Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/33097e36-cef3-418b-a895-cacb797d1eeb/6bbc85fd-c9a6-3fe6-a0ad-ac878b243f76.roa
File: 6bbc85fd-c9a6-3fe6-a0ad-ac878b243f76.roa (raw, json)
Hash identifier: 4kzSxZZ5IdrlRvXmb4C+agP2OGirNAXFHYbu3/Tzo7o=
Subject key identifier: B4:70:52:13:21:60:12:6F:35:4A:DF:F3:93:C5:E5:97:53:FA:7D:FA
Certificate issuer: /CN=33097e36-cef3-418b-a895-cacb797d1eeb
Certificate serial: 010D0C9F432858487CEB2844B6E9AB986A499850
Authority key identifier: F3:D2:56:2B:76:FF:3B:36:71:0B:45:B0:C7:99:53:16:86:A7:8F:F2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/33097e36-cef3-418b-a895-cacb797d1eeb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/33097e36-cef3-418b-a895-cacb797d1eeb/6bbc85fd-c9a6-3fe6-a0ad-ac878b243f76.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 10958
IP address blocks: 147.161.4.0/22 maxlen: 32
162.216.108.0/22 maxlen: 32
162.216.208.0/21 maxlen: 32
198.62.181.0/24 maxlen: 32
208.68.56.0/22 maxlen: 32
208.80.144.0/21 maxlen: 32
208.91.176.0/21 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:28:44:b6:e9:ab:98:6a:49:98:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33097e36-cef3-418b-a895-cacb797d1eeb
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=63ff713a-9bea-402b-bc6f-91d7207a04cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:da:fb:09:0d:44:7d:86:17:6c:6e:08:45:02:
65:94:27:6e:1e:29:15:12:0f:be:ea:4a:21:34:46:
ae:a1:57:fc:53:30:f8:c2:83:3b:bf:80:7e:49:d5:
52:1b:c1:dc:44:57:16:d1:5c:61:0c:f8:08:c8:bf:
57:a2:07:1b:12:5d:42:ef:7d:ae:b9:e4:ed:e2:2f:
17:96:6c:59:06:89:cb:32:0e:76:0b:00:09:d7:32:
79:83:91:e2:ca:d0:64:81:40:f3:0a:a5:96:f8:3d:
6f:2c:50:3a:89:19:af:37:f4:93:0c:7e:67:23:3a:
91:5a:88:da:27:ad:c0:75:f5:5a:89:6f:2c:3d:77:
1b:9e:94:25:e8:56:c2:65:bd:27:fc:06:4c:5e:e2:
86:d3:3f:34:a6:34:1e:fa:53:36:a5:91:00:9c:de:
24:31:74:4d:82:8a:29:5d:a4:02:32:f6:79:fe:67:
5e:40:1e:06:f1:df:f1:da:0e:16:9b:2d:12:d8:01:
3d:fa:0d:d9:b9:91:57:79:78:30:31:57:3b:11:08:
55:6e:ce:e6:00:60:8b:f0:47:53:ec:c3:37:2d:87:
a9:34:c4:6d:9a:d0:08:24:c2:9c:bd:3f:7d:d2:de:
b1:10:b0:a2:4a:02:bd:e5:cb:0f:cb:da:9f:af:59:
fa:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:70:52:13:21:60:12:6F:35:4A:DF:F3:93:C5:E5:97:53:FA:7D:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/33097e36-cef3-418b-a895-cacb797d1eeb/6bbc85fd-c9a6-3fe6-a0ad-ac878b243f76.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/33097e36-cef3-418b-a895-cacb797d1eeb/33097e36-cef3-418b-a895-cacb797d1eeb.crl
X509v3 Authority Key Identifier:
keyid:F3:D2:56:2B:76:FF:3B:36:71:0B:45:B0:C7:99:53:16:86:A7:8F:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/33097e36-cef3-418b-a895-cacb797d1eeb.cer
sbgp-ipAddrBlock: critical
IPv4:
147.161.4.0/22
162.216.108.0/22
162.216.208.0/21
198.62.181.0/24
208.68.56.0/22
208.80.144.0/21
208.91.176.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:ae:eb:67:fe:20:b6:1e:f4:eb:96:5d:94:b8:c6:f9:62:f9:
92:6a:01:1d:b5:98:ca:01:8b:e3:3c:7e:08:de:14:22:1f:b3:
14:cf:4f:a0:c8:83:b6:13:08:02:7a:8a:81:95:0a:65:fd:b4:
f4:db:cc:fa:d1:ad:3e:6f:17:cd:d8:22:48:59:b5:72:4c:f6:
c8:65:65:7d:ce:42:a7:88:2c:99:3b:61:a8:7e:95:22:5c:6c:
85:ff:b4:87:bd:9d:65:7d:67:63:f1:fb:e9:73:af:86:36:45:
06:38:ec:a7:41:24:3a:12:31:91:92:ce:05:8e:fe:3f:2f:b0:
9a:e0:6d:ab:b4:72:e3:17:47:25:fa:42:e5:d4:fd:12:85:9d:
49:3c:d1:e4:f7:0a:b5:ef:3b:b9:bc:99:80:4e:65:6d:91:c6:
30:a4:8a:4c:ac:7e:17:c3:e9:4d:b6:a9:8f:a6:51:48:81:b0:
31:47:6a:43:bf:4b:a5:c2:89:7a:6a:6a:21:1c:ba:17:49:8e:
52:bf:9c:f5:13:11:d0:8f:1b:c6:c1:db:e1:9b:63:42:2e:6d:
f1:10:5c:45:59:9a:8f:c5:2b:82:53:35:50:f1:a3:ed:e5:dd:
0f:38:7f:27:c7:f4:c5:97:3b:93:1b:10:ee:d7:17:76:83:0f:
d7:86:c4:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:25:33 2025 by rpki-client