Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/a74b6a29-3f37-31cd-bdb1-7fac7ddddeb9.roa
File: a74b6a29-3f37-31cd-bdb1-7fac7ddddeb9.roa (raw, json)
Hash identifier: aFUYOxYe4Z158MBHHj+45S5oEEKgQkavhTx39TjAoWY=
Subject key identifier: CA:CB:2F:1E:14:40:F1:16:D3:A6:FC:C2:8E:3B:79:3C:5F:65:F5:00
Certificate issuer: /CN=23b590e8-30c5-4997-bbf3-f2fe10a29e87
Certificate serial: 010D0C9F43285849ADCB2C9255CAFA4BB41B5700
Authority key identifier: 73:2D:61:C2:04:C7:94:B0:63:1A:9B:AE:10:B1:61:0A:CE:A3:53:28
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/a74b6a29-3f37-31cd-bdb1-7fac7ddddeb9.roa
Signing time: Mon 28 Apr 2025 18:58:02 +0000
ROA not before: Mon 28 Apr 2025 18:58:02 +0000
ROA not after: Sun 27 Jul 2025 18:58:02 +0000
asID: 5065
IP address blocks: 216.132.16.0/24 maxlen: 24
216.132.17.0/24 maxlen: 24
216.132.18.0/24 maxlen: 24
216.132.19.0/24 maxlen: 24
216.132.20.0/24 maxlen: 24
216.132.21.0/24 maxlen: 24
216.132.22.0/24 maxlen: 24
216.132.23.0/24 maxlen: 24
216.132.24.0/24 maxlen: 24
216.132.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:ad:cb:2c:92:55:ca:fa:4b:b4:1b:57:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23b590e8-30c5-4997-bbf3-f2fe10a29e87
Validity
Not Before: Apr 28 18:58:02 2025 GMT
Not After : Jul 27 18:58:02 2025 GMT
Subject: CN=b2f0cc83-b221-49ae-aba1-2d45e1300da9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ba:05:af:a8:20:0f:be:9d:99:1d:98:18:be:
d5:f9:3d:3a:e3:54:e2:3c:12:89:cb:63:07:1c:26:
14:14:d4:b6:06:b2:aa:fa:e3:86:3c:3c:af:86:49:
bf:ac:9e:cc:c5:4f:2f:9d:dd:22:8f:cd:c7:c4:fb:
7e:27:a0:42:15:e8:07:83:b7:2a:83:59:f0:8f:56:
84:f0:eb:02:48:3a:bd:9f:de:d5:99:01:3f:04:53:
88:cb:d6:dc:39:34:40:cc:86:79:d9:0f:1d:d8:fc:
8b:a7:8a:23:62:c6:91:67:b3:5f:78:4c:65:1b:93:
2d:d2:32:b4:8f:20:85:36:45:54:d2:ae:58:31:f1:
7c:5d:93:f9:09:20:72:41:46:d9:5f:26:d9:09:3f:
e3:aa:47:a3:f1:11:b6:e9:6a:13:c0:df:31:eb:8a:
46:3d:75:af:9b:ad:75:ad:aa:75:62:59:4a:9d:77:
81:a3:46:17:5c:17:b6:97:30:b4:d9:c7:a4:ff:dd:
7e:25:31:64:b6:3c:04:f3:be:30:0e:d3:29:cc:07:
a8:53:a7:a4:52:35:d7:a5:79:11:f7:f9:ab:40:9a:
24:5e:94:8a:33:1b:f7:62:4d:2e:9f:e7:6d:af:97:
7b:47:d1:c2:fd:13:30:71:df:87:fe:5c:81:ea:29:
69:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:CB:2F:1E:14:40:F1:16:D3:A6:FC:C2:8E:3B:79:3C:5F:65:F5:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/a74b6a29-3f37-31cd-bdb1-7fac7ddddeb9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/23b590e8-30c5-4997-bbf3-f2fe10a29e87.crl
X509v3 Authority Key Identifier:
keyid:73:2D:61:C2:04:C7:94:B0:63:1A:9B:AE:10:B1:61:0A:CE:A3:53:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87.cer
sbgp-ipAddrBlock: critical
IPv4:
216.132.16.0-216.132.25.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:15:05:88:93:1e:37:e9:b0:8e:ec:5b:9f:88:76:42:d4:56:
1b:2e:d8:ea:7a:74:1a:39:82:1a:42:f4:7c:c6:99:95:0c:2a:
49:e4:70:df:a9:c5:63:1d:06:00:ca:a1:f7:af:c6:aa:0c:df:
35:b8:15:d9:51:42:be:a9:2d:13:7c:1a:b3:f9:a3:19:f7:09:
7f:4d:2d:ba:71:3a:e6:26:c8:38:53:df:4a:84:96:77:ca:82:
35:32:f6:d7:c0:a8:92:2e:b7:e1:04:5c:ec:80:03:4f:41:4d:
6a:6c:b4:85:98:0d:f9:8c:9f:88:43:90:1b:11:26:e1:f1:fd:
6e:de:b7:ac:b6:26:eb:85:37:10:19:db:d8:f1:b0:1f:bc:73:
c7:b7:49:b4:93:6f:11:8a:fa:c0:70:4c:19:4c:2f:f4:78:e0:
f3:c2:f7:6d:3f:96:d7:c1:a9:d3:90:36:ae:d2:9b:b3:80:89:
26:36:82:bd:32:62:3d:6d:fa:90:d4:7a:00:85:d0:35:18:67:
db:f7:61:a7:61:f8:3f:3f:6a:35:4d:c4:f8:67:d8:ff:1f:b3:
e2:29:f3:e4:ae:ad:e8:82:19:ba:0e:68:31:84:4a:20:2d:8d:
aa:71:ce:0c:5f:47:bd:dd:dd:13:cb:e0:1f:81:da:7a:4a:b7:
de:f9:6e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 13:50:00 2025 by rpki-client