85f0100-5010-45b2-a2f1-8012a1043056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b7:8f:41:35:43:33:0a:52:ca:66:a4:78:d5:
ef:06:03:66:a6:46:66:d0:fd:0d:69:3f:c1:56:91:
44:35:fa:b3:e0:dc:cc:9c:81:39:17:dd:35:aa:bc:
cf:02:c8:47:2c:a6:f4:d0:98:f7:22:cb:f0:c2:a5:
a4:0c:0d:f3:1e:7c:3e:13:18:07:95:7d:0a:7d:1b:
21:d6:a0:a7:b6:78:55:98:be:e3:94:88:40:dc:d6:
bf:f1:28:af:d0:bd:f9:0b:b4:dd:05:8f:92:fa:7f:
fa:d8:b1:19:9e:54:40:b8:7f:e7:ef:6b:39:40:ea:
eb:f3:84:49:2c:18:26:db:52:ee:04:6b:a4:ff:75:
9b:72:1b:2d:fe:24:1e:28:9b:62:9b:46:ee:19:af:
19:48:21:2b:d1:1c:f3:61:bc:74:c9:b9:25:b0:04:
71:50:c4:4c:1e:35:df:3c:02:32:f2:c4:07:cf:c7:
46:70:dd:e6:f4:33:05:a0:7f:fc:6a:db:56:1f:d0:
20:1c:39:17:d0:ea:bc:91:94:e1:60:ee:61:b2:e6:
b5:fc:f9:d7:70:81:1e:31:65:38:1a:dd:26:0c:85:
d9:fe:db:31:04:c7:15:95:fc:3e:49:07:92:d3:97:
f6:79:42:2d:93:12:09:a1:98:e6:e7:68:db:78:4f:
42:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:04:58:94:20:53:7E:F2:D8:88:BB:4E:47:66:7D:30:C3:27:32:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/0bb4a0d3-795a-3daf-b536-e6adaa95796a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/05ec8359-4ede-4036-8702-23e5dd37a9ba.crl
X509v3 Authority Key Identifier:
keyid:36:0A:E8:03:24:2B:BA:C6:75:78:32:2C:14:A5:B9:5D:11:5A:00:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba.cer
sbgp-ipAddrBlock: critical
IPv4:
64.72.224.0/24
64.72.226.0/23
67.21.192.0/24
67.226.190.0/24
72.15.144.0/20
74.122.128.0/21
162.213.8.0/22
173.212.191.0/24
192.69.132.0/22
199.7.232.0/21
199.68.176.0/22
199.68.181.0-199.68.182.255
199.188.70.0/24
207.54.126.0/24
208.66.0.0/22
208.83.208.0/24
208.83.212.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:24:a2:80:00:0e:57:87:7e:87:60:88:98:a3:70:28:38:5f:
9b:1e:8f:7c:e8:61:51:06:b1:f9:2f:51:79:2c:1a:7c:e6:cd:
8e:0b:e9:56:82:f3:a1:a0:b5:af:f9:c5:df:5f:f7:85:ad:4c:
c6:a1:94:42:15:14:15:fa:d8:1b:98:1c:e9:5a:81:b4:aa:05:
0c:9a:6c:57:a8:e1:2f:98:e8:a4:31:c3:e1:f2:6c:1c:e3:0c:
4d:99:e2:5b:5c:07:58:15:f7:5b:9d:a2:76:d3:da:25:53:42:
64:8c:bc:c5:fe:ab:26:d1:dd:0e:e0:a4:fe:fd:fd:05:64:05:
ac:9b:bf:8e:d0:bc:fc:94:be:7c:bf:3d:36:a8:1a:fb:32:6d:
49:cd:e0:38:c3:3e:0f:a1:26:5a:a0:d7:4f:b5:76:7d:6f:fb:
51:95:c6:8e:e7:ca:b6:0f:5f:f1:07:62:2a:b1:37:5c:f5:f2:
67:d0:09:54:09:46:33:d7:97:d5:6e:b0:74:f9:33:20:f4:e2:
a3:f3:76:db:07:29:dc:7a:ab:1e:a8:a6:53:e2:7f:d4:0b:12:
37:c4:0b:f4:24:a0:1e:8f:d1:61:86:47:e8:b0:c9:ff:3b:1c:
db:a5:cf:53:5e:56:4b:ca:74:2c:30:45:00:ba:a3:79:a4:c0:
77:aa:5a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:29:42 2025 by rpki-client