Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab/5e348348-aeea-3469-b4cb-db42afab4fb3.roa
File: 5e348348-aeea-3469-b4cb-db42afab4fb3.roa (raw, json)
Hash identifier: IEzzqmHBzSzls6VKC9TkpMkrpHM0ve4PnKKUliy6LLk=
Subject key identifier: DF:74:F8:95:DF:E3:58:AC:BD:59:35:6D:AA:82:47:0F:8C:9F:3B:EA
Certificate issuer: /CN=f5dd2f3b-d544-4a90-84a5-58af0db84dab
Certificate serial: 010D0C9F432858489BA0B23D76D741BC82377600
Authority key identifier: 2A:21:7E:D8:28:3A:D2:41:FE:CF:E5:E9:1D:32:3F:C0:B7:8A:F7:0B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab/5e348348-aeea-3469-b4cb-db42afab4fb3.roa
Signing time: Mon 20 Jan 2025 14:00:51 +0000
ROA not before: Mon 20 Jan 2025 14:00:51 +0000
ROA not after: Sun 20 Apr 2025 13:00:51 +0000
asID: 11961
IP address blocks: 64.89.208.0/20 maxlen: 24
72.250.128.0/19 maxlen: 24
108.59.112.0/20 maxlen: 24
144.86.208.0/20 maxlen: 24
216.228.32.0/19 maxlen: 24
2607:8380::/32 maxlen: 56
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9b:a0:b2:3d:76:d7:41:bc:82:37:76:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5dd2f3b-d544-4a90-84a5-58af0db84dab
Validity
Not Before: Jan 20 14:00:51 2025 GMT
Not After : Apr 20 13:00:51 2025 GMT
Subject: CN=abea6a02-267d-4eda-9157-b4bed938d00e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:92:a7:44:a0:49:93:b2:b2:c4:d1:ed:ce:2a:
5a:cc:c2:31:80:46:0e:3e:aa:b3:cc:a3:e2:1b:02:
17:1f:a4:54:4e:08:ce:10:a2:51:b7:f4:ab:a2:23:
77:18:cd:1e:9c:a3:4d:85:1b:85:a1:3d:30:c1:87:
18:aa:5a:8a:c3:3d:61:a3:ab:3e:b0:1c:2a:91:cb:
37:db:e3:eb:ce:7d:07:85:ce:1c:48:0c:6d:60:77:
e5:0f:05:28:c7:d5:70:96:57:ea:cc:2d:b4:66:e2:
08:f9:80:c1:9d:a2:39:a3:bd:e1:e7:4e:ea:0a:33:
82:1c:a5:10:7f:bd:d6:38:e2:f9:39:99:38:8a:0a:
ac:4a:03:15:72:00:60:c3:66:53:bb:f4:24:a9:f5:
76:9c:d0:b4:9e:78:8e:05:6a:99:ea:3b:ba:2a:e2:
55:bb:43:4b:b4:6c:7f:8c:c7:64:a7:5c:02:ee:1b:
08:70:85:01:2b:f1:57:a1:22:ce:0f:6d:0a:ab:c6:
71:a2:27:3e:5f:e4:f0:2c:15:5a:e4:cf:2f:df:06:
ea:d3:7f:25:e0:c3:6e:e7:c8:a7:3d:c9:38:88:50:
0f:7d:dd:3b:98:10:dc:a7:d4:38:d7:e0:32:f9:15:
4a:84:1f:2c:30:2e:23:51:3a:42:1b:0c:f7:12:a9:
99:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:74:F8:95:DF:E3:58:AC:BD:59:35:6D:AA:82:47:0F:8C:9F:3B:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab/5e348348-aeea-3469-b4cb-db42afab4fb3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab/f5dd2f3b-d544-4a90-84a5-58af0db84dab.crl
X509v3 Authority Key Identifier:
keyid:2A:21:7E:D8:28:3A:D2:41:FE:CF:E5:E9:1D:32:3F:C0:B7:8A:F7:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab.cer
sbgp-ipAddrBlock: critical
IPv4:
64.89.208.0/20
72.250.128.0/19
108.59.112.0/20
144.86.208.0/20
216.228.32.0/19
IPv6:
2607:8380::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:9a:8b:4f:0a:96:5d:9c:9a:a2:9a:e3:ca:c6:8a:7d:2a:5a:
88:9e:4f:d4:d2:89:2c:0c:b9:09:f4:87:4f:5e:db:ac:23:ed:
e8:d4:09:b3:81:1a:3e:aa:b8:09:a1:46:24:8d:56:be:9e:ab:
a4:74:66:84:71:b1:a7:b4:04:52:cd:cf:a3:a9:9d:70:aa:bd:
fa:e3:ef:85:e1:fe:0d:2e:ce:6a:a4:26:57:d1:98:52:3d:00:
60:15:14:b3:1d:c9:a7:46:30:8c:14:ca:43:f6:3b:6b:08:de:
d2:54:78:20:23:2b:a1:16:dc:6c:73:da:4b:95:1b:00:2e:61:
69:58:e5:19:70:9e:78:75:0b:15:57:a0:03:46:20:8f:09:36:
d4:eb:a0:5f:d7:6f:dc:bb:89:0e:c7:0d:6e:67:c6:11:39:17:
3a:28:fc:8d:1a:80:79:24:b9:43:f7:8a:68:3e:c3:d8:70:71:
ad:ec:09:5c:94:cd:3f:55:bb:ec:19:0c:9e:86:55:e5:a8:8b:
15:d7:35:e9:88:06:24:2d:70:eb:ea:b6:34:8a:cc:27:71:85:
fd:a3:33:c7:2a:ae:13:0d:71:fe:97:af:b8:ab:22:5a:43:5f:
81:c3:2d:c9:06:c2:8f:1c:02:8b:16:8a:d9:85:61:cf:2d:25:
0d:3a:73:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:36:57 2025 by rpki-client