Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9696ca72-0d62-4fc3-b383-c596c4f11958/e8618f4f-7894-3379-ba43-706d25d57bf7.roa
File: e8618f4f-7894-3379-ba43-706d25d57bf7.roa (raw, json)
Hash identifier: uglKFS0rijvvx5dH2kBsQy7XQO5gD3VlBv0vVn5+K78=
Subject key identifier: 10:14:2A:FF:2B:AE:5D:C9:52:BB:CE:85:0B:7C:81:61:B4:C1:51:E5
Certificate issuer: /CN=9696ca72-0d62-4fc3-b383-c596c4f11958
Certificate serial: 010D0C9F43285848E59BC76B1AC8786048053620
Authority key identifier: 2E:55:FC:91:1D:44:AE:0E:73:86:AC:69:79:14:3C:D7:CD:4A:C4:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9696ca72-0d62-4fc3-b383-c596c4f11958.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9696ca72-0d62-4fc3-b383-c596c4f11958/e8618f4f-7894-3379-ba43-706d25d57bf7.roa
Signing time: Sun 16 Feb 2025 02:00:40 +0000
ROA not before: Sun 16 Feb 2025 02:00:40 +0000
ROA not after: Sat 17 May 2025 01:00:40 +0000
asID: 3562
IP address blocks: 134.252.0.0/16 maxlen: 32
146.246.0.0/16 maxlen: 32
192.73.208.0/24 maxlen: 32
192.160.228.0/24 maxlen: 32
198.206.219.0/24 maxlen: 32
198.206.221.0/24 maxlen: 32
204.238.65.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e5:9b:c7:6b:1a:c8:78:60:48:05:36:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9696ca72-0d62-4fc3-b383-c596c4f11958
Validity
Not Before: Feb 16 02:00:40 2025 GMT
Not After : May 17 01:00:40 2025 GMT
Subject: CN=eba12c40-e85e-4fad-9af5-3520e1e821f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:cb:70:92:cb:60:0e:47:02:f0:6e:ff:59:8c:
c5:af:97:48:a6:06:f1:0d:9f:65:59:b2:6b:24:7e:
ca:57:22:7b:8e:e0:0e:08:ae:86:95:2e:fb:c5:c3:
86:4d:47:32:f6:5a:09:bb:c0:7b:f4:e4:06:b8:ab:
0c:54:80:6c:36:f0:42:fb:49:7a:d6:75:82:91:95:
4b:c5:16:de:60:4a:75:a6:38:9a:f2:14:e0:31:11:
6e:50:e9:50:fe:eb:fe:0b:5f:36:50:86:e6:aa:3d:
3f:70:e6:50:28:0f:80:76:ba:56:ef:36:24:33:87:
68:c8:56:26:ac:30:ee:b4:f0:60:17:5f:d0:57:3b:
da:30:b9:f9:43:ff:17:1d:05:a7:b1:7f:72:bd:9b:
62:23:eb:cb:73:a5:ac:e3:bc:b4:56:8b:86:7d:e5:
6a:cc:5c:52:d8:9b:80:b4:c0:b8:d2:0b:9d:e0:e4:
1e:d1:5d:f3:1b:ef:88:e6:4c:c3:e2:1d:da:a5:2d:
c0:96:3c:4b:16:41:c9:04:81:d8:e1:61:5f:90:9e:
6b:a4:2d:06:f7:3d:25:4b:a8:17:7d:45:b4:2e:02:
3c:60:e0:4c:47:2a:67:c5:1c:32:dd:0d:73:1f:ca:
73:cb:ae:3c:3b:6e:b9:4e:71:32:98:aa:c9:15:97:
77:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:14:2A:FF:2B:AE:5D:C9:52:BB:CE:85:0B:7C:81:61:B4:C1:51:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9696ca72-0d62-4fc3-b383-c596c4f11958/e8618f4f-7894-3379-ba43-706d25d57bf7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9696ca72-0d62-4fc3-b383-c596c4f11958/9696ca72-0d62-4fc3-b383-c596c4f11958.crl
X509v3 Authority Key Identifier:
keyid:2E:55:FC:91:1D:44:AE:0E:73:86:AC:69:79:14:3C:D7:CD:4A:C4:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9696ca72-0d62-4fc3-b383-c596c4f11958.cer
sbgp-ipAddrBlock: critical
IPv4:
134.252.0.0/16
146.246.0.0/16
192.73.208.0/24
192.160.228.0/24
198.206.219.0/24
198.206.221.0/24
204.238.65.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:58:d1:31:3e:98:af:15:4e:7d:f2:82:6e:3b:27:62:8d:d0:
d4:82:94:e7:7b:d9:89:2c:a3:ab:2c:01:0e:1a:f7:60:f4:b8:
59:3b:5f:8f:82:a2:0c:76:6c:09:46:15:07:e6:0f:bf:46:42:
d2:06:33:f4:c2:ff:63:b7:3b:4c:31:f3:d4:92:59:c5:db:dd:
1d:3b:db:d2:61:f1:36:84:e1:f3:c8:04:94:07:83:a6:11:b6:
4b:0d:86:43:7b:46:05:42:4e:f1:95:6a:bb:1b:8b:13:40:c8:
98:79:96:70:c7:25:0d:52:1e:a4:16:dd:7e:3f:71:ed:cc:1f:
1e:4c:2c:71:39:e0:30:2a:78:bb:e8:d9:38:aa:e7:8a:86:13:
e5:4d:22:df:d2:27:7a:b9:20:8d:c8:a2:bd:55:51:ef:7a:aa:
94:c7:33:aa:0f:b6:cb:3f:a7:00:f4:d3:b2:19:f6:78:a3:77:
10:2d:73:70:7a:4b:66:fb:b0:96:03:aa:87:0c:2a:a2:52:53:
db:1c:78:25:6b:08:70:d7:d7:01:b2:c5:1a:d4:52:0d:e8:1b:
b6:2d:24:0a:5f:b4:0a:a8:c4:99:1a:3c:cc:70:7e:47:bd:55:
37:58:3f:ea:26:40:ce:4d:98:07:5f:9e:dc:4b:64:0a:ba:0a:
58:51:c2:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:05:13 2025 by rpki-client