Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/4984dde8-f7a1-3fa8-9f2f-fb73ef1e03ce.roa
File: 4984dde8-f7a1-3fa8-9f2f-fb73ef1e03ce.roa (raw, json)
Hash identifier: 2p8/ZEViWMdnt/4IoL/ldB+qNJ4Cd1Io5dbwHo37hk8=
Subject key identifier: AD:4D:3F:62:C9:FE:E4:9C:9F:FB:1E:0C:A4:F2:FC:8E:AA:6C:6A:87
Certificate issuer: /CN=5e3e99cc-7992-4ac1-a256-917cce07532e
Certificate serial: 010D0C9F43285848D4DB9185CC40690D9AFF0400
Authority key identifier: D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/4984dde8-f7a1-3fa8-9f2f-fb73ef1e03ce.roa
Signing time: Mon 10 Feb 2025 02:00:38 +0000
ROA not before: Mon 10 Feb 2025 02:00:38 +0000
ROA not after: Sun 11 May 2025 01:00:38 +0000
asID: 3320
IP address blocks: 67.214.178.0/24 maxlen: 24
74.80.157.0/24 maxlen: 24
74.80.165.0/24 maxlen: 24
74.80.174.0/24 maxlen: 24
74.80.177.0/24 maxlen: 24
74.80.178.0/24 maxlen: 24
206.212.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d4:db:91:85:cc:40:69:0d:9a:ff:04:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e3e99cc-7992-4ac1-a256-917cce07532e
Validity
Not Before: Feb 10 02:00:38 2025 GMT
Not After : May 11 01:00:38 2025 GMT
Subject: CN=97105dd1-703e-4684-b307-cd571f3b7ef9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d4:05:00:76:a9:5e:b4:0b:2c:2e:ee:9d:b6:
0b:ca:97:63:42:76:cc:3d:b6:71:95:b0:23:c8:ff:
af:c8:c0:e5:66:30:06:c1:82:3c:fc:28:f1:2a:4c:
13:a3:9d:3a:c6:8e:05:50:c1:a0:b6:36:97:f7:08:
c3:58:04:5b:fc:49:3e:46:9d:43:f1:c8:ba:7c:f7:
ff:77:ad:69:81:1f:14:d5:81:c2:a8:d1:e4:c1:0a:
fc:bd:fe:c6:2d:0d:c2:fb:c7:44:db:18:fb:19:e4:
7f:d2:d8:d5:ba:bf:83:fd:8c:82:b5:bb:89:ba:29:
2d:bf:bf:70:be:7b:c9:5f:d1:66:c5:bf:0a:1e:b7:
0f:94:f1:3f:44:5f:b9:68:32:ee:cb:b4:bb:51:f9:
79:fa:ca:11:1d:37:c8:4f:ef:d4:2b:05:48:59:bf:
b3:b9:1f:a3:52:42:4e:d0:c8:1e:32:33:a0:b5:6a:
0f:19:b3:0a:47:06:80:26:c7:fd:9d:61:99:12:7c:
0f:d6:80:85:d6:0d:05:b1:79:93:28:f6:f8:a6:16:
48:e1:62:b8:37:5d:a5:35:98:a4:02:bf:04:3d:11:
1b:9c:14:5a:13:fe:c3:44:e0:d6:e0:03:d1:1d:2a:
cb:b9:f5:47:d9:97:ba:b3:f0:a7:a1:69:d4:d6:c7:
35:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:4D:3F:62:C9:FE:E4:9C:9F:FB:1E:0C:A4:F2:FC:8E:AA:6C:6A:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/4984dde8-f7a1-3fa8-9f2f-fb73ef1e03ce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl
X509v3 Authority Key Identifier:
keyid:D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
sbgp-ipAddrBlock: critical
IPv4:
67.214.178.0/24
74.80.157.0/24
74.80.165.0/24
74.80.174.0/24
74.80.177.0-74.80.178.255
206.212.251.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:45:21:2e:bb:0e:a1:54:75:44:9a:ef:14:c4:59:ff:a3:1b:
b6:f1:36:ef:83:97:a7:eb:6c:ec:e7:39:32:45:1b:be:b8:bd:
a2:a8:f0:57:8b:5f:17:2d:ae:cb:5f:77:26:8e:54:95:81:64:
3d:2f:ac:ee:66:c7:47:c7:fa:d3:3b:0d:7a:ce:41:8a:ff:47:
44:31:a9:b2:3a:f9:17:df:03:48:05:e4:3a:0b:4f:49:bc:56:
cf:54:0a:65:07:19:d0:f6:e4:7a:19:fc:8d:f5:c5:86:7e:0a:
d8:fc:32:a3:7f:a5:f1:d8:d2:c2:19:2c:8e:8a:bb:69:cd:fb:
de:f4:c8:01:cd:44:c2:3b:60:d6:49:02:3d:8c:35:f7:8d:fe:
cf:c0:0f:b2:49:19:71:9e:fe:e5:b9:3b:6d:7c:ec:48:f3:7f:
f2:f9:9a:f3:08:e6:ad:d5:8b:0a:0d:f3:84:e4:b1:9d:31:42:
e4:52:74:cd:ba:cd:a1:ff:ed:4d:a6:f1:ec:41:e6:ad:a1:2e:
6e:9c:e9:65:a7:db:10:8f:76:ad:0f:f7:12:57:f0:28:f5:ec:
c7:b1:e4:5b:a6:69:71:48:ce:25:a1:1c:b5:18:1f:d0:00:36:
35:5f:49:75:c3:f1:f8:36:32:de:f3:e9:b3:36:a3:2e:12:02:
a3:eb:d8:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:35:40 2025 by rpki-client