Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/33ddfa22-9459-3852-b3d4-80a4053b362c.roa
File: 33ddfa22-9459-3852-b3d4-80a4053b362c.roa (raw, json)
Hash identifier: urkxTJM9UvOwBmFptp4o7EqNeB1K9nP5UIU+SKth73U=
Subject key identifier: CA:40:38:AC:95:5E:FC:32:BA:BD:C4:3A:C1:DE:BC:56:67:B9:29:C4
Certificate issuer: /CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
Certificate serial: 010D0C9F432858494E2EB2B3EEC650E508969180
Authority key identifier: 2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/33ddfa22-9459-3852-b3d4-80a4053b362c.roa
Signing time: Tue 25 Mar 2025 13:00:51 +0000
ROA not before: Tue 25 Mar 2025 13:00:51 +0000
ROA not after: Mon 23 Jun 2025 13:00:51 +0000
asID: 835
IP address blocks: 23.159.16.0/24 maxlen: 24
74.119.150.0/24 maxlen: 24
104.167.228.0/24 maxlen: 24
207.174.104.0/24 maxlen: 24
2602:fd50::/48 maxlen: 48
2602:fd50:100::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4e:2e:b2:b3:ee:c6:50:e5:08:96:91:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
Validity
Not Before: Mar 25 13:00:51 2025 GMT
Not After : Jun 23 13:00:51 2025 GMT
Subject: CN=8b995149-be18-4125-9b76-9eb35990e12c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ad:39:95:7a:f1:21:03:26:16:7d:79:fd:82:
43:7f:8d:ca:ed:04:2f:41:fc:63:c4:60:99:17:a4:
67:f9:83:b2:99:2d:49:66:ca:f4:e0:2f:1b:53:3a:
0f:4d:02:e5:9c:9e:74:6a:f6:35:a8:d7:42:74:57:
e3:cf:8c:e6:b1:28:53:0c:be:a2:66:1c:30:f7:d3:
cd:76:7d:c1:a5:a5:6f:dd:c3:3b:f0:b2:ed:68:fd:
29:36:13:e8:23:7d:b8:fa:6e:31:91:ce:49:8a:ef:
b2:eb:3d:1b:b0:86:a3:7a:86:88:4b:1e:5f:5a:54:
64:68:a2:34:0f:f2:a2:ad:fa:be:9d:d2:29:a3:eb:
b3:54:61:67:7c:5c:4d:c8:43:8c:19:34:5c:a0:11:
22:14:20:ad:58:4d:b3:08:cf:ba:39:98:95:3e:14:
61:cd:11:28:d3:60:fe:4d:1a:88:af:40:7e:71:55:
7a:85:71:0b:0e:a2:2a:57:af:c9:fe:1a:86:b6:af:
34:4c:87:0c:bd:4a:33:c2:82:35:50:df:7a:d6:46:
56:ac:24:00:2b:77:f4:03:fd:44:c8:02:4b:1d:a7:
3e:fb:99:18:f5:5b:d2:e9:4a:65:6f:74:4d:c4:34:
89:52:21:7e:2e:91:bb:25:69:a8:4a:a9:e4:d4:10:
66:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:40:38:AC:95:5E:FC:32:BA:BD:C4:3A:C1:DE:BC:56:67:B9:29:C4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/33ddfa22-9459-3852-b3d4-80a4053b362c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.crl
X509v3 Authority Key Identifier:
keyid:2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer
sbgp-ipAddrBlock: critical
IPv4:
23.159.16.0/24
74.119.150.0/24
104.167.228.0/24
207.174.104.0/24
IPv6:
2602:fd50::/48
2602:fd50:100::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:37:82:34:6b:bc:9a:be:84:95:12:a2:93:da:7f:fc:6d:0d:
e4:aa:46:6b:36:09:b7:bd:31:b4:e9:66:59:08:69:ad:cb:8b:
a7:ce:16:79:95:05:71:29:cb:38:dd:fb:ad:eb:55:7c:fd:48:
11:0b:f7:40:65:95:7a:8e:51:d1:af:f9:2d:27:7f:dc:33:11:
ef:46:f8:50:b7:6a:c8:ef:02:00:99:1f:00:a6:41:8a:30:f7:
d7:20:4c:67:d8:c7:f2:e5:fd:58:70:cd:65:77:09:a4:ff:e8:
dc:b8:08:45:ca:60:cb:57:5f:ca:eb:64:7f:31:fb:74:53:cd:
9f:5e:5c:c7:c7:84:f1:bb:0a:61:9b:63:d8:5b:ff:59:a2:72:
9a:0d:07:b0:a8:8e:bb:76:cb:50:90:3a:d3:48:43:b4:02:3c:
5c:5d:7c:8d:ce:92:48:bb:c6:44:27:f4:85:53:52:23:3a:b4:
e6:9d:6c:0c:87:cd:24:ac:71:4a:b0:d2:ed:df:cf:6b:5e:82:
83:e6:75:0d:f5:cd:16:b7:bd:87:66:a4:fc:25:75:ae:dc:79:
d5:91:89:fd:16:0f:19:6e:d9:33:a4:99:67:ac:dd:25:10:77:
87:e8:c0:3c:de:62:76:34:a7:36:30:83:b6:92:78:56:01:0b:
ee:27:27:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:49:30 2025 by rpki-client