Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7895ee85-2a16-4e54-9c5b-a9a05908877e/62245edf-4a52-39e6-b6bf-fa0b4dd123ab.roa
File: 62245edf-4a52-39e6-b6bf-fa0b4dd123ab.roa (raw, json)
Hash identifier: jnzHvkMyp2JYdowF8mZmEP1fevZ47bGLj/AT0hYt3QA=
Subject key identifier: 52:79:4F:06:DB:B7:D6:12:92:B7:FB:5A:09:0F:14:A0:1A:EB:FE:47
Certificate issuer: /CN=7895ee85-2a16-4e54-9c5b-a9a05908877e
Certificate serial: 010D0C9F432858491A27FE8337463102EA026F00
Authority key identifier: B3:A1:A3:AD:2A:8A:F8:D4:55:EF:1D:E7:A8:25:7E:11:79:B2:F5:2A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7895ee85-2a16-4e54-9c5b-a9a05908877e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7895ee85-2a16-4e54-9c5b-a9a05908877e/62245edf-4a52-39e6-b6bf-fa0b4dd123ab.roa
Signing time: Thu 06 Mar 2025 21:45:25 +0000
ROA not before: Thu 06 Mar 2025 21:45:25 +0000
ROA not after: Wed 04 Jun 2025 20:45:25 +0000
asID: 16832
IP address blocks: 138.128.232.0/21 maxlen: 21
192.161.66.0/23 maxlen: 23
208.117.64.0/20 maxlen: 20
208.123.128.0/19 maxlen: 19
216.41.136.0/22 maxlen: 22
2605:2b80::/32 maxlen: 32
2606:9f80::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1a:27:fe:83:37:46:31:02:ea:02:6f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7895ee85-2a16-4e54-9c5b-a9a05908877e
Validity
Not Before: Mar 6 21:45:25 2025 GMT
Not After : Jun 4 20:45:25 2025 GMT
Subject: CN=95a77183-0721-418d-859d-248bd2cf0749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2f:d0:6e:5b:1e:f6:43:ac:58:be:f0:cc:34:
2c:5d:4b:50:01:55:9a:9b:75:f3:04:7a:7d:b3:f1:
ce:c4:84:61:18:e9:5c:04:7e:a4:3c:14:6c:cf:9b:
48:95:05:82:70:f6:bd:9e:25:af:51:54:79:61:74:
6c:fd:3c:75:7b:e6:5f:b7:c8:8c:89:03:62:23:42:
0e:76:b7:34:bc:52:f3:4d:04:53:82:b9:77:7e:a0:
26:62:68:aa:8d:2c:d9:c3:60:c2:f0:22:dd:20:1b:
c4:3b:03:b5:ff:03:ef:2a:c0:d0:7a:a4:b8:a6:7f:
17:2c:ad:8b:00:29:94:22:98:82:3f:d9:12:1f:67:
45:89:a4:4b:a9:dc:32:46:7f:14:47:eb:15:ef:b0:
80:d2:23:35:f0:53:ff:8c:d3:62:e5:58:06:d1:98:
a8:1e:fd:3b:67:b0:65:cf:7f:ef:81:5d:d0:da:88:
39:6d:bb:39:2f:12:91:f7:d0:0e:80:df:a8:3d:ac:
dc:9d:6c:46:c1:85:5a:e4:9a:b3:49:8c:e0:e1:dc:
19:65:78:cd:ad:f3:69:c1:c8:2e:76:60:73:b5:79:
b0:78:e7:96:c1:4f:66:78:6c:e6:82:db:69:5c:31:
7c:eb:33:b1:51:8b:3d:77:0a:d2:21:38:d7:21:21:
1e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:79:4F:06:DB:B7:D6:12:92:B7:FB:5A:09:0F:14:A0:1A:EB:FE:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7895ee85-2a16-4e54-9c5b-a9a05908877e/62245edf-4a52-39e6-b6bf-fa0b4dd123ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7895ee85-2a16-4e54-9c5b-a9a05908877e/7895ee85-2a16-4e54-9c5b-a9a05908877e.crl
X509v3 Authority Key Identifier:
keyid:B3:A1:A3:AD:2A:8A:F8:D4:55:EF:1D:E7:A8:25:7E:11:79:B2:F5:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7895ee85-2a16-4e54-9c5b-a9a05908877e.cer
sbgp-ipAddrBlock: critical
IPv4:
138.128.232.0/21
192.161.66.0/23
208.117.64.0/20
208.123.128.0/19
216.41.136.0/22
IPv6:
2605:2b80::/32
2606:9f80::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:f6:bb:7d:9e:9d:fb:e7:3d:10:c0:55:b5:3d:75:b7:62:16:
0f:35:b1:7e:08:56:d8:e3:aa:47:49:a6:38:83:ab:30:ed:8f:
3c:c8:fc:06:b6:df:ac:3b:d7:49:27:fb:e7:aa:83:3d:07:af:
76:b2:51:22:c3:cf:d5:41:20:c4:2d:a1:1e:2f:a6:f1:8f:a2:
2b:22:13:bc:dc:b8:01:43:bb:d7:5e:14:77:27:a8:a9:55:fc:
92:0f:22:5d:69:8b:0c:b6:38:0c:b6:d6:4c:b2:6b:ed:ba:2c:
a1:2e:b2:8a:95:ba:dd:81:90:cd:f6:86:87:b3:4b:dd:a4:de:
26:25:98:75:90:d0:dd:97:8d:f8:a8:92:54:e4:c1:31:db:10:
e2:26:0b:6e:4d:a3:ce:75:46:ed:2a:de:a6:4c:dd:86:79:68:
f6:f6:0a:9f:4b:16:5d:cb:84:cb:94:87:96:64:4d:74:e6:f6:
7f:9f:e0:55:03:c1:aa:f8:d4:e6:57:24:3c:1d:cf:5c:42:ef:
e7:85:78:25:fc:98:8f:63:95:82:b8:7d:5e:dc:4f:a3:aa:e8:
63:db:67:3f:c7:fe:09:f8:44:3e:0c:26:c4:33:19:09:72:95:
3d:97:1c:e9:30:32:04:9c:31:c5:a0:9c:71:ac:cd:ae:db:75:
13:bf:68:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:00:27 2025 by rpki-client