Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d/6de7239f-6a57-39d4-bd65-a97148b222c8.roa
File: 6de7239f-6a57-39d4-bd65-a97148b222c8.roa (raw, json)
Hash identifier: UeMh9v5iMiLAnXhV50bifm8RH1xSf2b4nuEdw3JWDD8=
Subject key identifier: 80:AB:F5:C9:BA:8B:56:8D:CA:91:46:08:A7:17:49:B1:F6:C4:69:C3
Certificate issuer: /CN=4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d
Certificate serial: 010D0C9F432858486C2B0D6052DEA4062CE32180
Authority key identifier: 77:05:42:3A:27:84:58:52:46:16:9F:93:86:71:AF:A7:C1:01:F6:6E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d/6de7239f-6a57-39d4-bd65-a97148b222c8.roa
Signing time: Fri 03 Jan 2025 14:00:51 +0000
ROA not before: Fri 03 Jan 2025 14:00:51 +0000
ROA not after: Thu 03 Apr 2025 13:00:51 +0000
asID: 36008
IP address blocks: 162.220.191.0/24 maxlen: 24
216.19.84.0/24 maxlen: 24
216.19.86.0/24 maxlen: 24
216.19.92.0/24 maxlen: 24
216.19.95.0/24 maxlen: 24
2620:a::/48 maxlen: 48
2620:a:d::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6c:2b:0d:60:52:de:a4:06:2c:e3:21:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d
Validity
Not Before: Jan 3 14:00:51 2025 GMT
Not After : Apr 3 13:00:51 2025 GMT
Subject: CN=a2f6c28a-0929-4645-85ea-3423e8da305c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:de:26:03:b2:ef:5d:22:ea:44:d5:78:eb:a8:
bb:ef:56:56:46:36:d6:42:6e:a3:2e:19:f9:5e:8d:
66:03:76:77:54:d8:47:b5:fd:14:ed:85:31:2d:5f:
5f:19:ef:53:10:b9:56:93:78:7b:4e:e9:1b:1c:2c:
af:53:d9:2a:02:9f:95:97:6d:89:6c:1c:0e:d9:f0:
0e:a2:6d:8c:1b:dc:a0:9c:07:d8:b0:46:b7:20:b7:
58:73:fe:bb:b8:69:a6:25:61:fe:ef:8a:90:6c:10:
57:e8:c8:52:4b:e4:62:64:90:54:98:63:cd:03:34:
53:bf:f6:94:9b:e1:83:31:07:ab:39:7b:e4:d0:2f:
e4:f6:a7:d3:45:ae:fd:86:35:ca:7a:a1:80:29:e1:
48:a6:37:fa:46:e0:f0:a3:33:9b:ff:cb:4e:de:d9:
03:ee:94:21:1a:31:26:3c:84:64:ac:21:42:fe:95:
af:6c:6e:da:4e:82:01:19:b7:e5:7a:53:66:7a:e3:
67:8e:91:95:24:d6:22:04:07:e5:12:ff:a0:9d:9c:
24:84:d8:ad:f1:43:e7:5f:99:03:90:21:a6:3a:70:
2b:3d:a5:a6:0f:e0:c8:f0:ad:e3:c4:35:24:04:82:
df:57:7d:e5:6d:2f:04:e4:f4:4d:9e:cc:a8:53:07:
2a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:AB:F5:C9:BA:8B:56:8D:CA:91:46:08:A7:17:49:B1:F6:C4:69:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d/6de7239f-6a57-39d4-bd65-a97148b222c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d.crl
X509v3 Authority Key Identifier:
keyid:77:05:42:3A:27:84:58:52:46:16:9F:93:86:71:AF:A7:C1:01:F6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d.cer
sbgp-ipAddrBlock: critical
IPv4:
162.220.191.0/24
216.19.84.0/24
216.19.86.0/24
216.19.92.0/24
216.19.95.0/24
IPv6:
2620:a::/48
