Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/255d6559-2c60-49ac-b136-415b4469af78/4c1ce668-1501-3b48-91cc-8eb4b9c89e0c.roa
File: 4c1ce668-1501-3b48-91cc-8eb4b9c89e0c.roa (raw, json)
Hash identifier: Q1lT2Uq0KosPRKcFaXPEPhkIw4iuOCAx+2nd9vcYrro=
Subject key identifier: 5D:B5:FA:58:2A:BC:50:21:35:41:30:F5:71:51:73:A7:4B:54:83:F7
Certificate issuer: /CN=255d6559-2c60-49ac-b136-415b4469af78
Certificate serial: 010D0C9F432858494CC942A3C5FE22249CE460F0
Authority key identifier: 58:8D:97:13:12:EB:A8:FC:6C:82:19:E1:04:61:7F:36:49:06:16:14
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/255d6559-2c60-49ac-b136-415b4469af78.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/255d6559-2c60-49ac-b136-415b4469af78/4c1ce668-1501-3b48-91cc-8eb4b9c89e0c.roa
Signing time: Tue 25 Mar 2025 01:00:40 +0000
ROA not before: Tue 25 Mar 2025 01:00:40 +0000
ROA not after: Mon 23 Jun 2025 01:00:40 +0000
asID: 20300
IP address blocks: 136.143.204.0/22 maxlen: 24
147.185.144.0/22 maxlen: 24
162.142.96.0/22 maxlen: 24
192.152.214.0/24 maxlen: 24
207.66.124.0/22 maxlen: 24
208.83.184.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4c:c9:42:a3:c5:fe:22:24:9c:e4:60:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=255d6559-2c60-49ac-b136-415b4469af78
Validity
Not Before: Mar 25 01:00:40 2025 GMT
Not After : Jun 23 01:00:40 2025 GMT
Subject: CN=8c3db4c4-d68e-4712-8e04-7d271e58a978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:13:49:27:42:af:66:12:4b:eb:1f:68:34:31:
32:7a:6a:02:66:de:ff:24:a6:6c:dd:b0:fd:63:88:
6c:06:4d:94:a7:43:0c:56:c6:1b:51:9b:97:96:6f:
c4:12:1a:5d:f1:bb:1f:e5:28:ad:4f:c8:22:25:d1:
08:4f:d8:87:66:5b:83:38:66:0a:4f:a7:67:87:49:
8e:fa:d4:fc:17:2c:c9:83:6e:ed:26:5d:3c:4a:70:
92:8f:0a:ab:4e:33:37:ca:36:fe:a6:e0:0e:3e:a3:
85:45:21:08:5d:a7:1c:68:83:25:72:fb:65:2a:02:
76:a3:ea:9a:e3:0d:86:56:72:2a:bd:61:94:d8:1d:
81:38:4c:18:cf:23:f3:e0:b6:35:e6:77:2b:09:a5:
08:0d:21:92:55:70:3b:09:aa:1b:ad:46:3a:d7:30:
a8:c5:04:9a:81:e6:24:f2:0c:17:a6:af:a8:a4:1b:
60:1e:13:7b:1a:c2:9b:ee:17:24:5d:cb:19:5e:05:
1e:a1:11:fd:9c:c2:f2:58:3a:0d:fb:e0:58:6f:d7:
c6:82:f4:19:35:ba:61:52:ff:30:d2:68:e3:69:3f:
f1:07:b0:fe:ca:eb:50:24:c5:ff:4b:7c:a2:0a:9c:
73:88:e2:dc:f7:e8:46:2e:2d:dd:3e:fb:4c:1c:73:
5b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:B5:FA:58:2A:BC:50:21:35:41:30:F5:71:51:73:A7:4B:54:83:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/255d6559-2c60-49ac-b136-415b4469af78/4c1ce668-1501-3b48-91cc-8eb4b9c89e0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/255d6559-2c60-49ac-b136-415b4469af78/255d6559-2c60-49ac-b136-415b4469af78.crl
X509v3 Authority Key Identifier:
keyid:58:8D:97:13:12:EB:A8:FC:6C:82:19:E1:04:61:7F:36:49:06:16:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/255d6559-2c60-49ac-b136-415b4469af78.cer
sbgp-ipAddrBlock: critical
IPv4:
136.143.204.0/22
147.185.144.0/22
162.142.96.0/22
192.152.214.0/24
207.66.124.0/22
208.83.184.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c8:19:fc:48:52:fc:6f:46:79:c0:27:c4:00:ab:2c:15:e6:1b:
ee:c8:f4:7d:0e:d3:b7:c8:17:3d:64:ac:34:db:d1:12:d0:0f:
97:dc:47:4a:21:4a:e7:fa:44:65:54:0e:66:ca:ce:84:d9:57:
f2:f9:8c:fd:c5:06:fc:b2:1c:c2:c7:90:97:a2:21:65:5b:c9:
02:e0:d2:21:3f:32:72:01:57:21:78:74:37:03:a4:08:b1:75:
5a:7d:23:d5:3b:f3:09:26:cf:8d:27:7f:79:90:bb:32:53:1e:
b0:6b:87:21:ef:f3:87:bf:6b:55:fe:69:15:f4:17:e4:a5:63:
db:54:67:11:03:6f:30:a5:0c:73:a4:f5:e9:de:d8:8a:db:41:
e3:dd:e7:c5:6f:f2:8e:be:6b:1f:c8:b4:e4:7a:cb:ff:98:3c:
69:38:3b:55:d4:6a:3b:f5:2e:28:6e:a4:44:1b:42:45:62:e7:
fa:6a:51:31:b7:94:89:44:c8:d6:08:43:8b:85:63:2e:14:c9:
c3:d2:ae:24:81:08:86:f5:4d:e0:84:34:c6:d6:78:90:37:4a:
2e:05:9d:54:9f:99:a7:13:47:ba:ff:cb:9e:bf:de:35:27:fd:
06:83:15:0c:e6:db:71:8d:0d:96:00:f1:d2:76:3e:a1:01:4c:
2c:ae:61:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:50:49 2025 by rpki-client