Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/eb65570a-6746-3330-9ec5-02810756b2a4.roa
File: eb65570a-6746-3330-9ec5-02810756b2a4.roa (raw, json)
Hash identifier: 3Dk00YorvJBsd3KsVUCFUS2X+BBV5HEeTYuK94XN3Yw=
Subject key identifier: 99:B2:FF:51:C0:ED:BF:62:8F:14:D7:40:70:35:87:1A:DC:E5:4E:4A
Certificate issuer: /CN=cb01b28a-436d-42dd-8750-5361f2309297
Certificate serial: 010D0C9F43285849244E8A2111E65320D5B89180
Authority key identifier: A0:3F:D7:81:F7:6B:86:20:05:40:B3:B0:F1:5E:57:49:8A:88:1E:C4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/eb65570a-6746-3330-9ec5-02810756b2a4.roa
Signing time: Mon 10 Mar 2025 13:00:52 +0000
ROA not before: Mon 10 Mar 2025 13:00:52 +0000
ROA not after: Sun 08 Jun 2025 13:00:52 +0000
asID: 400981
IP address blocks: 23.83.224.0/19 maxlen: 24
43.243.84.0/22 maxlen: 24
45.78.64.0/20 maxlen: 24
46.254.88.0/22 maxlen: 24
64.64.224.0/19 maxlen: 24
65.49.130.0/23 maxlen: 24
65.49.132.0/22 maxlen: 24
65.49.144.0/23 maxlen: 24
65.49.150.0/23 maxlen: 24
65.49.192.0/19 maxlen: 24
65.49.224.0/20 maxlen: 24
66.98.112.0/20 maxlen: 24
67.216.192.0/19 maxlen: 24
67.218.128.0/19 maxlen: 24
67.230.160.0/19 maxlen: 24
68.168.128.0/20 maxlen: 24
69.171.64.0/20 maxlen: 24
69.194.8.0/21 maxlen: 24
74.82.192.0/19 maxlen: 24
74.120.168.0/21 maxlen: 24
74.211.96.0/19 maxlen: 24
80.251.208.0/20 maxlen: 24
89.208.240.0/20 maxlen: 24
93.179.96.0/21 maxlen: 24
93.179.112.0/21 maxlen: 24
93.179.124.0/22 maxlen: 24
94.103.4.0/22 maxlen: 24
95.163.192.0/20 maxlen: 24
95.169.0.0/19 maxlen: 24
95.181.188.0/22 maxlen: 24
96.45.176.0/20 maxlen: 24
97.64.16.0/20 maxlen: 24
97.64.32.0/20 maxlen: 24
97.64.80.0/22 maxlen: 24
97.64.104.0/21 maxlen: 24
97.64.120.0/21 maxlen: 24
98.142.128.0/20 maxlen: 24
104.36.64.0/21 maxlen: 24
104.36.184.0/22 maxlen: 24
104.129.180.0/22 maxlen: 24
104.129.184.0/22 maxlen: 24
104.153.96.0/21 maxlen: 24
104.225.144.0/20 maxlen: 24
104.225.232.0/21 maxlen: 24
104.243.16.0/20 maxlen: 24
104.244.88.0/21 maxlen: 24
104.245.40.0/21 maxlen: 24
104.245.188.0/22 maxlen: 24
107.182.16.0/20 maxlen: 24
144.34.128.0/17 maxlen: 24
150.242.88.0/22 maxlen: 24
162.211.220.0/22 maxlen: 24
162.219.120.0/21 maxlen: 24
162.244.240.0/22 maxlen: 24
172.93.32.0/20 maxlen: 24
172.96.16.0/22 maxlen: 24
172.96.192.0/18 maxlen: 24
173.242.112.0/20 maxlen: 24
174.137.48.0/20 maxlen: 24
176.122.128.0/18 maxlen: 24
184.170.208.0/20 maxlen: 24
185.180.16.0/22 maxlen: 24
185.199.240.0/22 maxlen: 24
185.205.180.0/22 maxlen: 24
185.212.56.0/22 maxlen: 24
192.69.88.0/21 maxlen: 24
198.181.32.0/20 maxlen: 24
198.181.56.0/22 maxlen: 24
199.19.104.0/21 maxlen: 24
199.115.228.0/22 maxlen: 24
199.168.136.0/21 maxlen: 24
199.180.112.0/21 maxlen: 24
199.193.124.0/22 maxlen: 24
206.190.232.0/21 maxlen: 24
216.24.176.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:24:4e:8a:21:11:e6:53:20:d5:b8:91:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb01b28a-436d-42dd-8750-5361f2309297
Validity
Not Before: Mar 10 13:00:52 2025 GMT
Not After : Jun 8 13:00:52 2025 GMT
Subject: CN=d5eaa57e-42a3-4c01-9d85-89eb51c29f1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:49:d2:68:7f:4f:c7:3a:85:49:a5:3d:94:96:
62:68:12:9c:64:28:14:1d:f1:b9:ae:f3:25:05:90:
