Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/75164c3b-1970-34ed-accb-9cfd7a9b3f7a.roa
File: 75164c3b-1970-34ed-accb-9cfd7a9b3f7a.roa (raw, json)
Hash identifier: Ojm+WVM4p5cnp67hYg/ow8yPzVsQfZ3nl7RYJTnxWdY=
Subject key identifier: 15:DE:E6:CD:2D:AC:95:AB:DD:54:77:07:BC:C0:B8:EE:0B:DB:52:4B
Certificate issuer: /CN=a521f5ee-89d2-4088-abb9-f69291655e39
Certificate serial: 010D0C9F4328584908815AD74BF671F8AC0CEC80
Authority key identifier: 14:EE:0D:BC:78:58:6F:49:6A:4F:7C:2E:30:4A:4E:11:A9:FE:9B:73
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/75164c3b-1970-34ed-accb-9cfd7a9b3f7a.roa
Signing time: Fri 28 Feb 2025 14:00:52 +0000
ROA not before: Fri 28 Feb 2025 14:00:52 +0000
ROA not after: Thu 29 May 2025 13:00:52 +0000
asID: 25820
IP address blocks: 23.105.192.0/19 maxlen: 24
23.106.128.0/19 maxlen: 24
23.252.96.0/20 maxlen: 24
45.62.96.0/19 maxlen: 24
45.78.0.0/18 maxlen: 24
66.112.208.0/20 maxlen: 24
67.209.176.0/20 maxlen: 24
74.121.148.0/22 maxlen: 24
104.128.80.0/20 maxlen: 24
104.160.32.0/20 maxlen: 24
104.194.64.0/19 maxlen: 24
104.224.128.0/18 maxlen: 24
107.182.176.0/20 maxlen: 24
138.128.192.0/19 maxlen: 24
144.168.56.0/21 maxlen: 24
162.211.224.0/21 maxlen: 24
192.243.112.0/20 maxlen: 24
198.35.44.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:08:81:5a:d7:4b:f6:71:f8:ac:0c:ec:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a521f5ee-89d2-4088-abb9-f69291655e39
Validity
Not Before: Feb 28 14:00:52 2025 GMT
Not After : May 29 13:00:52 2025 GMT
Subject: CN=103e6e2c-dc0a-4d08-bb75-8bec4648a132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f8:92:22:4d:0f:0b:0a:34:13:6a:de:fc:ad:
71:ef:d1:ae:af:ba:ee:27:80:f4:29:95:21:10:a5:
50:23:ff:7c:0a:e8:78:7a:5e:72:91:27:00:f3:11:
ed:85:8a:b5:6f:f5:7b:96:0e:64:d3:16:32:9f:d5:
48:e3:71:5b:57:ea:21:28:ad:b2:84:13:e3:12:f4:
a9:40:a5:08:dc:9a:41:fc:26:b5:aa:81:c0:dc:1a:
a0:91:8c:81:28:0e:14:63:17:df:5c:dc:82:93:03:
7b:2e:d1:18:f7:50:34:9e:48:61:cd:ad:f6:c1:60:
1a:55:a9:eb:e6:78:64:96:87:97:3f:d1:93:7b:3a:
98:2c:b6:53:d8:c9:3d:98:ad:06:8e:a5:4f:62:2a:
ae:51:31:ae:df:6f:da:ca:0f:ad:f5:c3:3d:a9:80:
cd:af:a5:ee:0c:e2:ee:1d:4c:7f:35:6d:bc:ca:2a:
b3:79:92:b8:5c:b9:8d:c8:d0:3b:38:5e:11:cb:49:
2d:f2:59:b4:e0:32:a5:eb:4d:d5:37:42:ed:c5:24:
53:d1:4c:18:27:b3:4e:82:0c:43:40:80:51:6d:51:
aa:9e:8d:46:7a:a3:d7:df:25:cf:38:2f:6c:db:a6:
59:46:20:68:28:fa:4b:fa:ca:3b:c5:32:9a:69:fa:
02:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:DE:E6:CD:2D:AC:95:AB:DD:54:77:07:BC:C0:B8:EE:0B:DB:52:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/75164c3b-1970-34ed-accb-9cfd7a9b3f7a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/a521f5ee-89d2-4088-abb9-f69291655e39.crl
X509v3 Authority Key Identifier:
keyid:14:EE:0D:BC:78:58:6F:49:6A:4F:7C:2E:30:4A:4E:11:A9:FE:9B:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39.cer
sbgp-ipAddrBlock: critical
IPv4:
23.105.192.0/19
23.106.128.0/19
23.252.96.0/20
45.62.96.0/19
45.78.0.0/18
66.112.208.0/20
67.209.176.0/20
74.121.148.0/22
104.128.80.0/20
104.160.32.0/20
104.194.64.0/19
104.224.128.0/18
107.182.176.0/20
138.128.192.0/19
144.168.56.0/21
162.211.224.0/21
192.243.112.0/20
198.35.44.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:e0:ab:d2:cb:af:5b:18:f0:9c:dd:9b:36:d5:fd:17:44:50:
e4:4d:a2:da:06:30:17:5a:88:e9:f0:5b:05:d2:b4:dc:d2:e3:
50:43:03:86:de:67:86:4c:c5:0a:29:81:ee:88:db:b3:5e:1f:
96:c2:42:c6:47:7e:1c:93:44:bb:94:00:fb:d5:0e:b1:7b:e2:
83:85:14:e6:5d:26:ae:43:e7:d1:b9:61:1b:16:00:65:4c:f7:
45:0c:64:a1:76:51:c6:5d:48:41:38:ce:f3:5e:52:67:e9:a1:
62:c6:4f:4c:12:07:96:02:7b:b4:e7:73:1b:8c:1f:82:d7:7c:
8f:70:41:af:06:45:db:0c:9f:9b:35:d2:85:f0:74:ee:9c:7a:
77:84:9b:1d:48:5a:06:ee:cb:b2:65:42:cf:bc:b6:24:f3:30:
95:17:95:c9:0d:85:48:cf:29:99:3d:61:c7:77:69:16:66:4d:
05:6e:14:8f:60:e7:7d:d6:8f:00:10:da:a6:25:75:8c:af:30:
d5:d7:64:bc:f3:66:68:50:22:f4:fc:7b:41:d6:46:ce:20:10:
1c:b1:ec:7d:92:1d:56:ff:aa:38:87:d4:7b:fa:a2:da:1e:77:
b6:9e:2a:ce:82:af:92:c2:45:a6:37:5e:f0:f9:ca:86:d7:db:
27:43:fd:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:09:48 2025 by rpki-client