Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0339efaa-3121-4a82-8dd8-192f56ab47d1/0e6c0abf-ac2d-31c7-9761-33bd0201ff2f.roa
File: 0e6c0abf-ac2d-31c7-9761-33bd0201ff2f.roa (raw, json)
Hash identifier: 5qiqxdXeq9AchI9m14jFUiELobpEb1E1xnankKWDXa4=
Subject key identifier: 69:83:2F:14:23:23:05:E3:B8:0E:15:93:43:D5:48:48:11:8A:61:CA
Certificate issuer: /CN=0339efaa-3121-4a82-8dd8-192f56ab47d1
Certificate serial: 010D0C9F432858487CEB2C572B828F43BCA869E6
Authority key identifier: B7:D4:2E:91:48:02:33:18:5A:64:6C:A5:2B:0C:93:B7:AF:1F:EC:B3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0339efaa-3121-4a82-8dd8-192f56ab47d1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0339efaa-3121-4a82-8dd8-192f56ab47d1/0e6c0abf-ac2d-31c7-9761-33bd0201ff2f.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 14041
IP address blocks: 198.177.182.0/24 maxlen: 24
198.200.151.0/24 maxlen: 24
199.104.104.0/24 maxlen: 24
199.104.105.0/24 maxlen: 24
204.145.202.0/24 maxlen: 24
204.228.170.0/24 maxlen: 24
204.228.175.0/24 maxlen: 24
204.228.176.0/24 maxlen: 24
204.228.177.0/24 maxlen: 24
204.228.178.0/24 maxlen: 24
204.228.179.0/24 maxlen: 24
204.228.180.0/24 maxlen: 24
204.228.181.0/24 maxlen: 24
204.228.182.0/24 maxlen: 24
204.228.183.0/24 maxlen: 24
204.228.184.0/24 maxlen: 24
204.228.185.0/24 maxlen: 24
204.228.186.0/24 maxlen: 24
204.228.187.0/24 maxlen: 24
204.228.188.0/24 maxlen: 24
204.228.189.0/24 maxlen: 24
204.228.190.0/24 maxlen: 24
204.228.191.0/24 maxlen: 24
204.238.94.0/24 maxlen: 24
204.238.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:2c:57:2b:82:8f:43:bc:a8:69:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0339efaa-3121-4a82-8dd8-192f56ab47d1
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=af8c3ff8-e61b-41b9-b175-8c5450ee0b55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6a:c7:d9:1e:87:7e:9e:39:4d:2d:be:e0:b0:
e8:07:21:3f:1d:fd:19:1d:b4:d3:bd:29:1e:b9:4d:
60:17:1b:eb:77:e2:42:cb:49:95:43:43:1f:fe:89:
7e:47:1c:3f:dd:b8:38:e5:24:60:f2:59:2a:4f:80:
c9:93:22:ab:6e:40:df:d8:33:9c:68:ba:26:24:67:
d9:8d:1e:17:fd:7c:7f:0f:bb:f9:fc:e9:55:17:99:
ae:e5:81:0a:88:67:a6:ac:5c:14:f3:57:f3:3e:00:
86:d0:90:d7:38:02:2a:32:e1:a6:10:f8:40:db:7f:
e3:71:ca:ca:d6:cd:03:cc:0b:97:9a:62:40:a0:e4:
82:66:d5:61:ca:4e:68:3f:54:c2:23:e4:82:c6:40:
ce:d3:96:fb:7b:29:4a:cb:fe:ba:04:a1:c6:09:fc:
3a:85:f9:c7:7d:c2:c0:ed:91:eb:11:ce:7d:53:13:
ea:34:c3:51:04:56:ee:07:35:a7:0d:da:f4:24:99:
7f:cd:09:f0:f7:8a:56:46:22:b9:e3:0e:60:6d:4c:
dc:f8:46:dd:23:15:a8:fa:df:d1:61:34:d1:68:98:
86:00:87:52:c4:fb:57:36:4e:59:3a:b6:b9:6b:21:
f8:df:c1:85:f4:8c:76:c0:6e:fe:df:a0:56:b8:be:
c4:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:83:2F:14:23:23:05:E3:B8:0E:15:93:43:D5:48:48:11:8A:61:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0339efaa-3121-4a82-8dd8-192f56ab47d1/0e6c0abf-ac2d-31c7-9761-33bd0201ff2f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0339efaa-3121-4a82-8dd8-192f56ab47d1/0339efaa-3121-4a82-8dd8-192f56ab47d1.crl
X509v3 Authority Key Identifier:
keyid:B7:D4:2E:91:48:02:33:18:5A:64:6C:A5:2B:0C:93:B7:AF:1F:EC:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0339efaa-3121-4a82-8dd8-192f56ab47d1.cer
sbgp-ipAddrBlock: critical
IPv4:
198.177.182.0/24
198.200.151.0/24
199.104.104.0/23
204.145.202.0/24
204.228.170.0/24
204.228.175.0-204.228.191.255
204.238.94.0/24
204.238.123.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:67:9a:fd:28:cc:27:97:d1:f3:f1:1e:e5:78:a1:8d:37:9e:
df:74:60:5e:6f:79:91:af:d1:a7:b5:c1:79:4a:ef:c9:9c:d5:
aa:3b:22:01:e7:5c:f4:db:a7:d4:0e:a7:cd:35:0b:c1:97:27:
f0:e2:24:04:40:67:3e:f8:dd:d3:0d:8c:1f:ee:c4:a0:d2:76:
57:91:28:71:cf:e7:11:ad:48:9b:5a:f2:4e:24:ef:4a:9d:01:
29:5f:77:70:3a:4f:f6:bf:e5:0b:f3:25:41:27:fc:92:88:1c:
70:52:e3:aa:0e:cf:bd:b1:4e:f8:fa:20:f4:32:35:34:ce:5f:
d9:06:f4:af:bb:39:d9:79:6a:be:59:8b:8d:ed:07:ed:dc:3a:
c5:59:c9:ef:16:09:13:e4:bc:ad:da:d1:35:ce:ea:c9:db:60:
ea:ae:05:e3:cf:5c:55:c9:83:63:96:76:45:82:e4:94:5e:0e:
10:42:85:26:d1:ed:b9:6e:d4:ab:9c:cf:d3:5d:c2:40:50:ff:
bf:cc:4a:cc:9c:5a:58:42:74:21:e4:bf:ac:cc:20:75:27:7a:
43:fa:72:6b:01:1b:6e:f2:00:ae:6f:43:9d:35:9b:f0:bd:ac:
07:29:e0:b5:38:96:75:cc:a6:71:20:dd:8a:e0:5a:bd:b1:5a:
83:2f:b8:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:09:04 2025 by rpki-client