05:2f:fd:c1:e1:61:ed:ef:42:43:2f:6d:e4:95:e0:
5e:e9:8a:0c:9c:37:4b:7e:ea:f9:80:c6:bb:1f:d9:
fd:fd:b9:ef:b0:6a:38:66:58:de:05:6d:f7:d1:aa:
db:7c:98:4c:dc:0c:8e:f4:8b:f6:e6:ed:77:28:04:
f7:9e:4f:1e:38:2d:fd:88:0a:93:2d:de:27:e2:b9:
96:a4:39:0f:89:a0:95:ff:e8:01:40:95:c3:f0:7b:
f1:13:91:07:1c:3e:e8:39:c8:33:cc:5f:cf:ea:1e:
38:36:6a:39:f3:32:4a:c2:aa:68:af:37:32:7c:9c:
27:a2:2c:48:2f:44:0b:4f:b7:e3:db:30:a9:b7:bf:
4a:6f:2d:29:c0:a9:64:6a:a2:7a:c0:6b:5e:5c:7e:
4a:5c:65:04:b5:90:f1:fe:f9:27:76:8f:4c:b3:32:
68:53:44:a8:dd:09:e7:e4:e3:4c:a6:de:72:0c:dd:
6d:37:80:4f:29:cf:69:f3:75:c1:50:c1:65:02:94:
cd:7c:87:fa:eb:c8:1e:db:40:ee:6d:ff:02:af:9b:
65:4d:2a:f4:87:8e:b3:c6:2b:ac:00:74:a3:7c:a3:
cf:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:B2:FF:51:C0:ED:BF:62:8F:14:D7:40:70:35:87:1A:DC:E5:4E:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/eb65570a-6746-3330-9ec5-02810756b2a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/cb01b28a-436d-42dd-8750-5361f2309297.crl
X509v3 Authority Key Identifier:
keyid:A0:3F:D7:81:F7:6B:86:20:05:40:B3:B0:F1:5E:57:49:8A:88:1E:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297.cer
sbgp-ipAddrBlock: critical
IPv4:
23.83.224.0/19
43.243.84.0/22
45.78.64.0/20
46.254.88.0/22
64.64.224.0/19
65.49.130.0-65.49.135.255
65.49.144.0/23
65.49.150.0/23
65.49.192.0-65.49.239.255
66.98.112.0/20
67.216.192.0/19
67.218.128.0/19
67.230.160.0/19
68.168.128.0/20
69.171.64.0/20
69.194.8.0/21
74.82.192.0/19
74.120.168.0/21
74.211.96.0/19
80.251.208.0/20
89.208.240.0/20
93.179.96.0/21
93.179.112.0/21
93.179.124.0/22
94.103.4.0/22
95.163.192.0/20
95.169.0.0/19
95.181.188.0/22
96.45.176.0/20
97.64.16.0-97.64.47.255
97.64.80.0/22
97.64.104.0/21
97.64.120.0/21
98.142.128.0/20
104.36.64.0/21
104.36.184.0/22
104.129.180.0-104.129.187.255
104.153.96.0/21
104.225.144.0/20
104.225.232.0/21
104.243.16.0/20
104.244.88.0/21
104.245.40.0/21
104.245.188.0/22
107.182.16.0/20
144.34.128.0/17
150.242.88.0/22
162.211.220.0/22
162.219.120.0/21
162.244.240.0/22
172.93.32.0/20
172.96.16.0/22
172.96.192.0/18
173.242.112.0/20
174.137.48.0/20
176.122.128.0/18
184.170.208.0/20
185.180.16.0/22
185.199.240.0/22
185.205.180.0/22
185.212.56.0/22
192.69.88.0/21
198.181.32.0/20
198.181.56.0/22
199.19.104.0/21
199.115.228.0/22
199.168.136.0/21
199.180.112.0/21
199.193.124.0/22
206.190.232.0/21
216.24.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:52:13:03:7d:38:e9:ce:fe:29:2a:7f:cc:c1:c0:c3:95:6a:
68:4f:7c:9b:02:c7:76:ee:71:14:f9:6a:2a:71:ec:5a:cf:70:
46:f7:41:52:95:60:fd:99:98:da:b9:c3:13:58:63:a5:d6:98:
12:d3:90:0c:9d:8d:72:69:21:f8:5e:35:2b:8b:1f:d6:b8:4a:
be:6d:de:f7:c6:1d:4a:94:90:82:ce:cd:a7:2e:81:db:cd:77:
96:0c:dd:54:b8:75:0b:d2:e3:58:c2:9f:60:02:db:44:70:27:
fe:ef:06:d7:e8:06:a3:b1:3d:25:e0:08:ba:db:ad:ad:e1:f2:
3d:c6:cd:4c:2e:b5:10:ce:1a:d7:9f:48:08:0b:ca:e9:5a:1f:
9a:fe:70:d9:e7:18:9f:c6:b7:7b:ad:58:d2:06:c0:53:5a:c3:
61:22:1b:46:f9:52:cb:80:3d:7d:ee:fd:c6:b8:24:ab:09:9f:
94:87:de:18:98:2a:47:d3:90:5e:61:01:47:a1:e2:81:5d:1f:
e2:30:0d:2c:02:59:95:a9:09:6e:e2:0f:75:0a:b7:0d:7a:6f:
14:bd:36:dc:f7:b3:31:dc:04:97:ab:4a:21:e2:a1:f6:ae:9e:
c8:9d:31:38:34:77:9a:bb:de:56:82:2c:97:d0:91:02:42:8d:
68:1a:0b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:22:26 2025 by rpki-client