Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ac42ca24-d785-4ab8-81d3-baec3a30b660/e185c6ec-8578-3e23-8fac-69d0ea35f8fb.roa
File: e185c6ec-8578-3e23-8fac-69d0ea35f8fb.roa (raw, json)
Hash identifier: 1aUQVb37vMhEbLGPX27BMaa7lBHT5CwMbBJ1cZEsZc4=
Subject key identifier: 15:29:EA:AB:83:27:B7:63:A1:0B:84:8B:35:A3:57:B3:6F:D1:4E:50
Certificate issuer: /CN=ac42ca24-d785-4ab8-81d3-baec3a30b660
Certificate serial: 010D0C9F43285848E59BC88F51DB7E11AEA2B800
Authority key identifier: F4:B6:F5:EF:0B:83:49:79:6B:50:62:59:F0:36:46:8D:E7:08:1F:AF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ac42ca24-d785-4ab8-81d3-baec3a30b660.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ac42ca24-d785-4ab8-81d3-baec3a30b660/e185c6ec-8578-3e23-8fac-69d0ea35f8fb.roa
Signing time: Sun 16 Feb 2025 02:00:40 +0000
ROA not before: Sun 16 Feb 2025 02:00:40 +0000
ROA not after: Sat 17 May 2025 01:00:40 +0000
asID: 393713
IP address blocks: 64.79.48.0/20 maxlen: 24
74.123.32.0/22 maxlen: 24
162.254.112.0/22 maxlen: 24
192.157.20.0/22 maxlen: 24
199.91.176.0/22 maxlen: 24
199.193.180.0/22 maxlen: 24
204.62.56.0/21 maxlen: 24
208.72.76.0/22 maxlen: 24
208.77.8.0/23 maxlen: 24
208.82.84.0/22 maxlen: 24
208.89.176.0/22 maxlen: 24
216.146.224.0/20 maxlen: 24
2605:ce80::/32 maxlen: 48
2606:c080::/32 maxlen: 48
2607:ffe8::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e5:9b:c8:8f:51:db:7e:11:ae:a2:b8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac42ca24-d785-4ab8-81d3-baec3a30b660
Validity
Not Before: Feb 16 02:00:40 2025 GMT
Not After : May 17 01:00:40 2025 GMT
Subject: CN=a529d8b1-8f39-4183-911e-ac891d364153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:44:d0:da:db:19:3b:2a:f3:3e:ac:bf:08:de:
92:6a:00:bf:95:21:7e:be:1f:e6:47:15:4a:83:f1:
72:61:4f:11:99:12:49:b5:0c:7e:90:20:3c:79:78:
58:90:2e:f3:9f:35:41:61:61:92:9c:08:4b:ce:fd:
a3:d2:86:08:78:87:c8:51:66:60:56:0c:42:87:da:
0f:a8:d3:cc:e0:aa:9a:59:72:9e:8f:35:a8:56:07:
18:30:f8:b0:a3:cf:ec:a8:30:0c:76:da:0f:99:f3:
43:9b:b0:b2:71:9f:6e:47:c6:e6:22:b0:46:a4:0a:
87:90:8f:92:77:37:26:c5:41:75:84:2b:27:16:03:
d8:4b:68:fb:a3:dd:08:82:b1:4c:6b:ea:41:78:e2:
9d:60:3a:3e:7e:2a:bf:f0:b1:fe:ec:6b:78:8f:a3:
97:13:6c:e6:8d:2b:0c:ac:ed:1c:a3:33:d7:23:16:
77:ac:c8:12:e0:b3:3e:5e:0d:53:c9:f8:a7:54:1d:
28:13:7c:39:d2:23:3f:cc:79:57:78:e3:80:6d:5c:
1b:3f:23:3b:69:28:a3:8d:68:71:f7:11:8b:c2:30:
4f:6b:aa:10:45:8e:86:ea:35:e6:ea:9f:a9:48:61:
c9:e4:97:3a:76:7f:3f:48:18:60:58:6a:53:f0:12:
bd:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:29:EA:AB:83:27:B7:63:A1:0B:84:8B:35:A3:57:B3:6F:D1:4E:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ac42ca24-d785-4ab8-81d3-baec3a30b660/e185c6ec-8578-3e23-8fac-69d0ea35f8fb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ac42ca24-d785-4ab8-81d3-baec3a30b660/ac42ca24-d785-4ab8-81d3-baec3a30b660.crl
X509v3 Authority Key Identifier:
keyid:F4:B6:F5:EF:0B:83:49:79:6B:50:62:59:F0:36:46:8D:E7:08:1F:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ac42ca24-d785-4ab8-81d3-baec3a30b660.cer
sbgp-ipAddrBlock: critical
IPv4:
64.79.48.0/20
74.123.32.0/22
162.254.112.0/22
192.157.20.0/22
199.91.176.0/22
199.193.180.0/22
204.62.56.0/21
208.72.76.0/22
208.77.8.0/23
208.82.84.0/22
208.89.176.0/22
216.146.224.0/20
IPv6:
2605:ce80::/32
2606:c080::/32
2607:ffe8::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:97:f6:0c:0a:52:22:ae:0c:b8:f8:a4:85:ed:fb:53:6f:7b:
0f:a9:83:42:80:b4:79:9a:e2:20:d0:4e:bb:05:1a:b2:a7:9c:
cf:ca:e2:1f:1d:5e:4d:a2:8a:c7:52:95:ac:38:6d:a4:95:8e:
af:c1:2c:40:c9:38:77:d4:84:8e:04:32:ca:8b:fa:b2:b8:ab:
15:e7:ce:ee:69:c4:8d:02:3c:e9:b0:35:1f:58:4f:ff:31:5f:
a2:d2:54:86:d1:b4:91:19:65:13:ac:a8:b1:dc:2d:23:02:f9:
a8:2d:3e:2c:a8:86:28:69:33:b5:d9:c4:65:4b:d2:d0:01:15:
8d:9e:9c:32:4a:fd:0a:83:47:a3:99:ca:34:4d:b7:96:0d:e4:
e6:eb:e6:20:8d:7d:45:59:e6:41:1a:e4:8a:57:92:32:60:ab:
13:37:12:fe:ac:43:da:7e:f9:71:72:c5:b6:94:bb:7d:ee:cf:
cc:aa:d8:18:8d:a1:10:60:49:16:b4:a5:f3:dd:fa:6c:54:61:
3e:a1:7d:a9:cf:8e:5a:29:81:53:c0:5a:d0:d9:ac:e2:8e:f4:
c3:a5:e4:34:1f:eb:bd:4a:a3:56:5d:ab:bd:25:3d:0c:68:93:
fe:27:85:38:c5:70:6b:ec:69:9e:a9:83:69:94:dd:23:5a:90:
31:48:45:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:40:42 2025 by rpki-client