Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/cc940f7d-110c-374c-9fbd-616d6f8a0e44.roa
File: cc940f7d-110c-374c-9fbd-616d6f8a0e44.roa (raw, json)
Hash identifier: yUvH2vca6ulfxL4EvFHKO4S4J5sbGWfB6L7N+m9RoP8=
Subject key identifier: 60:7B:55:D0:5F:6F:66:16:03:C7:B2:38:1D:98:51:A0:57:CA:58:3B
Certificate issuer: /CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
Certificate serial: 010D0C9F43285849287E51030CFE7537AA056000
Authority key identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/cc940f7d-110c-374c-9fbd-616d6f8a0e44.roa
Signing time: Wed 12 Mar 2025 01:00:39 +0000
ROA not before: Wed 12 Mar 2025 01:00:39 +0000
ROA not after: Tue 10 Jun 2025 01:00:39 +0000
asID: 21928
IP address blocks: 24.221.0.0/16 maxlen: 24
52.144.16.0/21 maxlen: 24
75.122.0.0/15 maxlen: 24
104.152.20.0/22 maxlen: 24
173.4.0.0/14 maxlen: 24
174.141.208.0/20 maxlen: 24
174.144.0.0/12 maxlen: 24
184.192.0.0/10 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:28:7e:51:03:0c:fe:75:37:aa:05:60:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
Validity
Not Before: Mar 12 01:00:39 2025 GMT
Not After : Jun 10 01:00:39 2025 GMT
Subject: CN=884dd0f4-bd86-4735-9cc3-f0c093f151cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:35:52:08:9d:ae:c3:1a:13:62:9e:a5:db:c1:
8b:a1:b3:8d:7f:af:75:fc:08:e7:67:75:f6:dc:d1:
47:d0:e7:ea:b1:31:02:37:28:54:fb:a6:a2:ff:7b:
34:33:c3:e5:0c:7e:c2:63:3c:74:d7:f5:ae:f7:48:
c6:e1:9a:46:3d:6e:d0:92:6f:1c:90:f4:67:4d:f0:
6c:87:ab:03:88:f5:ed:84:9b:57:44:d4:09:c3:50:
1f:20:5c:7f:d3:fe:68:3b:8c:80:03:c0:f7:96:56:
4a:12:3f:40:8a:bf:95:7d:ae:4a:08:d6:c6:5a:d3:
17:1b:1a:16:c2:a2:ff:56:77:4e:77:7e:4f:ff:e6:
6c:85:27:ad:04:1b:1f:a3:35:ae:79:fb:c3:80:19:
c7:ae:99:ae:74:54:59:48:53:42:9b:54:31:f0:80:
38:13:af:a2:39:73:1f:4c:e5:ba:90:4d:6f:79:eb:
f1:f0:9d:03:ed:21:74:74:bb:dc:d2:f3:0b:db:5f:
a7:d0:23:0d:92:63:7d:ac:14:a6:2e:fe:57:96:ec:
33:29:6e:b4:e8:91:9c:ac:12:c9:d3:a0:80:4f:d2:
0a:18:fc:b3:be:cd:9e:92:f7:73:01:f0:5f:95:53:
c6:95:a6:08:42:48:b7:aa:4b:8a:03:eb:8e:85:fd:
90:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:7B:55:D0:5F:6F:66:16:03:C7:B2:38:1D:98:51:A0:57:CA:58:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/cc940f7d-110c-374c-9fbd-616d6f8a0e44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl
X509v3 Authority Key Identifier:
keyid:B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
sbgp-ipAddrBlock: critical
IPv4:
24.221.0.0/16
52.144.16.0/21
75.122.0.0/15
104.152.20.0/22
173.4.0.0/14
174.141.208.0/20
174.144.0.0/12
184.192.0.0/10
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:a4:60:4f:bc:4e:53:6b:f0:9c:8e:01:d8:7f:e6:dc:95:64:
0e:d1:76:01:8f:e9:d4:69:de:be:31:c8:d3:e3:11:f8:73:96:
ba:de:78:ff:b7:c2:9d:c9:10:b0:9c:61:1c:f6:59:38:1a:1e:
f1:19:be:b3:a1:c7:99:e9:84:53:88:9a:02:1b:88:ff:58:e7:
51:81:ff:f4:87:65:a0:de:72:40:c2:01:04:9d:92:2a:c0:04:
e4:8d:2a:30:27:40:df:08:b2:ce:e9:2a:cb:91:0f:9d:b8:99:
5e:a8:e3:c3:6f:db:be:b7:0e:89:b1:b1:f3:5d:3d:15:87:b2:
33:ab:db:73:ad:c2:a5:d9:a9:04:18:e0:67:89:af:77:5b:0f:
21:5a:57:ea:ca:cf:78:88:66:79:de:47:ed:83:9e:69:93:5a:
5a:09:95:b7:1c:9b:c1:13:25:0c:0d:a3:64:18:f0:14:9b:b9:
f7:08:0e:fd:53:73:f8:f1:bb:26:a9:25:7f:25:25:ff:e6:44:
51:d0:79:26:f3:38:46:b1:af:11:8f:31:cd:dc:32:98:20:fd:
57:77:38:84:86:51:9b:2a:0f:b8:76:a4:94:1d:3f:e5:5d:2f:
a7:88:5a:9a:4f:e6:3d:a5:ea:b9:08:b1:96:00:fa:6a:bf:bd:
a6:1c:d5:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 03:25:58 2025 by rpki-client on console.sobornost.net