Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/750824e4-669c-4a78-911c-087bf64a7f4a/db3c1469-53ef-353a-b4c0-6b78c0d24d6c.roa
File: db3c1469-53ef-353a-b4c0-6b78c0d24d6c.roa (raw, json)
Hash identifier: sIczi+cP8YfV6EhQ1dDI+3BzUjjMExIQgK1wuDR9dZI=
Subject key identifier: 4E:1F:3D:9F:A5:56:6F:21:4E:96:56:02:D5:28:74:61:2B:49:A0:91
Certificate issuer: /CN=750824e4-669c-4a78-911c-087bf64a7f4a
Certificate serial: 010D0C9F432858493ED3C8D4B2DF73DF16039300
Authority key identifier: 38:54:59:88:87:D9:D6:6D:A5:A5:17:4B:AB:0F:11:46:E5:1C:4D:98
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/750824e4-669c-4a78-911c-087bf64a7f4a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/750824e4-669c-4a78-911c-087bf64a7f4a/db3c1469-53ef-353a-b4c0-6b78c0d24d6c.roa
Signing time: Thu 20 Mar 2025 01:00:39 +0000
ROA not before: Thu 20 Mar 2025 01:00:39 +0000
ROA not after: Wed 18 Jun 2025 01:00:39 +0000
asID: 62809
IP address blocks: 23.148.176.0/24 maxlen: 24
23.148.177.0/24 maxlen: 24
104.250.224.0/22 maxlen: 24
136.175.232.0/22 maxlen: 24
139.64.128.0/22 maxlen: 24
206.28.180.0/22 maxlen: 24
2605:8c40::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3e:d3:c8:d4:b2:df:73:df:16:03:93:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=750824e4-669c-4a78-911c-087bf64a7f4a
Validity
Not Before: Mar 20 01:00:39 2025 GMT
Not After : Jun 18 01:00:39 2025 GMT
Subject: CN=5998c61f-06ad-4cbb-bd19-9209d0ef3eb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:14:32:88:02:87:f0:64:72:86:b6:88:30:fd:
c2:21:0e:e2:a8:50:7c:ab:69:f2:84:a3:6c:ba:bd:
1a:ca:09:b5:4c:91:59:93:02:6f:2d:e6:bd:b1:be:
7c:15:28:13:5b:c0:41:20:1d:74:f3:47:17:e6:6b:
8f:c4:a7:2c:d5:5a:03:d5:f3:ba:cb:01:43:8a:a4:
e9:51:d1:1d:ff:54:e4:58:03:d2:a3:46:88:12:1f:
7e:47:51:bd:23:9b:1f:cf:42:bc:d4:8e:15:cf:72:
3c:31:78:b1:6c:16:e9:c5:dd:3c:ce:4d:08:ab:63:
cd:c1:2d:35:8f:3d:14:ac:12:22:47:d6:d3:99:c1:
45:bd:76:9d:0d:af:72:1d:18:82:31:10:f1:21:29:
88:57:33:ba:35:89:d7:22:3c:d2:e2:70:b5:2d:6e:
00:bc:e9:ee:9a:4a:7d:22:ac:10:70:6e:b6:8f:d9:
18:64:b1:ec:7d:cb:21:f1:48:73:e2:b4:ff:31:ae:
60:17:f1:e8:dd:da:33:9a:51:f3:be:4b:86:23:b7:
b5:c4:a6:e8:21:cf:ab:05:ab:67:59:c2:69:49:b0:
f1:c8:3d:11:7b:34:5d:dc:00:fb:43:8d:42:b6:28:
a9:fb:ec:c9:f5:20:84:a3:31:d3:01:ed:21:62:1b:
85:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:1F:3D:9F:A5:56:6F:21:4E:96:56:02:D5:28:74:61:2B:49:A0:91
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/750824e4-669c-4a78-911c-087bf64a7f4a/db3c1469-53ef-353a-b4c0-6b78c0d24d6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/750824e4-669c-4a78-911c-087bf64a7f4a/750824e4-669c-4a78-911c-087bf64a7f4a.crl
X509v3 Authority Key Identifier:
keyid:38:54:59:88:87:D9:D6:6D:A5:A5:17:4B:AB:0F:11:46:E5:1C:4D:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/750824e4-669c-4a78-911c-087bf64a7f4a.cer
sbgp-ipAddrBlock: critical
IPv4:
23.148.176.0/23
104.250.224.0/22
136.175.232.0/22
139.64.128.0/22
206.28.180.0/22
IPv6:
2605:8c40::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a7:de:49:d3:ae:0b:9a:ae:dc:36:18:57:9f:cb:8c:2c:82:3a:
99:d9:fa:cb:19:c5:24:ee:10:0e:49:9b:c1:69:0d:2b:f4:69:
a9:10:16:96:e3:2e:75:17:93:05:03:de:16:23:d9:21:9b:c5:
c3:ed:f6:45:5c:61:0a:ec:c5:2c:a2:38:ff:b6:66:7c:da:02:
61:16:dd:b5:bb:8f:f3:55:f8:95:f2:e1:0f:c7:35:5a:92:af:
85:7a:18:53:18:97:75:cf:5a:4e:17:b2:07:03:b3:50:13:e9:
36:66:f8:aa:58:4c:e8:7e:25:e8:9c:42:d2:ff:13:03:8f:f1:
e8:21:eb:86:78:a5:1f:0d:ef:0e:27:9e:0c:cb:a6:2c:ad:a0:
00:16:f2:a0:1c:ca:1c:90:7f:e0:23:91:21:43:60:a8:bb:bb:
1d:2f:6e:90:d9:72:a8:0f:9e:79:0a:c9:a9:fa:7f:be:dd:a1:
61:f5:81:33:9c:9f:42:3e:3b:f6:8a:c8:66:fc:18:70:32:8e:
63:74:0e:a6:f5:98:8a:a0:55:cc:a8:bc:da:a7:8a:25:e7:c2:
6b:43:92:64:bc:a9:9e:e9:7d:a6:ce:ce:b8:e0:e5:00:a2:d3:
96:98:cf:25:d3:6a:6a:f5:ac:8f:d6:33:9b:5c:79:4f:7a:1d:
ce:b9:c2:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 10:10:39 2025 by rpki-client