Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c/7f8ab63b-847b-34e6-a398-301d847ad7f0.roa
File: 7f8ab63b-847b-34e6-a398-301d847ad7f0.roa (raw, json)
Hash identifier: GvMGEvcDSBwcqOfDvSk8EvdIyl3vTxzczAFLMXN8RGc=
Subject key identifier: 1D:A3:A1:79:A4:C1:A7:EC:B6:B3:42:68:18:61:B1:79:73:C6:46:01
Certificate issuer: /CN=43ac5ede-1d27-41a5-932c-21832f3ef95c
Certificate serial: 010D0C9F43285849088159C8C7B263CD03CDDA00
Authority key identifier: 09:3E:48:28:77:AE:C9:66:5D:E7:F1:3F:39:E3:B7:7E:84:9F:9A:CD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c/7f8ab63b-847b-34e6-a398-301d847ad7f0.roa
Signing time: Fri 28 Feb 2025 14:00:52 +0000
ROA not before: Fri 28 Feb 2025 14:00:52 +0000
ROA not after: Thu 29 May 2025 13:00:52 +0000
asID: 19905
IP address blocks: 104.151.136.0/21 maxlen: 24
104.153.192.0/22 maxlen: 24
199.19.208.0/22 maxlen: 24
199.189.64.0/22 maxlen: 24
208.74.28.0/22 maxlen: 24
208.74.48.0/22 maxlen: 24
208.82.204.0/22 maxlen: 24
208.91.48.0/22 maxlen: 24
209.134.48.0/20 maxlen: 24
2607:f148::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:08:81:59:c8:c7:b2:63:cd:03:cd:da:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43ac5ede-1d27-41a5-932c-21832f3ef95c
Validity
Not Before: Feb 28 14:00:52 2025 GMT
Not After : May 29 13:00:52 2025 GMT
Subject: CN=3d346daa-077e-47b5-8d84-3802e5c1dfc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a9:f9:1a:7e:bf:62:d2:4d:20:f7:a6:7a:b3:
e7:f9:4c:47:4f:59:03:36:27:83:26:81:8a:72:2a:
12:fd:83:8c:95:86:31:ec:8b:bd:26:08:83:2b:8c:
09:14:92:7e:6d:64:f2:f8:5b:7f:fe:bd:c9:70:44:
01:58:91:79:dd:de:14:a7:5d:5f:02:e2:58:7b:c7:
8f:a6:f0:b2:58:32:f5:c2:37:44:f9:77:91:bc:97:
e5:f4:2e:89:d5:ed:64:39:41:24:9a:d7:b2:72:f7:
3d:3e:ca:50:32:75:54:54:5e:0d:d1:57:e6:c1:3b:
5b:1e:e3:17:57:1c:a1:e2:9e:2b:2e:54:a6:6b:80:
cb:27:a4:78:f5:ce:40:7a:19:f8:b0:16:ab:88:5d:
a1:ce:0c:4a:ca:ad:99:90:dd:cb:73:3d:09:6f:ff:
e2:e3:e4:b6:bd:9c:d6:01:40:7c:72:86:ea:2c:52:
98:84:44:a1:0d:14:6a:8f:34:52:37:fc:b8:d1:b9:
23:40:2a:32:ff:a0:19:23:94:79:23:cf:7f:42:0c:
40:fd:93:3c:28:22:4b:66:72:ea:9e:8c:17:a4:fe:
5e:f9:ad:9f:5f:bd:74:b2:a3:42:4b:f3:53:89:96:
a1:06:27:ee:f4:87:1d:a4:9d:49:9b:eb:01:aa:a1:
3c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:A3:A1:79:A4:C1:A7:EC:B6:B3:42:68:18:61:B1:79:73:C6:46:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c/7f8ab63b-847b-34e6-a398-301d847ad7f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c/43ac5ede-1d27-41a5-932c-21832f3ef95c.crl
X509v3 Authority Key Identifier:
keyid:09:3E:48:28:77:AE:C9:66:5D:E7:F1:3F:39:E3:B7:7E:84:9F:9A:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.151.136.0/21
104.153.192.0/22
199.19.208.0/22
199.189.64.0/22
208.74.28.0/22
208.74.48.0/22
208.82.204.0/22
208.91.48.0/22
209.134.48.0/20
IPv6:
2607:f148::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:c2:34:57:69:d0:d1:e4:02:64:20:92:86:ff:20:95:0e:2a:
af:97:72:ef:a0:8a:93:36:cd:8a:b8:93:64:c3:06:bd:28:1d:
97:ed:86:61:17:95:6f:af:58:bf:7b:c1:1f:a8:7d:0d:a5:d9:
15:b6:f9:e7:37:3d:72:ca:85:e1:bc:29:a1:e1:48:cd:c1:80:
79:9c:a0:01:ad:57:05:48:2f:cd:ef:a7:60:b4:f4:fa:12:a1:
3d:0c:d1:96:c4:93:40:21:32:b2:6b:ac:8b:1e:39:ca:9d:e4:
97:57:21:85:d4:09:1a:1a:49:f2:52:09:c4:d7:63:ae:a1:43:
49:4d:40:fc:f2:b3:05:3f:86:9a:af:27:88:cc:28:04:aa:ad:
12:e6:95:83:f8:88:91:ac:99:81:0e:49:79:79:1d:41:61:85:
83:52:b0:9b:74:65:dc:69:81:4c:0a:71:e0:d0:6b:24:da:77:
15:20:7e:3f:1e:d8:35:a7:07:4d:3f:41:a6:06:a9:6a:5e:ec:
4e:a3:1f:f1:58:75:03:90:ad:9a:2f:9a:cb:fb:f3:1d:70:14:
de:1f:e2:6e:10:9a:5b:eb:e9:a9:5e:95:b5:17:f5:e0:23:86:
ef:6b:fc:36:82:69:a5:6b:a6:81:35:f3:46:e6:77:46:2e:ae:
3a:dc:4e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 09:29:12 2025 by rpki-client