Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1dc615c9-1f04-445c-8905-cca137e2c2c8/e273b1c8-b44d-3fff-be21-ce4c705754c5.roa
File: e273b1c8-b44d-3fff-be21-ce4c705754c5.roa (raw, json)
Hash identifier: D9OmB5p9VNpd1KHO747WXqQXuaZqa/R4eejl95V/Rzk=
Subject key identifier: FB:AE:69:28:0E:8A:C0:34:E6:F7:42:AC:A8:D0:8D:6F:60:9B:D4:CE
Certificate issuer: /CN=1dc615c9-1f04-445c-8905-cca137e2c2c8
Certificate serial: 010D0C9F43285848611B1C328B0D32906CD86C80
Authority key identifier: 20:62:6C:27:B3:0F:6C:17:F1:E2:7E:5C:37:7A:95:09:1C:1B:7C:72
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1dc615c9-1f04-445c-8905-cca137e2c2c8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1dc615c9-1f04-445c-8905-cca137e2c2c8/e273b1c8-b44d-3fff-be21-ce4c705754c5.roa
Signing time: Mon 30 Dec 2024 14:54:55 +0000
ROA not before: Mon 30 Dec 2024 14:54:55 +0000
ROA not after: Sun 30 Mar 2025 13:54:55 +0000
asID: 30602
IP address blocks: 64.111.192.0/19 maxlen: 24
64.188.48.0/20 maxlen: 24
66.230.128.0/18 maxlen: 24
68.169.64.0/19 maxlen: 24
68.169.96.0/20 maxlen: 24
76.9.0.0/19 maxlen: 24
162.217.36.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:61:1b:1c:32:8b:0d:32:90:6c:d8:6c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dc615c9-1f04-445c-8905-cca137e2c2c8
Validity
Not Before: Dec 30 14:54:55 2024 GMT
Not After : Mar 30 13:54:55 2025 GMT
Subject: CN=d1f0b435-c2db-41b9-ab44-6452614d9343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:32:a8:56:f0:f6:9a:c0:76:f2:fb:80:1f:9e:
e3:45:f6:9a:f3:b6:4a:68:72:96:ee:46:9c:0c:c9:
9e:b1:1e:fb:d5:fe:da:b1:4d:43:31:e1:d0:81:cb:
b9:c0:8b:c7:14:a0:35:d2:e1:a1:a0:53:7b:2a:af:
21:68:fd:61:e9:25:97:76:2b:a7:d7:47:aa:45:94:
13:0a:b2:93:8d:03:5d:d2:3b:4a:2c:00:bb:f4:6f:
2e:86:9b:92:ed:27:12:29:eb:4f:91:c6:e5:ab:0d:
6c:37:80:2b:be:84:33:92:64:73:c8:9c:9a:3a:b4:
f5:09:d7:a3:3d:b3:4d:70:b2:bd:00:cd:fb:07:ff:
b1:31:9f:15:34:b3:06:9a:64:fc:1e:ab:51:e6:7e:
14:2a:be:35:72:73:41:3d:3e:f4:88:cf:f9:9f:fd:
6c:18:35:d8:e7:11:6b:0c:26:64:c2:f3:0a:9d:20:
ee:e6:ab:03:83:1c:d0:73:e1:67:81:d5:de:9a:18:
d8:67:f2:dc:f4:39:33:2c:52:ed:bb:69:7d:7e:65:
4f:e6:4a:54:e8:c9:e0:62:72:64:aa:c5:bd:6d:c1:
db:a4:c5:9f:bd:71:01:32:19:56:0f:10:b8:7c:3f:
0c:6e:48:96:45:64:09:0c:76:d4:8c:c2:f2:17:7e:
1c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:AE:69:28:0E:8A:C0:34:E6:F7:42:AC:A8:D0:8D:6F:60:9B:D4:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1dc615c9-1f04-445c-8905-cca137e2c2c8/e273b1c8-b44d-3fff-be21-ce4c705754c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1dc615c9-1f04-445c-8905-cca137e2c2c8/1dc615c9-1f04-445c-8905-cca137e2c2c8.crl
X509v3 Authority Key Identifier:
keyid:20:62:6C:27:B3:0F:6C:17:F1:E2:7E:5C:37:7A:95:09:1C:1B:7C:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1dc615c9-1f04-445c-8905-cca137e2c2c8.cer
sbgp-ipAddrBlock: critical
IPv4:
64.111.192.0/19
64.188.48.0/20
66.230.128.0/18
68.169.64.0-68.169.111.255
76.9.0.0/19
162.217.36.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:ed:6e:cc:cd:c0:4e:e2:5c:f1:7f:55:4e:fb:de:aa:54:12:
59:e9:95:08:b3:7d:42:29:69:34:aa:fa:45:44:82:9e:a2:d7:
01:da:1f:95:5c:d0:c0:7f:fa:f0:1f:79:1f:44:ac:0f:61:3b:
b4:59:ee:38:fc:aa:2a:ff:7f:6b:c7:a3:3f:87:af:99:56:b3:
6c:da:8a:98:d1:89:50:07:29:28:b5:fa:9b:ab:9b:e9:3c:5b:
58:23:ee:62:55:d3:a3:ba:5f:f5:d1:0d:14:b7:40:48:83:9f:
19:d9:06:61:33:fd:d3:10:d0:af:15:7e:db:2a:7a:a2:5a:1a:
d8:59:0d:a4:1c:60:b3:47:53:c5:8a:b6:1c:56:ee:c5:27:a6:
e5:0c:9e:e8:9a:5b:47:ec:8e:e4:f5:11:ff:20:7c:5d:88:47:
1d:32:82:0d:76:91:13:57:dc:39:74:c8:98:9f:0c:0b:be:7d:
50:e9:5c:18:da:88:fd:a3:3c:81:51:d9:d0:20:f7:20:53:d0:
74:07:30:1b:cd:89:a9:4e:48:12:5b:04:ec:5f:e3:c0:ef:b4:
c1:bb:65:65:c0:22:e8:60:3d:d3:87:6b:fb:cc:2a:39:4d:fa:
a2:fa:87:0f:95:23:71:a4:29:c6:de:fd:f5:bc:91:62:9d:0e:
f3:eb:90:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:42:01 2025 by rpki-client