Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/68b39235-773a-4108-9528-465304a966b3/7b7a9900-18bb-32ef-b8b2-1d6831729c39.roa
File: 7b7a9900-18bb-32ef-b8b2-1d6831729c39.roa (raw, json)
Hash identifier: 8VTwTo76RDGItkUgzyBKAvxa0ORYv3og53fMU1+JYUY=
Subject key identifier: 85:86:48:1F:7B:44:68:C7:4F:A9:B0:5C:73:25:43:A6:41:A8:69:05
Certificate issuer: /CN=68b39235-773a-4108-9528-465304a966b3
Certificate serial: 010D0C9F4328584882808F890F533E85B8933B80
Authority key identifier: BE:B7:8E:0F:E3:65:3F:5A:C9:05:7A:62:4C:DC:7B:71:AE:FE:45:01
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/68b39235-773a-4108-9528-465304a966b3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/68b39235-773a-4108-9528-465304a966b3/7b7a9900-18bb-32ef-b8b2-1d6831729c39.roa
Signing time: Sat 11 Jan 2025 14:00:52 +0000
ROA not before: Sat 11 Jan 2025 14:00:52 +0000
ROA not after: Fri 11 Apr 2025 13:00:52 +0000
asID: 63296
IP address blocks: 23.174.240.0/24 maxlen: 24
52.129.120.0/21 maxlen: 24
104.245.72.0/21 maxlen: 24
107.178.20.0/24 maxlen: 24
107.178.28.0/24 maxlen: 24
107.178.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:82:80:8f:89:0f:53:3e:85:b8:93:3b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b39235-773a-4108-9528-465304a966b3
Validity
Not Before: Jan 11 14:00:52 2025 GMT
Not After : Apr 11 13:00:52 2025 GMT
Subject: CN=b9a48641-3270-4298-af17-0f7ba383c9c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:bf:97:53:3b:88:4e:8c:56:a0:aa:2e:57:9a:
a0:55:1f:93:05:ee:7d:9d:fe:77:2b:7b:7f:41:69:
30:ac:a4:1a:b1:f3:75:24:48:e2:d0:ca:b6:bb:4a:
84:d3:4f:89:70:3e:2f:69:d1:c2:66:89:27:02:3b:
df:71:15:89:f5:33:c6:27:68:60:61:1c:05:4c:c4:
ad:52:9c:d0:df:4d:d9:ba:7b:6d:3e:8e:c3:07:1f:
c0:eb:80:96:15:d3:a2:97:9c:c6:95:ae:58:e0:13:
cd:12:98:72:55:9d:29:2c:48:d5:7f:ea:27:87:17:
b9:eb:3c:88:10:a7:01:df:5a:c4:6a:8c:2d:86:21:
5a:8b:78:96:18:0a:77:eb:93:04:04:b4:36:56:b9:
27:40:d1:cb:f2:a3:59:0c:37:16:9b:96:7b:8e:eb:
2c:68:2a:ff:e0:d9:00:db:fd:92:a3:47:52:fe:6d:
3a:c8:ba:ba:7c:92:24:81:0b:88:ce:7c:32:c4:1b:
3c:18:8e:e3:5b:00:df:3a:30:51:e5:25:1b:e8:47:
66:2e:ed:64:1d:e3:ed:c9:3b:34:b4:9c:45:10:8b:
6c:b0:2f:ad:70:b9:ee:cd:f4:5d:56:74:ca:88:b2:
82:f0:28:9e:1e:fb:1b:e3:cc:5b:9a:cb:fe:c8:0c:
d8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:86:48:1F:7B:44:68:C7:4F:A9:B0:5C:73:25:43:A6:41:A8:69:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/68b39235-773a-4108-9528-465304a966b3/7b7a9900-18bb-32ef-b8b2-1d6831729c39.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/68b39235-773a-4108-9528-465304a966b3/68b39235-773a-4108-9528-465304a966b3.crl
X509v3 Authority Key Identifier:
keyid:BE:B7:8E:0F:E3:65:3F:5A:C9:05:7A:62:4C:DC:7B:71:AE:FE:45:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/68b39235-773a-4108-9528-465304a966b3.cer
sbgp-ipAddrBlock: critical
IPv4:
23.174.240.0/24
52.129.120.0/21
104.245.72.0/21
107.178.20.0/24
107.178.28.0/24
107.178.31.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a8:fd:62:11:ec:ab:85:79:ff:eb:c8:f7:82:91:44:db:dd:ae:
40:97:4f:ca:1b:b4:9b:fc:15:a9:cb:58:86:95:60:a9:21:ea:
fb:ad:28:fe:34:30:b5:61:db:48:9e:94:b7:56:77:dd:86:a6:
08:5c:e0:98:ec:0a:62:87:b9:2e:4e:c1:2c:73:8a:ca:28:78:
4a:1f:dd:6d:6d:04:7a:39:f5:19:df:7c:d2:22:b4:8f:9a:e4:
66:ac:9e:61:11:6c:d5:a7:bc:21:4c:45:e2:16:46:a5:77:99:
d1:4a:af:9f:30:9f:10:4c:46:fb:96:a7:e0:e2:20:20:dd:24:
ce:e3:b9:32:07:3e:ad:84:92:c4:cb:9a:46:20:e6:70:2d:27:
45:d6:8d:2b:96:3e:8f:11:90:8b:b8:8b:a0:c0:5c:a5:e9:fc:
1d:ff:7a:19:5d:82:f1:32:ac:ba:02:c8:07:bc:39:29:28:b0:
45:f7:fa:9e:fb:14:a4:42:53:f5:1b:3a:44:c8:09:40:5d:14:
c8:e8:6b:76:e3:c1:02:9d:3d:a2:f0:20:7d:da:a3:1b:f0:87:
3e:0d:50:05:e8:2f:88:b1:0c:07:cf:f1:09:72:8c:b4:be:37:
be:50:8e:a7:62:fd:b9:e0:44:38:90:ce:75:e2:3d:71:27:23:
18:f9:81:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:11:22 2025 by rpki-client