Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c/215c8ebe-db0e-33af-bc37-3ddc421bcdd1.roa
File: 215c8ebe-db0e-33af-bc37-3ddc421bcdd1.roa (raw, json)
Hash identifier: RdNRNHmUvJcnZ0focauPXu9z0KACJMCoOofZDUb5PAI=
Subject key identifier: 03:00:52:59:04:51:CF:26:90:00:58:B9:A5:95:F3:31:2C:D3:29:84
Certificate issuer: /CN=8b7074c2-7c8f-41ac-8307-74ece44a460c
Certificate serial: 010D0C9F43285848B1F62CA6154E52B04BFC92C0
Authority key identifier: C1:CC:88:BC:4A:C0:09:D7:61:48:C3:D1:C3:B2:52:40:69:D5:9F:01
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c/215c8ebe-db0e-33af-bc37-3ddc421bcdd1.roa
Signing time: Tue 28 Jan 2025 14:00:52 +0000
ROA not before: Tue 28 Jan 2025 14:00:52 +0000
ROA not after: Mon 28 Apr 2025 13:00:52 +0000
asID: 33362
IP address blocks: 64.77.213.0/24 maxlen: 24
64.77.216.0/23 maxlen: 24
64.77.218.0/24 maxlen: 24
72.14.97.0/24 maxlen: 24
72.14.119.0/24 maxlen: 24
72.14.126.0/24 maxlen: 24
97.75.255.0/24 maxlen: 24
208.101.227.0/24 maxlen: 24
208.101.234.0/23 maxlen: 24
208.101.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b1:f6:2c:a6:15:4e:52:b0:4b:fc:92:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b7074c2-7c8f-41ac-8307-74ece44a460c
Validity
Not Before: Jan 28 14:00:52 2025 GMT
Not After : Apr 28 13:00:52 2025 GMT
Subject: CN=94791ad3-8577-498c-9cf4-63d0d4b5d845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d2:a9:c0:78:4f:1f:a0:26:5a:3e:47:c7:dd:
68:86:2e:aa:b5:ad:a3:df:9d:8e:37:a4:25:ff:97:
26:11:78:09:9f:a5:0a:1d:10:d1:7e:af:1d:24:3f:
c5:50:ed:c9:bc:4c:aa:73:03:de:57:6e:dd:3a:43:
e5:88:10:6b:cb:e4:ae:bd:df:b2:b4:dc:53:58:8a:
c1:95:89:41:b2:a8:34:f3:0f:dd:6e:54:08:16:9c:
42:ae:d4:dd:81:c8:c3:a9:eb:da:75:54:74:39:2a:
d8:ad:a2:59:34:39:ba:78:f4:b6:4e:04:7f:53:b0:
7b:bc:4c:c1:eb:ff:45:bc:16:b8:48:a9:c7:7a:49:
b9:3b:08:35:cf:d7:31:fd:f6:60:ef:e8:f0:8e:47:
fe:50:1c:f9:36:22:37:e2:59:f1:9d:9f:51:a2:41:
d5:ba:b4:58:71:1f:a1:49:45:f4:50:46:4e:ce:a0:
98:44:67:2a:aa:ff:f1:54:d3:d0:ea:6c:a3:4c:8e:
71:90:e1:92:8c:c0:29:e4:df:43:90:ab:96:6a:51:
db:3b:79:41:09:36:47:e7:b1:ff:45:18:98:98:4c:
51:d4:df:4c:36:1f:9e:50:a8:7e:5a:96:70:89:b9:
d9:a3:65:71:78:37:9f:20:63:40:8e:d4:45:9f:b4:
4a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:00:52:59:04:51:CF:26:90:00:58:B9:A5:95:F3:31:2C:D3:29:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c/215c8ebe-db0e-33af-bc37-3ddc421bcdd1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c/8b7074c2-7c8f-41ac-8307-74ece44a460c.crl
X509v3 Authority Key Identifier:
keyid:C1:CC:88:BC:4A:C0:09:D7:61:48:C3:D1:C3:B2:52:40:69:D5:9F:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c.cer
sbgp-ipAddrBlock: critical
IPv4:
64.77.213.0/24
64.77.216.0-64.77.218.255
72.14.97.0/24
72.14.119.0/24
72.14.126.0/24
97.75.255.0/24
208.101.227.0/24
208.101.234.0-208.101.236.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:d1:b8:fe:83:5e:1b:97:b8:5f:dd:1d:d9:e5:10:4d:62:a9:
5f:89:91:23:09:01:98:c6:d7:52:e1:9d:af:b3:85:15:2a:12:
6e:34:a8:2e:2c:75:1e:a5:0a:f8:b3:2b:28:53:a6:a2:81:fa:
4a:0d:61:83:26:21:84:fa:7e:a3:59:b8:bf:6d:8a:ae:ef:2a:
ba:58:df:82:08:cd:cd:af:ff:e0:33:1f:34:c9:6b:ce:45:ae:
b9:3f:1c:63:c9:de:d2:c7:36:ef:a8:c6:74:71:f6:ae:4a:c6:
da:ff:99:f2:4d:b8:64:c6:e7:c0:d5:97:62:f6:4b:bd:a2:11:
cf:86:4b:a0:31:19:71:f2:03:26:fb:d8:a8:2e:93:b5:85:ed:
d6:b8:db:a7:08:ee:1c:d0:e5:8f:0f:7c:51:a6:0f:16:f4:0b:
2f:3c:63:74:48:e9:36:69:7d:c1:5a:53:85:c7:77:75:88:2a:
81:09:aa:0d:85:d7:be:21:50:05:ce:1d:a9:35:98:bb:75:14:
d4:d2:b1:c4:75:c5:eb:9d:65:79:15:cc:3d:23:40:06:38:29:
e4:32:19:2e:85:c8:9a:6e:a1:e5:58:9a:44:da:51:c0:73:51:
9e:8e:ec:19:d9:03:5a:33:6e:ee:2f:e1:e5:1e:34:a5:f7:e0:
19:66:14:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:17:38 2025 by rpki-client