Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3/fe196e76-1d06-3092-a96a-07322f606f5e.roa
File: fe196e76-1d06-3092-a96a-07322f606f5e.roa (raw, json)
Hash identifier: eh0yurxy5s/n66YL3UqAg4t/P5kkBlHoP2WzxRk4hOc=
Subject key identifier: CB:78:43:24:B7:83:3B:7A:34:E5:4B:4A:F6:A1:C7:E6:62:DC:1D:3B
Certificate issuer: /CN=d0aed758-847b-4853-9fce-f0451b5fa2b3
Certificate serial: 010D0C9F432858491D717866D6DC214B15D39740
Authority key identifier: 26:29:49:3F:F3:82:BA:92:FA:C8:2C:6F:AB:48:07:F3:65:25:5C:27
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3/fe196e76-1d06-3092-a96a-07322f606f5e.roa
Signing time: Sat 08 Mar 2025 02:00:39 +0000
ROA not before: Sat 08 Mar 2025 02:00:39 +0000
ROA not after: Fri 06 Jun 2025 01:00:39 +0000
asID: 54643
IP address blocks: 23.111.64.0/21 maxlen: 22
23.111.72.0/22 maxlen: 23
66.85.28.0/22 maxlen: 23
67.231.16.0/20 maxlen: 23
104.36.148.0/22 maxlen: 23
104.193.172.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1d:71:78:66:d6:dc:21:4b:15:d3:97:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0aed758-847b-4853-9fce-f0451b5fa2b3
Validity
Not Before: Mar 8 02:00:39 2025 GMT
Not After : Jun 6 01:00:39 2025 GMT
Subject: CN=64cfda17-ab5f-43e1-a43f-adeeb53b8da9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:13:6c:ec:b0:65:66:7e:6e:80:a8:51:ae:be:
6f:fb:4f:a6:59:d8:61:58:b8:e1:41:17:d0:08:c9:
f5:8b:71:df:48:c4:fb:43:db:4f:d9:e7:16:7b:f1:
aa:72:2f:fa:62:2f:90:5a:e2:12:9f:2e:16:e3:a9:
31:f7:53:f7:ae:4b:52:73:03:d4:5d:c5:5b:67:2c:
9a:99:68:8f:49:c2:af:3a:bf:7a:f4:c2:1d:6b:85:
3e:74:ff:87:68:2a:ac:4d:c9:87:ef:6b:e5:9a:bc:
cb:90:42:06:c6:5d:51:5c:42:63:64:b7:24:53:5d:
37:b7:c4:e3:49:81:37:7a:e3:af:a6:52:b2:d7:00:
cc:65:26:4b:f7:66:1d:69:d1:dd:3b:92:78:a0:21:
17:d2:81:ff:38:ae:f0:53:56:88:fb:ca:41:e7:0b:
9a:34:7a:0a:ff:a5:6e:b8:a3:f4:8c:61:83:09:2e:
11:af:fa:c2:c5:ca:ca:e3:16:6e:58:41:84:20:2c:
e9:22:81:f8:b1:30:ef:45:f9:7a:a7:f1:6a:6b:81:
ef:02:12:4c:61:7b:19:5a:bd:21:89:87:3d:d4:d1:
4b:58:0f:fd:3c:20:e8:e5:cd:ec:2e:c1:b7:22:c9:
e7:6e:df:5d:6d:91:69:af:62:78:7b:30:d4:f9:68:
b6:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:78:43:24:B7:83:3B:7A:34:E5:4B:4A:F6:A1:C7:E6:62:DC:1D:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3/fe196e76-1d06-3092-a96a-07322f606f5e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3/d0aed758-847b-4853-9fce-f0451b5fa2b3.crl
X509v3 Authority Key Identifier:
keyid:26:29:49:3F:F3:82:BA:92:FA:C8:2C:6F:AB:48:07:F3:65:25:5C:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3.cer
sbgp-ipAddrBlock: critical
IPv4:
23.111.64.0-23.111.75.255
66.85.28.0/22
67.231.16.0/20
104.36.148.0/22
104.193.172.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:89:c3:5b:13:eb:ea:20:02:bd:06:46:b5:c7:8e:53:68:68:
67:2a:bf:ae:20:44:ed:dc:88:f8:69:f7:28:d5:1b:77:7d:5a:
30:40:dc:89:d1:3a:12:f8:ac:19:eb:17:22:65:e3:19:ac:d0:
6f:eb:f9:9a:28:f7:0c:e8:c5:a7:6f:8b:89:6d:c4:de:51:a1:
b4:94:68:71:a4:a5:0b:c3:44:55:04:e7:ed:de:29:c9:d6:ad:
3b:c7:54:aa:fc:97:f9:5f:7c:28:39:0e:59:cf:b5:9c:4e:cc:
a2:ea:72:88:20:bf:bf:8b:9b:b0:76:c0:45:6e:ef:6b:55:fc:
64:4b:67:4a:8c:c2:9b:8d:fe:b9:be:25:0f:49:d6:55:d9:a5:
c8:f5:63:14:d9:08:3d:fd:4b:82:e0:7c:19:68:05:6b:39:3f:
63:1f:79:fb:3c:c6:be:e1:49:dc:fb:d5:5c:77:d8:58:54:c6:
23:44:4b:d4:f4:2b:21:e7:7f:59:26:de:62:8a:56:78:61:54:
29:a5:62:8b:5b:c5:97:4e:9e:d6:29:6e:8e:70:f4:1a:38:19:
63:a3:70:52:33:b5:7c:f0:d1:f5:d7:87:a0:e2:cc:21:32:d6:
25:29:ac:77:58:b4:cc:63:c6:66:7f:89:90:bb:9c:85:d6:60:
8f:b2:c2:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:09:07 2025 by rpki-client