Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/33a9ddc2-deb3-3384-ac02-7422445b9b79.roa
File: 33a9ddc2-deb3-3384-ac02-7422445b9b79.roa (raw, json)
Hash identifier: BOXKriMVvkPMpL/8fhIL68IY4buNfS8WS1lPwDCzfZY=
Subject key identifier: ED:D3:81:C9:1E:C8:A2:83:BC:A5:B4:4D:CC:4E:ED:22:7D:C7:EA:59
Certificate issuer: /CN=a521f5ee-89d2-4088-abb9-f69291655e39
Certificate serial: 010D0C9F43285849244E8A4E9C56592882F49480
Authority key identifier: 14:EE:0D:BC:78:58:6F:49:6A:4F:7C:2E:30:4A:4E:11:A9:FE:9B:73
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/33a9ddc2-deb3-3384-ac02-7422445b9b79.roa
Signing time: Mon 10 Mar 2025 13:00:52 +0000
ROA not before: Mon 10 Mar 2025 13:00:52 +0000
ROA not after: Sun 08 Jun 2025 13:00:52 +0000
asID: 400981
IP address blocks: 23.105.192.0/19 maxlen: 24
23.106.128.0/19 maxlen: 24
23.252.96.0/20 maxlen: 24
45.62.96.0/19 maxlen: 24
45.78.0.0/18 maxlen: 24
66.112.208.0/20 maxlen: 24
67.209.176.0/20 maxlen: 24
74.121.148.0/22 maxlen: 24
104.128.80.0/20 maxlen: 24
104.160.32.0/20 maxlen: 24
104.194.64.0/19 maxlen: 24
104.224.128.0/18 maxlen: 24
107.182.176.0/20 maxlen: 24
138.128.192.0/19 maxlen: 24
144.168.56.0/21 maxlen: 24
162.211.224.0/21 maxlen: 24
192.243.112.0/20 maxlen: 24
198.35.44.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:24:4e:8a:4e:9c:56:59:28:82:f4:94:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a521f5ee-89d2-4088-abb9-f69291655e39
Validity
Not Before: Mar 10 13:00:52 2025 GMT
Not After : Jun 8 13:00:52 2025 GMT
Subject: CN=5ba3e2f8-0c38-4f73-aef9-733f5e605734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:63:e2:d0:83:ff:8e:e1:24:d2:e0:07:98:37:
c9:91:e6:65:ec:2a:d1:83:1f:42:5e:2e:ef:31:52:
00:99:a5:aa:f3:3e:9a:8d:e9:ef:f4:d2:77:b3:f9:
f8:c6:50:f2:7d:ff:8d:92:cf:ae:1d:59:57:5e:4b:
e3:e3:91:6b:64:b6:96:dd:76:af:ea:fd:d3:be:9e:
6b:85:83:fb:09:9c:96:b1:c3:16:e2:dc:6a:0e:db:
c1:d7:d5:fc:56:9b:1c:8a:15:a0:6b:6b:1f:d1:d7:
ef:c0:ea:43:88:cc:2f:6c:ca:c5:2c:91:c3:e8:df:
6b:64:09:7f:e3:94:3f:2f:0a:df:0b:5f:f2:c2:da:
dc:25:b2:f7:3a:cf:3a:66:af:4b:dc:50:18:d2:5c:
4b:5e:d1:a7:0e:8b:72:b2:51:9a:b0:ae:c0:d8:36:
2f:83:40:fb:24:03:c1:a7:38:99:8a:ef:2c:fe:35:
6a:fc:97:bd:f4:ba:79:59:2c:c1:35:d5:50:1e:df:
8e:9b:66:d5:2a:a2:32:d7:f1:39:6a:8c:72:1d:f4:
1a:bf:82:7e:d9:ac:6b:e0:a9:87:c3:dc:37:f4:00:
86:d4:de:26:2c:66:99:e9:c4:89:d0:c6:ac:bf:ec:
f5:7f:db:48:93:06:50:ce:91:60:1f:ff:f1:f3:18:
aa:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:D3:81:C9:1E:C8:A2:83:BC:A5:B4:4D:CC:4E:ED:22:7D:C7:EA:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/33a9ddc2-deb3-3384-ac02-7422445b9b79.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/a521f5ee-89d2-4088-abb9-f69291655e39.crl
X509v3 Authority Key Identifier:
keyid:14:EE:0D:BC:78:58:6F:49:6A:4F:7C:2E:30:4A:4E:11:A9:FE:9B:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39.cer
sbgp-ipAddrBlock: critical
IPv4:
23.105.192.0/19
23.106.128.0/19
23.252.96.0/20
45.62.96.0/19
45.78.0.0/18
66.112.208.0/20
67.209.176.0/20
74.121.148.0/22
104.128.80.0/20
104.160.32.0/20
104.194.64.0/19
104.224.128.0/18
107.182.176.0/20
138.128.192.0/19
144.168.56.0/21
162.211.224.0/21
192.243.112.0/20
198.35.44.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:17:c4:50:dc:bd:45:28:f2:35:71:56:39:14:51:8d:23:b8:
cd:4c:b8:ec:0a:7d:80:b4:0a:3e:86:3f:7f:74:c7:e0:ef:73:
1f:2d:0f:35:21:5c:0d:59:c3:48:93:ab:d9:5b:7f:b4:22:38:
f9:e4:c0:8d:b6:5e:bb:35:22:cf:a8:91:a4:3a:d1:ba:0b:f7:
a5:c7:33:fd:cd:2c:a5:00:86:8e:a0:55:10:c3:04:2d:bf:5f:
28:df:a5:37:4c:9c:de:5c:bd:5c:e5:b5:26:25:cb:2d:5f:36:
ca:01:85:ae:0f:d5:be:b1:85:b6:af:b6:0d:50:be:4b:b9:6f:
db:4e:c1:7a:fc:27:8b:e1:07:8f:6b:1c:17:88:ee:5b:5d:7e:
59:40:3a:32:87:a1:a8:0b:c6:03:e5:83:05:51:da:2a:10:78:
a3:6c:0a:cd:29:da:45:19:c5:04:e4:6e:7d:8a:b0:6c:58:f6:
4d:c3:d7:04:42:c7:d7:f6:cc:d8:66:ad:12:35:6b:3b:a7:fd:
72:a3:93:ff:fd:d1:c8:17:10:63:7d:b6:8c:e5:dd:1f:9b:97:
4a:7d:b0:88:a2:98:fd:23:33:e0:94:83:a0:9c:08:bb:a5:ce:
e6:47:31:a9:68:4b:25:b1:ca:24:5b:88:ed:e6:14:aa:d0:1b:
e0:46:95:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:05:17 2025 by rpki-client