Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/f62e1ae2-fffb-33be-9ebd-7473b8066eb1.roa
File: f62e1ae2-fffb-33be-9ebd-7473b8066eb1.roa (raw, json)
Hash identifier: 8hOcjz2p1mBG8mRkeqAiTiAk3CY2eqL9anqjJGto5UY=
Subject key identifier: 3F:D3:D1:72:4D:F2:0D:01:F5:CE:8E:EB:2F:2C:B3:D3:FC:FA:8D:5F
Certificate issuer: /CN=a521f5ee-89d2-4088-abb9-f69291655e39
Certificate serial: 010D0C9F4328584966DF5D847B120310CA345C40
Authority key identifier: 14:EE:0D:BC:78:58:6F:49:6A:4F:7C:2E:30:4A:4E:11:A9:FE:9B:73
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/f62e1ae2-fffb-33be-9ebd-7473b8066eb1.roa
Signing time: Thu 03 Apr 2025 09:16:20 +0000
ROA not before: Thu 03 Apr 2025 09:16:20 +0000
ROA not after: Wed 02 Jul 2025 09:16:20 +0000
asID: 210110
IP address blocks: 23.105.192.0/19 maxlen: 24
23.106.128.0/19 maxlen: 24
23.252.96.0/20 maxlen: 24
45.62.96.0/19 maxlen: 24
45.78.0.0/18 maxlen: 24
66.112.208.0/20 maxlen: 24
67.209.176.0/20 maxlen: 24
74.121.148.0/22 maxlen: 24
104.128.80.0/20 maxlen: 24
104.160.32.0/20 maxlen: 24
104.194.64.0/19 maxlen: 24
104.224.128.0/18 maxlen: 24
107.182.176.0/20 maxlen: 24
138.128.192.0/19 maxlen: 24
144.168.56.0/21 maxlen: 24
162.211.224.0/21 maxlen: 24
192.243.112.0/20 maxlen: 24
198.35.44.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:66:df:5d:84:7b:12:03:10:ca:34:5c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a521f5ee-89d2-4088-abb9-f69291655e39
Validity
Not Before: Apr 3 09:16:20 2025 GMT
Not After : Jul 2 09:16:20 2025 GMT
Subject: CN=032775b2-9102-4cf7-8e43-7ce5cfc4f453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f0:2f:72:4f:c4:16:8f:85:4f:7d:fd:4f:df:
19:99:9b:de:40:cb:32:6f:e0:d1:87:c0:6b:f2:47:
78:f1:39:3d:52:af:6e:34:82:81:d9:d0:25:86:21:
f6:fb:27:ed:50:78:3b:ad:74:c5:07:86:ab:e5:e3:
7b:a6:78:af:3c:27:fb:13:11:cb:87:94:69:50:51:
67:02:44:f1:f1:7f:00:e7:81:12:f5:9f:db:5f:1c:
ea:de:e1:b5:21:e5:d0:9b:17:db:7b:79:9f:c0:a7:
a6:31:49:89:a0:71:3f:59:72:1a:d2:c4:1d:2a:33:
e4:97:4a:14:ec:9f:c7:90:2c:dd:f9:9b:87:c3:a0:
28:d8:e2:6a:9d:fa:e9:5a:7c:4b:e2:10:d0:21:df:
ca:88:fd:9d:e3:bc:dd:ee:5d:ad:7d:49:cf:a1:df:
65:b1:d9:f1:00:8c:db:f8:34:dc:2a:cc:ad:3a:04:
98:14:64:e4:2b:63:ec:cf:e8:6f:60:d6:1d:ae:76:
29:08:cb:30:63:94:e8:3c:71:ee:19:42:79:35:39:
05:2f:60:cc:36:93:28:0b:29:16:94:13:fe:a7:0f:
c6:5e:a0:6f:52:6a:56:ae:10:49:23:ed:17:7f:08:
93:bf:34:a4:20:99:19:cb:91:09:1f:ef:81:ff:f2:
57:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D3:D1:72:4D:F2:0D:01:F5:CE:8E:EB:2F:2C:B3:D3:FC:FA:8D:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/f62e1ae2-fffb-33be-9ebd-7473b8066eb1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/a521f5ee-89d2-4088-abb9-f69291655e39.crl
X509v3 Authority Key Identifier:
keyid:14:EE:0D:BC:78:58:6F:49:6A:4F:7C:2E:30:4A:4E:11:A9:FE:9B:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39.cer
sbgp-ipAddrBlock: critical
IPv4:
23.105.192.0/19
23.106.128.0/19
23.252.96.0/20
45.62.96.0/19
45.78.0.0/18
66.112.208.0/20
67.209.176.0/20
74.121.148.0/22
104.128.80.0/20
104.160.32.0/20
104.194.64.0/19
104.224.128.0/18
107.182.176.0/20
138.128.192.0/19
144.168.56.0/21
162.211.224.0/21
192.243.112.0/20
198.35.44.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:4d:0b:58:59:1e:ad:26:64:2a:66:39:a9:58:d9:8f:03:b0:
19:f2:0b:c9:46:e5:3f:6f:4c:2c:18:2f:6f:52:20:4e:25:11:
7a:f8:7c:c0:bc:f4:be:86:32:12:72:0d:ff:b4:6b:ef:62:e4:
3a:cd:73:03:14:21:32:34:f6:a8:a8:0c:64:bb:00:6a:0d:33:
74:d2:3f:cc:9c:00:33:e5:6c:4b:b7:ea:bc:2e:b7:7c:35:02:
3a:d9:40:0e:e9:b3:12:f5:79:ce:b7:fc:b3:12:09:17:d1:e9:
b3:c6:4d:49:9d:74:4a:19:54:68:a9:da:c8:46:7f:24:21:10:
92:1a:dc:ea:f5:e0:c1:da:55:a5:9d:ad:58:3f:da:20:46:00:
c9:72:f1:ee:46:6e:97:90:0b:18:4d:ff:a9:b4:65:6a:48:b4:
29:70:42:d5:75:21:43:4b:ba:25:1b:6a:b4:61:d3:e1:98:f7:
65:c3:de:8b:00:b1:ca:15:b8:60:4a:a0:dd:8b:e4:48:e2:0f:
e6:46:1d:22:b4:d6:31:e4:83:c9:80:87:bc:03:b4:cf:fd:1a:
59:c6:d9:f0:68:49:0d:2c:ad:e6:b7:26:3a:53:1f:99:22:ae:
56:82:f5:02:c1:0b:f6:d9:2d:23:7e:75:2e:e0:57:65:fb:95:
b4:94:3d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:06 2025 by rpki-client on console.sobornost.net