Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a1db5c09-4590-44b5-8023-fa4bdd8d5bac/1d94b17b-d945-3c4c-97a5-ac85927be366.roa
File: 1d94b17b-d945-3c4c-97a5-ac85927be366.roa (raw, json)
Hash identifier: SXtGE68N1fs2a6NsNC2unfBVqzHkkMku2kUzeWtuXNM=
Subject key identifier: A5:61:21:FE:85:56:78:33:F0:4B:58:49:B2:40:E2:23:0B:33:9B:1E
Certificate issuer: /CN=a1db5c09-4590-44b5-8023-fa4bdd8d5bac
Certificate serial: 010D0C9F43285848B4E9588529A12DA2A30F6580
Authority key identifier: EE:BC:02:B2:23:67:F2:6A:51:5A:16:7F:5E:72:23:BC:96:0D:40:A2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a1db5c09-4590-44b5-8023-fa4bdd8d5bac.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a1db5c09-4590-44b5-8023-fa4bdd8d5bac/1d94b17b-d945-3c4c-97a5-ac85927be366.roa
Signing time: Wed 29 Jan 2025 15:22:33 +0000
ROA not before: Wed 29 Jan 2025 15:22:33 +0000
ROA not after: Tue 29 Apr 2025 14:22:33 +0000
asID: 63134
IP address blocks: 61.8.176.0/20 maxlen: 20
76.164.216.0/22 maxlen: 22
169.150.4.0/22 maxlen: 22
199.91.240.0/21 maxlen: 21
199.204.184.0/22 maxlen: 22
205.173.160.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b4:e9:58:85:29:a1:2d:a2:a3:0f:65:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1db5c09-4590-44b5-8023-fa4bdd8d5bac
Validity
Not Before: Jan 29 15:22:33 2025 GMT
Not After : Apr 29 14:22:33 2025 GMT
Subject: CN=c028757b-65be-4e9e-a27e-4b2f8c33e6fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b0:fc:4e:79:e0:d3:2a:b3:5b:cd:75:c2:a1:
28:2f:40:1a:4d:ad:cb:ad:5f:44:e0:18:00:4f:e5:
44:ef:15:95:3a:4e:8e:0a:19:18:49:95:0a:40:e3:
ec:4b:61:56:ab:0b:52:14:1d:24:8b:0f:d4:92:c4:
41:53:55:42:90:db:57:e4:96:37:51:98:de:a0:06:
29:6f:66:c5:62:4a:12:c6:56:2f:4b:54:60:70:e8:
03:a4:6b:ad:0e:32:65:12:1b:eb:4c:2b:63:6c:43:
cd:ab:01:50:2f:dc:b2:88:bc:1e:96:b1:f1:57:b0:
02:ae:46:ad:46:0c:15:05:05:5d:b6:ac:b8:ec:3a:
b7:45:1d:9e:c2:b9:d4:1b:71:e2:f9:ce:f4:7e:e1:
e6:b6:80:04:cd:fa:d7:4e:0d:af:f8:d6:f3:3c:b6:
6f:fe:26:02:05:37:71:5b:c6:c4:6f:d1:e6:45:68:
e1:44:f6:c0:51:ea:f9:65:d0:f0:f4:00:e3:ba:d3:
da:c9:c3:88:f6:67:81:b9:97:79:10:28:59:b9:19:
51:4a:f5:dd:3c:85:41:cf:f3:f0:1a:22:79:04:48:
e2:6f:e3:20:eb:d4:4e:9c:3e:08:a7:fa:35:d0:33:
74:c2:f0:be:06:d1:c3:38:d3:3e:00:95:76:1e:85:
51:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:61:21:FE:85:56:78:33:F0:4B:58:49:B2:40:E2:23:0B:33:9B:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a1db5c09-4590-44b5-8023-fa4bdd8d5bac/1d94b17b-d945-3c4c-97a5-ac85927be366.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a1db5c09-4590-44b5-8023-fa4bdd8d5bac/a1db5c09-4590-44b5-8023-fa4bdd8d5bac.crl
X509v3 Authority Key Identifier:
keyid:EE:BC:02:B2:23:67:F2:6A:51:5A:16:7F:5E:72:23:BC:96:0D:40:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a1db5c09-4590-44b5-8023-fa4bdd8d5bac.cer
sbgp-ipAddrBlock: critical
IPv4:
61.8.176.0/20
76.164.216.0/22
169.150.4.0/22
199.91.240.0/21
199.204.184.0/22
205.173.160.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:df:04:fa:dc:80:65:4b:9f:55:99:73:a5:cc:dc:11:85:a3:
8c:b1:9b:8c:df:c7:8e:97:21:78:1a:44:8b:3b:3a:4b:ca:2b:
52:8c:b0:72:5d:72:b3:1a:28:39:06:8a:e7:3a:63:5f:07:a7:
54:97:d9:65:0d:1f:f0:08:56:2f:50:1a:70:a4:54:d5:b3:51:
6e:a2:6d:f5:a7:03:74:67:e2:10:84:d5:4a:94:81:85:6b:9b:
dd:90:7a:b8:f0:62:b4:cc:33:8d:f5:a1:29:ca:23:a9:1e:03:
21:e2:41:a9:7f:a0:2e:85:e3:a1:c2:90:62:92:f6:81:be:95:
cc:6c:cb:1f:c4:7a:6d:6a:fa:62:fc:53:fe:2e:ed:25:c1:89:
8c:0e:e2:1d:83:bd:07:16:39:d3:54:6a:3d:5f:c7:1e:2f:28:
60:1e:ac:8e:62:1c:7c:19:cf:b8:8f:14:f8:4f:56:9a:e8:de:
0a:7a:fe:29:ff:64:f8:0a:2a:9c:f7:32:48:c6:f9:f0:82:98:
e0:95:d5:f1:96:53:a2:de:b2:41:cb:36:80:30:56:0a:12:df:
5a:c6:91:54:62:05:8d:4c:50:ad:df:da:bf:99:81:bc:fb:11:
bf:fc:35:5c:c2:0c:5b:3f:55:27:f0:16:b6:fb:b6:fe:79:04:
49:89:8a:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:18:47 2025 by rpki-client