2620:a:d::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:cc:29:87:f9:7f:77:98:1d:16:22:a8:1a:08:f5:0c:ac:f5:
71:04:72:4e:d0:2f:df:7b:83:ab:b4:49:dd:00:3a:85:fb:10:
8d:45:2b:72:f5:33:7c:36:a5:4a:6f:ca:60:b3:cf:b1:e4:0c:
70:84:f8:53:cf:87:b1:df:13:a2:2f:38:6b:5a:a5:9e:1c:fd:
df:8e:45:ed:98:f0:6a:9a:e7:bd:37:6d:3c:64:23:af:75:5e:
f7:3f:5f:82:38:29:2b:1f:82:1f:18:61:5d:ff:82:6f:52:38:
5f:71:d2:54:5b:75:58:28:e8:e9:e2:c7:e5:eb:cc:d4:23:7c:
cd:62:a4:a6:7a:60:ec:12:00:b6:2a:6e:a8:dd:0e:d4:1f:46:
5d:a1:d8:68:99:b9:8c:cc:92:fc:f0:d0:81:28:5e:5b:ac:4a:
15:4f:19:c0:eb:34:b1:8d:86:8a:5d:12:c6:fd:11:13:2e:4d:
4a:93:00:30:ed:a8:60:08:26:35:ee:bc:9f:12:f6:58:cd:7c:
7d:8c:02:97:09:d6:e0:a0:96:d0:60:54:ff:e7:82:90:05:c8:
0d:8b:50:bd:b5:7c:66:c0:05:8f:55:1d:c8:4f:4c:c7:5f:a2:
73:e2:79:80:53:35:6c:a7:fc:d2:44:82:1b:42:ef:0f:9a:36:
55:7f:f9:3c
-----BEGIN CERTIFICATE-----
MIIGdTCCBV2gAwIBAgIUAQ0Mn0MoWEhsKw1gUt6kBizjIYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGRjYzZhM2EtMGU0Zi00OGMxLTkxMTQtNWRkZGYyZDdk
YjlkMB4XDTI1MDEwMzE0MDA1MVoXDTI1MDQwMzEzMDA1MVowLzEtMCsGA1UEAxMk
YTJmNmMyOGEtMDkyOS00NjQ1LTg1ZWEtMzQyM2U4ZGEzMDVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwd4mA7LvXSLqRNV466i771ZWRjbWQm6jLhn5
Xo1mA3Z3VNhHtf0U7YUxLV9fGe9TELlWk3h7TukbHCyvU9kqAp+Vl22JbBwO2fAO
om2MG9ygnAfYsEa3ILdYc/67uGmmJWH+74qQbBBX6MhSS+RiZJBUmGPNAzRTv/aU
m+GDMQerOXvk0C/k9qfTRa79hjXKeqGAKeFIpjf6RuDwozOb/8tO3tkD7pQhGjEm
PIRkrCFC/pWvbG7aToIBGbflelNmeuNnjpGVJNYiBAflEv+gnZwkhNit8UPnX5kD
kCGmOnArPaWmD+DI8K3jxDUkBILfV33lbS8E5PRNnsyoUwcq0wIDAQABo4IDhzCC
A4MwHQYDVR0OBBYEFICr9cm6i1aNypFGCKcXSbH2xGnDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80ZGNj
NmEzYS0wZTRmLTQ4YzEtOTExNC01ZGRkZjJkN2RiOWQvNmRlNzIzOWYtNmE1Ny0z
OWQ0LWJkNjUtYTk3MTQ4YjIyMmM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGRjYzZhM2EtMGU0Zi00OGMxLTkx
MTQtNWRkZGYyZDdkYjlkLzRkY2M2YTNhLTBlNGYtNDhjMS05MTE0LTVkZGRmMmQ3
ZGI5ZC5jcmwwHwYDVR0jBBgwFoAUdwVCOieEWFJGFp+ThnGvp8EB9m4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy80ZGNjNmEzYS0wZTRmLTQ4YzEtOTExNC01ZGRk
ZjJkN2RiOWQuY2VyMFEGCCsGAQUFBwEHAQH/BEIwQDAkBAIAATAeAwQAoty/AwQA
2BNUAwQA2BNWAwQA2BNcAwQA2BNfMBgEAgACMBIDBwAmIAAKAAADBwAmIAAKAA0w
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAZcwph/l/d5gdFiKoGgj1DKz1cQRyTtAv33uDq7RJ3QA6hfsQjUUr
cvUzfDalSm/KYLPPseQMcIT4U8+Hsd8Toi84a1qlnhz9345F7ZjwaprnvTdtPGQj
r3Ve9z9fgjgpKx+CHxhhXf+Cb1I4X3HSVFt1WCjo6eLH5evM1CN8zWKkpnpg7BIA
tipuqN0O1B9GXaHYaJm5jMyS/PDQgSheW6xKFU8ZwOs0sY2Gil0Sxv0REy5NSpMA
MO2oYAgmNe68nxL2WM18fYwClwnW4KCW0GBU/+eCkAXIDYtQvbV8ZsAFj1UdyE9M
x1+ic+J5gFM1bKf80kSCG0LvD5o2VX/5PA==
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:46:41 2025 by rpki-client