Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150/8ab92467-1c0b-38eb-b930-aa4ad39e6ca2.roa
File: 8ab92467-1c0b-38eb-b930-aa4ad39e6ca2.roa (raw, json)
Hash identifier: FXHDcO0mq1CuGHW+VXxQDjs57Vg46hseQtUMYlL8Z0M=
Subject key identifier: 7C:94:1B:42:5B:98:EA:FE:7C:6D:C0:7A:50:A7:A4:FC:7F:DE:B5:FF
Certificate issuer: /CN=5e2da88f-6029-42b9-b598-2623343a3150
Certificate serial: 010D0C9F43285848DD3BA7A201E8990BDE7D147A
Authority key identifier: 7C:B2:28:84:FD:D0:5B:14:8E:FD:87:34:FD:A6:13:FA:CC:39:26:B0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150/8ab92467-1c0b-38eb-b930-aa4ad39e6ca2.roa
Signing time: Thu 13 Feb 2025 02:00:40 +0000
ROA not before: Thu 13 Feb 2025 02:00:40 +0000
ROA not after: Wed 14 May 2025 01:00:40 +0000
asID: 68
IP address blocks: 128.165.0.0/16 maxlen: 16
130.55.0.0/16 maxlen: 16
138.98.0.0/16 maxlen: 16
141.111.0.0/16 maxlen: 16
192.12.184.0/24 maxlen: 24
192.12.208.0/24 maxlen: 24
192.52.70.0/24 maxlen: 24
192.65.95.0/24 maxlen: 24
204.121.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:dd:3b:a7:a2:01:e8:99:0b:de:7d:14:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e2da88f-6029-42b9-b598-2623343a3150
Validity
Not Before: Feb 13 02:00:40 2025 GMT
Not After : May 14 01:00:40 2025 GMT
Subject: CN=e91668e0-2e45-4327-9681-f0b8ac5617dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4a:f2:ee:21:8b:f4:74:f4:bf:0f:ec:25:70:
74:89:aa:b8:ec:b8:a4:0b:3b:e6:41:b7:84:9e:76:
86:80:ff:c4:47:93:ce:25:5d:26:9e:1f:c7:91:c7:
53:5c:11:ee:2a:e3:fd:79:c4:f8:aa:00:d5:dd:25:
95:7d:69:18:f1:e4:f5:d2:1c:08:79:d1:55:0e:56:
b9:4c:6f:8b:ad:7c:98:19:48:62:cf:8e:d3:f1:e7:
98:c5:04:ae:3c:b9:ef:ce:be:86:a0:9a:fd:7b:62:
0f:49:36:0c:4c:d3:3b:72:e8:e7:bd:f1:6b:d8:94:
d8:6a:13:09:7b:c4:7a:98:d5:ad:42:d9:4f:2f:25:
ec:1b:2a:09:ed:23:4d:0a:39:d0:44:a1:9d:c8:43:
a4:f1:c4:77:fe:c2:28:5e:10:1f:7f:26:37:19:09:
e2:2e:2d:b6:ab:f1:63:59:49:af:22:a1:12:48:f0:
a7:18:6e:30:df:76:aa:2c:5e:09:f6:af:cb:37:ba:
2c:30:03:fa:9c:6e:6a:a1:e6:e9:32:ae:ea:e8:0e:
c2:8f:fc:76:96:c3:1a:36:98:7a:e5:7d:48:4f:b5:
b9:a3:f8:2b:c3:af:db:da:a5:61:aa:27:ba:73:cc:
32:d8:d4:65:70:08:ad:f3:2b:33:98:d2:a7:b9:72:
44:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:94:1B:42:5B:98:EA:FE:7C:6D:C0:7A:50:A7:A4:FC:7F:DE:B5:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150/8ab92467-1c0b-38eb-b930-aa4ad39e6ca2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150/5e2da88f-6029-42b9-b598-2623343a3150.crl
X509v3 Authority Key Identifier:
keyid:7C:B2:28:84:FD:D0:5B:14:8E:FD:87:34:FD:A6:13:FA:CC:39:26:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150.cer
sbgp-ipAddrBlock: critical
IPv4:
128.165.0.0/16
130.55.0.0/16
138.98.0.0/16
141.111.0.0/16
192.12.184.0/24
192.12.208.0/24
192.52.70.0/24
192.65.95.0/24
204.121.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d6:4a:57:70:09:ef:1b:5d:16:1d:2b:33:37:33:ae:64:ea:d7:
13:46:b8:13:bc:3e:a9:f1:55:c8:4a:b7:ce:1e:65:27:89:5b:
e0:40:15:6a:11:ff:cd:60:a0:0a:3a:ec:36:6a:e5:4c:70:7a:
09:5c:3b:db:dd:e3:12:f7:d8:fd:94:6e:c7:97:3f:a2:6d:fd:
5b:3d:a4:f4:0e:9b:91:f1:ec:30:92:79:61:3f:8e:25:16:c8:
b9:f6:31:3d:d9:ae:1a:1d:bf:61:7f:c2:06:fb:e1:bd:29:4b:
58:75:88:98:fc:5e:58:7c:d2:f7:be:56:5f:9e:4a:2d:ae:64:
ab:83:d2:76:a8:a0:71:58:31:59:9b:3e:87:ea:e9:8a:5b:cf:
97:a4:fe:f2:7d:d3:16:0a:41:c1:81:16:85:c3:0e:ba:e5:b0:
9c:3f:26:78:50:83:61:57:cb:75:59:f6:e7:4b:ae:f5:5e:6e:
4a:5e:25:6d:2d:ef:86:6e:39:15:60:91:12:3c:eb:b9:d1:93:
95:e3:15:d5:1b:9a:6a:33:2b:d0:d6:74:10:8d:93:a6:0d:90:
af:5d:ae:88:11:1a:e2:ef:db:b4:d6:7e:aa:c9:92:9c:c1:4d:
82:79:f2:89:33:0f:a0:47:2e:8f:37:d8:a5:93:1e:5c:e0:78:
4a:bc:96:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:17:45 2025 by rpki-client