Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/2cb992b4-920f-37c8-ad68-babbfc60071e.roa
File: 2cb992b4-920f-37c8-ad68-babbfc60071e.roa (raw, json)
Hash identifier: ehp1xzNF70V5pp1x8WzD7rMwSU8qbmiI+W0JU1/+Smw=
Subject key identifier: EC:7F:22:A4:2D:9F:EA:89:3B:81:85:B3:AB:CC:10:CC:44:4A:E4:73
Certificate issuer: /CN=23b590e8-30c5-4997-bbf3-f2fe10a29e87
Certificate serial: 010D0C9F43285849ADCEF761A295C821FE0DAD80
Authority key identifier: 73:2D:61:C2:04:C7:94:B0:63:1A:9B:AE:10:B1:61:0A:CE:A3:53:28
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/2cb992b4-920f-37c8-ad68-babbfc60071e.roa
Signing time: Mon 28 Apr 2025 19:05:41 +0000
ROA not before: Mon 28 Apr 2025 19:05:41 +0000
ROA not after: Sun 27 Jul 2025 19:05:41 +0000
asID: 5065
IP address blocks: 216.132.124.0/24 maxlen: 24
216.132.125.0/24 maxlen: 24
216.132.132.0/24 maxlen: 24
216.132.133.0/24 maxlen: 24
216.132.134.0/24 maxlen: 24
216.132.135.0/24 maxlen: 24
216.132.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:ad:ce:f7:61:a2:95:c8:21:fe:0d:ad:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23b590e8-30c5-4997-bbf3-f2fe10a29e87
Validity
Not Before: Apr 28 19:05:41 2025 GMT
Not After : Jul 27 19:05:41 2025 GMT
Subject: CN=f9972f70-f5c9-4a4e-ba80-e05920e3aa71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:59:a2:7c:ea:87:51:41:94:d3:e6:48:48:c2:
6c:22:85:52:1c:fd:aa:4f:a7:d8:41:35:ff:c3:bf:
d8:d3:9e:69:27:45:21:61:73:e7:21:05:ae:81:a1:
2f:47:cb:4a:cf:73:0d:33:99:8c:3f:32:1a:b7:79:
ec:63:9c:d8:4e:2f:58:c5:08:83:a6:c5:11:ab:21:
0d:09:d4:0a:ce:d8:79:c3:8c:4e:e8:7a:1c:de:7d:
6c:80:2a:8a:08:ab:16:75:1f:45:2b:10:f9:e6:9d:
62:7e:a8:cb:ce:62:6a:cf:f8:51:24:80:8d:38:e2:
54:0b:75:95:2f:ea:4e:1c:f6:38:fe:de:b8:a5:d2:
4a:c8:8e:17:92:2a:07:54:e7:0f:91:0d:f0:8f:93:
28:6d:96:08:b5:ba:2f:67:58:c8:df:dc:e5:93:ef:
ef:61:9a:71:45:78:ab:90:c5:5d:9a:c1:b8:ec:65:
a6:c5:57:94:85:f5:40:35:9e:b0:75:31:9e:65:ee:
e8:1f:eb:b4:40:20:00:95:aa:6f:98:bd:88:50:0d:
7f:9d:d6:aa:18:e1:89:12:12:43:93:ed:48:e9:c8:
92:38:06:38:c9:c2:7e:9e:d4:36:e4:c8:5b:10:89:
74:a4:ef:f6:a5:41:5e:ea:ec:08:9c:be:5c:8e:a3:
e1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:7F:22:A4:2D:9F:EA:89:3B:81:85:B3:AB:CC:10:CC:44:4A:E4:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/2cb992b4-920f-37c8-ad68-babbfc60071e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/23b590e8-30c5-4997-bbf3-f2fe10a29e87.crl
X509v3 Authority Key Identifier:
keyid:73:2D:61:C2:04:C7:94:B0:63:1A:9B:AE:10:B1:61:0A:CE:A3:53:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87.cer
sbgp-ipAddrBlock: critical
IPv4:
216.132.124.0/23
216.132.132.0/22
216.132.148.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:fc:0e:07:5d:77:b8:88:8f:a3:a9:dc:f8:e9:83:48:75:77:
1d:b0:e3:ad:41:27:0b:bf:ba:3a:e1:10:4e:c1:91:d6:8e:ac:
34:9c:2e:18:91:01:ce:2f:1f:7c:3b:f6:dd:4a:1a:08:cc:64:
23:de:cc:fc:7b:17:b1:bf:67:3e:1d:8e:fa:0d:ba:35:5e:c0:
e4:71:57:b2:a1:21:46:43:99:92:e9:63:2b:f2:06:5e:90:a3:
c3:78:62:44:18:33:c1:e0:fb:ce:7a:14:d5:d0:f5:38:1d:a1:
31:d3:ba:2c:bf:ff:05:8d:7f:b0:40:ca:7a:03:76:9f:3f:6b:
21:0e:9d:7a:47:3a:f1:76:bd:39:67:28:2f:09:0b:44:a8:46:
6f:00:53:68:41:c1:cd:f1:82:68:53:dc:73:63:d3:09:6e:96:
db:73:30:75:a3:3a:86:92:e3:b8:bf:a8:11:45:3b:dc:e5:b8:
47:cc:40:7e:a6:8d:41:7f:d6:26:9a:f9:38:bf:5b:92:99:38:
09:fb:a7:36:02:20:f0:71:42:85:33:55:f0:c0:e5:59:dd:90:
0d:55:95:a4:1a:e1:99:ad:b7:ce:bf:ab:68:f2:9a:90:2d:88:
b5:4f:fa:0c:c0:78:b6:7e:18:03:b1:5c:4f:4b:67:ce:71:33:
74:6d:a9:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:06:48 2025 by rpki-client