Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1/dc9e3b90-beb9-3a11-a4bd-838fc26955ae.roa
File: dc9e3b90-beb9-3a11-a4bd-838fc26955ae.roa (raw, json)
Hash identifier: J82K0fSrSpTR1M5aQkpms+R7IOINqiNbyBNlrUdgFM4=
Subject key identifier: 24:91:D0:E4:D3:27:E1:FB:B6:DB:BB:6A:30:5A:F8:BC:09:5A:90:BF
Certificate issuer: /CN=32bcf38b-c46d-4bf1-8705-88aeec19abf1
Certificate serial: 010D0C9F432858491ED6EA70C5BD0AD837F95380
Authority key identifier: 67:89:04:5D:7A:3F:46:31:8E:1C:3C:F8:17:C3:56:F2:E3:86:F8:9B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1/dc9e3b90-beb9-3a11-a4bd-838fc26955ae.roa
Signing time: Sat 08 Mar 2025 14:00:52 +0000
ROA not before: Sat 08 Mar 2025 14:00:52 +0000
ROA not after: Fri 06 Jun 2025 13:00:52 +0000
asID: 7018
IP address blocks: 192.31.9.0/24 maxlen: 24
198.17.99.0/24 maxlen: 24
198.22.152.0/24 maxlen: 24
198.137.234.0/23 maxlen: 23
199.74.244.0/24 maxlen: 24
199.79.216.0/24 maxlen: 24
199.89.132.0/23 maxlen: 23
199.89.158.0/23 maxlen: 23
199.89.160.0/24 maxlen: 24
204.89.153.0/24 maxlen: 24
204.89.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1e:d6:ea:70:c5:bd:0a:d8:37:f9:53:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32bcf38b-c46d-4bf1-8705-88aeec19abf1
Validity
Not Before: Mar 8 14:00:52 2025 GMT
Not After : Jun 6 13:00:52 2025 GMT
Subject: CN=5244e11b-2064-4b32-af24-e89d6266f9ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:25:f0:25:02:00:5e:af:a7:80:57:56:41:96:
74:35:aa:81:35:92:6d:56:e6:e1:69:1a:0c:32:3b:
2b:28:2a:3c:88:c1:26:64:7a:a9:72:69:08:a3:ef:
6a:a4:b8:bc:2f:88:d7:6f:a4:22:4a:91:c5:1f:39:
fe:43:4d:b8:49:ec:9e:62:36:0f:ab:8e:25:50:6c:
f0:bd:ca:de:8c:92:3e:b7:ae:b4:4d:5c:0c:0c:1e:
c1:74:c8:2a:ae:3b:d4:21:24:d0:0a:fa:b1:cb:ba:
4e:de:61:0b:a0:aa:a6:47:42:79:73:96:a5:db:dc:
85:c1:e7:0c:28:1d:b1:08:3c:82:00:b5:59:82:e2:
74:89:9a:fb:cb:c8:21:27:4c:10:00:7a:de:d4:8d:
aa:b8:d4:1c:b0:cc:c0:86:00:81:6a:54:44:d6:69:
88:81:f3:4d:be:bf:b9:86:07:7a:0c:36:b4:ae:56:
17:4c:8c:8e:a1:72:c1:2f:f4:37:c8:1a:ca:27:63:
e3:ec:68:ba:1e:b0:13:3d:72:52:29:89:0f:02:78:
e6:1e:7a:90:c7:11:f4:61:53:ae:5e:73:96:0c:44:
9f:3c:d1:0a:82:9a:09:b0:46:8f:1d:e8:77:02:d9:
e4:c8:7f:be:b3:ad:23:e4:15:06:97:1e:3b:5c:a9:
fa:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:91:D0:E4:D3:27:E1:FB:B6:DB:BB:6A:30:5A:F8:BC:09:5A:90:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1/dc9e3b90-beb9-3a11-a4bd-838fc26955ae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1/32bcf38b-c46d-4bf1-8705-88aeec19abf1.crl
X509v3 Authority Key Identifier:
keyid:67:89:04:5D:7A:3F:46:31:8E:1C:3C:F8:17:C3:56:F2:E3:86:F8:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1.cer
sbgp-ipAddrBlock: critical
IPv4:
192.31.9.0/24
198.17.99.0/24
198.22.152.0/24
198.137.234.0/23
199.74.244.0/24
199.79.216.0/24
199.89.132.0/23
199.89.158.0-199.89.160.255
204.89.153.0-204.89.154.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:ed:96:64:6e:4a:ac:4c:06:bb:9a:b9:ce:c2:00:50:b0:c1:
21:1a:c2:3a:e1:c6:40:be:e6:79:57:d8:8b:09:40:fd:c0:69:
ba:91:8e:2c:c8:09:62:4e:f7:2a:9a:d9:e9:48:ea:74:09:35:
ad:41:db:a9:ea:74:be:e4:e9:66:00:20:8c:1d:86:7f:6b:db:
a2:7c:dc:cb:97:ac:44:ac:d1:4d:55:8b:9c:32:81:33:2b:6f:
e7:87:7a:ff:a1:9d:06:de:76:92:37:37:0f:3b:f6:31:d5:d1:
9f:a2:fa:67:df:24:71:e2:9e:99:7c:f6:98:39:df:c7:47:8b:
29:e6:d0:5e:a8:af:90:cc:fd:a2:c7:c1:5a:61:b6:66:7a:5b:
90:63:89:f3:ae:d3:5a:73:95:9f:4e:8a:60:13:27:cd:8e:5b:
56:91:d3:8a:22:6b:9b:f8:0a:b8:ba:95:55:dd:72:b2:fd:89:
18:e7:80:52:f8:96:5e:89:47:05:2b:30:e7:9a:52:16:f0:64:
97:b1:d8:9d:6c:d3:b4:ac:1f:81:50:3c:e5:60:59:86:82:bc:
e0:67:82:8b:30:34:e5:5c:2b:f3:3d:24:fd:22:e8:45:16:92:
19:4e:39:51:51:2b:d9:c5:74:9a:94:f4:24:3b:ab:58:1b:6b:
3d:30:dd:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:00:50 2025 by rpki-client