Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18a27bbf-900f-4a15-9ddb-8d30f013a375/6ac0d84f-3faa-32d1-bf7c-cbf97d372221.roa
File: 6ac0d84f-3faa-32d1-bf7c-cbf97d372221.roa (raw, json)
Hash identifier: em3YpKRrGhrQs1ymQ2RFqXYy6lpQ3BrxFVm7WLXk1Ww=
Subject key identifier: 89:35:0A:0E:06:CC:AB:D7:24:92:BF:B2:EE:3F:61:7B:A0:1A:9F:41
Certificate issuer: /CN=18a27bbf-900f-4a15-9ddb-8d30f013a375
Certificate serial: 010D0C9F4328584950F962F92FE335D452842B60
Authority key identifier: 6E:2F:AE:21:72:68:FB:98:6F:44:35:69:7D:53:7F:FB:62:B2:6C:8B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18a27bbf-900f-4a15-9ddb-8d30f013a375.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18a27bbf-900f-4a15-9ddb-8d30f013a375/6ac0d84f-3faa-32d1-bf7c-cbf97d372221.roa
Signing time: Wed 26 Mar 2025 13:00:53 +0000
ROA not before: Wed 26 Mar 2025 13:00:53 +0000
ROA not after: Tue 24 Jun 2025 13:00:53 +0000
asID: 32808
IP address blocks: 66.29.160.0/19 maxlen: 32
70.36.80.0/22 maxlen: 32
107.191.0.0/19 maxlen: 32
204.14.20.0/22 maxlen: 32
208.64.88.0/22 maxlen: 32
2604:7b80::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:50:f9:62:f9:2f:e3:35:d4:52:84:2b:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18a27bbf-900f-4a15-9ddb-8d30f013a375
Validity
Not Before: Mar 26 13:00:53 2025 GMT
Not After : Jun 24 13:00:53 2025 GMT
Subject: CN=632e5864-be06-4404-8829-cf26d5f94e08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:1c:eb:15:e7:22:64:1f:d4:68:55:dc:cb:2e:
90:5b:45:6a:55:2d:c0:8e:3c:ea:cf:7d:40:d9:e3:
1d:08:4f:ad:81:0e:89:6d:37:fe:68:2a:ee:ec:0c:
61:e8:23:d6:07:5a:bc:ab:81:28:6a:e8:72:b6:49:
b7:63:6d:96:38:e2:30:ca:dc:ae:bf:d4:55:23:20:
b5:14:bb:5f:43:eb:ad:bd:b6:0c:d1:5e:ef:12:3c:
af:cb:e5:d0:52:c8:77:0d:11:0a:94:98:f7:2b:f6:
3f:30:40:14:07:d5:05:39:fe:de:a8:17:55:32:26:
4e:6f:c9:5e:4d:f8:a3:9b:e3:b0:e7:3f:41:29:3b:
bd:d7:b6:a9:f4:b1:90:23:34:9b:7a:37:d3:85:fd:
82:97:02:04:36:c1:af:5a:ab:61:39:05:01:f6:a7:
40:60:07:bb:7b:69:36:48:6b:9f:6b:0e:df:91:34:
6b:12:60:a6:e1:a8:6c:1c:90:0e:97:b2:21:20:8b:
d0:6d:fe:69:3c:1c:9e:ce:30:f1:00:63:e4:ee:c5:
5f:01:d8:af:5c:3e:d3:49:4b:09:7a:92:92:65:44:
85:82:b0:a2:21:b5:98:a5:dc:ea:51:02:64:e3:66:
43:b2:d9:59:28:6b:c1:ad:1e:15:6a:13:3f:eb:08:
8f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:35:0A:0E:06:CC:AB:D7:24:92:BF:B2:EE:3F:61:7B:A0:1A:9F:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18a27bbf-900f-4a15-9ddb-8d30f013a375/6ac0d84f-3faa-32d1-bf7c-cbf97d372221.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18a27bbf-900f-4a15-9ddb-8d30f013a375/18a27bbf-900f-4a15-9ddb-8d30f013a375.crl
X509v3 Authority Key Identifier:
keyid:6E:2F:AE:21:72:68:FB:98:6F:44:35:69:7D:53:7F:FB:62:B2:6C:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18a27bbf-900f-4a15-9ddb-8d30f013a375.cer
sbgp-ipAddrBlock: critical
IPv4:
66.29.160.0/19
70.36.80.0/22
107.191.0.0/19
204.14.20.0/22
208.64.88.0/22
IPv6:
2604:7b80::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:51:bd:ca:82:53:57:bb:e7:04:18:6d:db:58:c4:da:d0:7c:
cd:a4:e1:0d:cc:6e:9b:d7:48:e4:47:9b:07:fb:74:be:2f:bf:
f1:a6:37:43:10:62:f1:b2:28:3f:6f:0b:23:78:7c:d8:20:0b:
86:ac:75:77:56:00:eb:0a:be:70:e9:d8:0d:a5:db:36:b5:3c:
12:ba:f5:8e:5f:61:c4:10:b9:13:db:2e:ee:ba:99:8d:bd:6f:
db:3e:14:b4:98:ba:60:82:3a:9f:f9:d6:ea:ed:b4:12:de:64:
e6:b6:ec:c4:d4:98:e7:26:53:3f:16:fa:ee:1e:17:cd:7d:6e:
9f:de:af:2f:07:d9:8c:dd:40:90:24:82:a7:15:38:45:a7:fd:
59:53:9d:33:4b:e5:2b:b8:49:cd:ec:e2:5a:4d:7f:f4:cf:44:
43:c0:6a:7d:74:3b:01:57:0e:30:07:3d:27:63:3b:1f:2f:28:
4b:0d:6c:cf:89:df:8d:43:81:d0:21:96:98:97:3a:d7:c9:13:
c9:a3:82:f7:be:32:ff:47:b4:88:79:53:ef:05:b5:55:c0:a3:
e2:ff:cd:0a:5e:ab:9f:17:7a:79:7a:bb:f1:1e:a2:6d:df:4e:
87:fe:f1:56:e3:1f:74:cd:c5:a4:db:4a:2b:8c:9a:e0:b2:30:
e5:95:57:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:59:28 2025 by rpki-client on console.sobornost.net