Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/324a8cbd-4953-435c-bace-07af1279e9bc/274940e5-0730-372f-bdea-bc5ac690921e.roa
File: 274940e5-0730-372f-bdea-bc5ac690921e.roa (raw, json)
Hash identifier: V/PAZGYwex+TGiKafBf5kMIekM+/9wDharax+9l342Y=
Subject key identifier: 9C:0F:34:79:D2:41:86:DC:42:FD:95:16:B0:A1:34:7C:9E:5F:8F:E4
Certificate issuer: /CN=324a8cbd-4953-435c-bace-07af1279e9bc
Certificate serial: 010D0C9F432858494733EF7D721601FB5E872800
Authority key identifier: B9:51:8D:60:2D:87:3E:B0:5F:09:28:22:A7:33:96:C6:4B:25:3E:D0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/324a8cbd-4953-435c-bace-07af1279e9bc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/324a8cbd-4953-435c-bace-07af1279e9bc/274940e5-0730-372f-bdea-bc5ac690921e.roa
Signing time: Sun 23 Mar 2025 01:00:39 +0000
ROA not before: Sun 23 Mar 2025 01:00:39 +0000
ROA not after: Sat 21 Jun 2025 01:00:39 +0000
asID: 398025
IP address blocks: 67.219.0.0/20 maxlen: 20
69.1.224.0/19 maxlen: 19
161.82.64.0/18 maxlen: 18
170.103.64.0/18 maxlen: 18
204.63.0.0/20 maxlen: 20
207.29.224.0/19 maxlen: 19
208.100.192.0/18 maxlen: 18
216.128.64.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:47:33:ef:7d:72:16:01:fb:5e:87:28:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=324a8cbd-4953-435c-bace-07af1279e9bc
Validity
Not Before: Mar 23 01:00:39 2025 GMT
Not After : Jun 21 01:00:39 2025 GMT
Subject: CN=1e0d6e1c-3114-40e1-9b36-d9ed35d8b327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ef:e3:2c:1c:91:8e:cf:a9:c4:2f:e1:a8:93:
d6:68:31:c1:43:17:18:de:ab:c1:90:e3:cd:3a:24:
da:40:ca:0f:f7:63:7e:56:77:24:34:18:17:90:04:
c9:67:08:44:b2:72:a9:a7:57:55:9d:01:67:85:e9:
88:28:ce:11:88:05:98:52:77:9d:f6:46:6b:4f:4b:
e1:be:bb:2b:a7:e5:75:5f:49:2b:68:b7:80:71:2c:
69:45:bb:42:cf:7d:61:14:bf:90:c3:81:98:d0:5a:
da:18:46:1a:22:fb:f1:02:c7:49:a0:f2:69:e8:06:
26:c5:da:e3:68:60:b2:ed:86:83:70:29:1a:f7:b6:
36:69:53:77:66:2a:f7:16:f3:7f:91:23:7f:4d:e1:
60:72:63:c8:0a:bf:21:9a:a4:cd:fb:aa:ab:8b:75:
bb:5c:b8:f2:27:47:07:aa:51:53:78:0f:6b:16:30:
99:c7:0a:36:24:33:9e:fc:45:d5:06:86:53:e1:72:
e5:27:22:85:13:53:9e:e4:63:b3:fb:08:6f:53:5d:
f3:de:49:f0:3f:aa:6e:4f:7f:0d:ab:d0:24:01:a1:
f6:43:f4:f2:c7:6b:5b:91:da:7d:54:be:c7:85:f3:
29:bd:02:7c:56:be:44:ac:98:b5:c4:4c:37:26:9f:
a3:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:0F:34:79:D2:41:86:DC:42:FD:95:16:B0:A1:34:7C:9E:5F:8F:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/324a8cbd-4953-435c-bace-07af1279e9bc/274940e5-0730-372f-bdea-bc5ac690921e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/324a8cbd-4953-435c-bace-07af1279e9bc/324a8cbd-4953-435c-bace-07af1279e9bc.crl
X509v3 Authority Key Identifier:
keyid:B9:51:8D:60:2D:87:3E:B0:5F:09:28:22:A7:33:96:C6:4B:25:3E:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/324a8cbd-4953-435c-bace-07af1279e9bc.cer
sbgp-ipAddrBlock: critical
IPv4:
67.219.0.0/20
69.1.224.0/19
161.82.64.0/18
170.103.64.0/18
204.63.0.0/20
207.29.224.0/19
208.100.192.0/18
216.128.64.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:68:0c:d1:2e:01:13:89:91:c3:24:ff:fb:91:64:10:7b:09:
3c:85:5b:ba:ca:ab:dd:05:95:7e:10:a9:c1:27:c7:26:d3:95:
db:27:9f:7b:cc:ab:08:bf:47:98:8e:c3:08:d2:f6:f1:11:f3:
85:30:82:82:a6:13:d1:96:3a:e1:f0:8a:d7:69:57:ce:51:6a:
bf:9c:dc:c2:74:75:d2:b1:e8:d4:3e:7c:c2:0d:a6:6f:84:38:
64:d4:66:73:09:4d:49:3f:f0:b2:dc:0d:97:31:56:e9:27:d5:
d6:99:52:2c:bf:40:8e:3c:ff:01:67:49:83:0a:d2:3c:20:2b:
e0:8d:1a:6c:35:ba:d2:05:94:01:f3:af:dd:a4:4e:3d:a7:34:
09:86:36:25:91:30:7f:0a:83:d7:09:33:35:ca:d5:fa:28:2b:
c3:54:a1:b5:cd:84:fc:5e:db:5d:b5:a2:d1:96:8b:0f:07:25:
99:64:c4:c5:b7:28:7a:d1:65:bb:4e:c2:8c:92:31:0c:07:fb:
4f:ca:0f:97:e9:1f:7a:b1:88:9e:0d:4f:b6:62:e0:06:81:d4:
dc:ea:14:e3:90:73:3c:25:59:c5:62:2c:2d:7d:d3:6d:6f:d7:
29:d4:02:f3:72:78:b1:af:ff:61:e7:f2:6f:e3:cd:7d:e8:ba:
d4:2f:46:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:14:31 2025 by rpki-client