Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/2830edbf-9e71-3059-846a-67d31308418b.roa
File: 2830edbf-9e71-3059-846a-67d31308418b.roa (raw, json)
Hash identifier: TV0E+P8q7IRUkKbWYrhSdysijwf0PtHc9JMrKW30/2E=
Subject key identifier: 46:EA:D6:A4:79:67:EF:61:FD:4C:6C:09:3C:65:87:EC:9C:CB:72:86
Certificate issuer: /CN=7e4eda42-1b89-4124-8a06-63381278375d
Certificate serial: 010D0C9F432858493C0938FFDF2120937C8BBE00
Authority key identifier: 8A:4F:5E:F7:FA:39:D8:47:50:32:90:17:1C:E3:C3:CB:E6:D3:B0:62
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/2830edbf-9e71-3059-846a-67d31308418b.roa
Signing time: Wed 19 Mar 2025 01:00:40 +0000
ROA not before: Wed 19 Mar 2025 01:00:40 +0000
ROA not after: Tue 17 Jun 2025 01:00:40 +0000
asID: 4213
IP address blocks: 23.130.96.0/23 maxlen: 24
45.41.212.0/22 maxlen: 24
45.45.240.0/22 maxlen: 24
162.253.212.0/22 maxlen: 24
204.10.89.0/24 maxlen: 24
209.160.96.0/22 maxlen: 24
2602:fe6b::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3c:09:38:ff:df:21:20:93:7c:8b:be:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e4eda42-1b89-4124-8a06-63381278375d
Validity
Not Before: Mar 19 01:00:40 2025 GMT
Not After : Jun 17 01:00:40 2025 GMT
Subject: CN=60bbda0c-2362-46aa-83f0-9670c921e9f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:70:18:1e:0e:af:c3:68:20:a8:5c:02:2d:d7:
7c:88:89:07:e0:e0:e5:82:35:9c:29:f3:b0:48:15:
35:e3:92:b6:75:81:71:68:eb:85:54:f2:89:de:b2:
a5:56:30:7d:24:3e:e3:80:2b:07:5c:4f:e6:e8:8c:
94:d5:3e:a1:06:e4:11:73:94:82:8a:b7:d2:f0:cd:
fd:ef:41:19:62:0a:6c:1a:50:1f:4c:4e:31:86:72:
38:c8:ab:69:c9:29:65:5d:0b:ff:3c:54:2a:32:74:
7b:fe:8a:cf:68:4f:f9:af:9b:d1:5b:64:6f:80:5c:
ff:22:88:67:5c:48:d0:1a:64:7a:f1:a1:bd:f4:70:
12:da:3f:aa:db:32:d5:b6:a4:14:26:fe:72:6f:8f:
4d:5f:5e:16:9b:aa:d2:b7:1d:1a:d9:72:1d:f3:bd:
58:5a:53:ce:ed:76:32:9c:d4:d9:c7:e7:ee:f1:92:
42:9d:4a:23:d2:8d:74:34:43:a0:66:1e:57:0f:4b:
22:ff:5f:73:db:46:6d:f5:9e:8f:46:f2:ed:1f:30:
f5:54:9c:98:97:bc:43:07:1a:15:da:07:4f:3b:4b:
13:13:1a:42:b3:2f:1d:09:55:8f:bb:24:2a:0d:f2:
3d:88:3d:b9:32:01:6b:85:c7:6b:13:16:aa:18:73:
f5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:EA:D6:A4:79:67:EF:61:FD:4C:6C:09:3C:65:87:EC:9C:CB:72:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/2830edbf-9e71-3059-846a-67d31308418b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/7e4eda42-1b89-4124-8a06-63381278375d.crl
X509v3 Authority Key Identifier:
keyid:8A:4F:5E:F7:FA:39:D8:47:50:32:90:17:1C:E3:C3:CB:E6:D3:B0:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d.cer
sbgp-ipAddrBlock: critical
IPv4:
23.130.96.0/23
45.41.212.0/22
45.45.240.0/22
162.253.212.0/22
204.10.89.0/24
209.160.96.0/22
IPv6:
2602:fe6b::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:d8:8e:e7:5b:ec:d1:5f:86:3e:30:43:03:cb:03:a1:e9:b0:
df:81:fb:64:be:3e:ec:0f:11:30:89:5a:1e:f9:c7:0b:4b:40:
a5:d7:4a:c6:9f:38:c3:63:e0:08:20:50:e9:fc:52:8b:d9:d2:
f1:32:dd:5c:9c:15:59:59:63:cb:dd:35:0f:03:4d:d6:23:7a:
10:87:1b:e0:91:d4:87:bb:3e:65:4c:17:af:ac:02:50:35:c7:
a6:83:15:27:15:c2:a4:33:da:b7:0c:68:d9:85:3b:9a:15:c5:
dd:fc:72:ff:6b:3f:10:e9:db:d1:9e:75:42:97:74:4f:14:fc:
50:25:c2:25:3b:c2:97:f2:1c:99:dd:b2:85:b4:fb:7f:6a:f9:
5e:28:1d:f8:00:1d:0a:50:58:bd:fb:1a:b3:23:9e:eb:0d:d9:
22:89:71:45:0d:7c:fa:f9:26:27:18:9d:f0:98:b0:76:88:ba:
ca:da:d2:16:57:18:8d:71:c0:af:df:8b:67:f6:e9:63:95:08:
9e:3e:d3:0c:9b:3a:a4:7a:49:ad:1a:c5:d1:e1:10:0b:5d:44:
51:9d:5c:93:1b:3c:26:b7:37:77:fd:a7:b3:18:6b:0c:fe:87:
90:7a:fb:5d:c3:ed:a0:19:7f:3b:9c:ec:e2:7a:53:d4:9a:06:
8b:6c:24:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:21:01 2025 by rpki-client