Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/879a6e9a-d30e-3050-9480-e528056dbbb2.roa
File: 879a6e9a-d30e-3050-9480-e528056dbbb2.roa (raw, json)
Hash identifier: R8ba2UbfLm2E5eIzWl7hS8uFXnFDaW0dOK76xDkeQxo=
Subject key identifier: 7E:BA:6C:67:77:1F:D2:B9:6F:17:83:FF:A1:96:BE:19:48:BC:84:24
Certificate issuer: /CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
Certificate serial: 010D0C9F432858485470242F7EC2018169FF0280
Authority key identifier: 57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/879a6e9a-d30e-3050-9480-e528056dbbb2.roa
Signing time: Thu 26 Dec 2024 02:00:40 +0000
ROA not before: Thu 26 Dec 2024 02:00:40 +0000
ROA not after: Wed 26 Mar 2025 01:00:40 +0000
asID: 18434
IP address blocks: 147.249.4.0/24 maxlen: 24
147.249.5.0/24 maxlen: 24
147.249.6.0/24 maxlen: 24
147.249.7.0/24 maxlen: 24
156.55.78.0/24 maxlen: 24
156.55.112.0/24 maxlen: 24
156.55.132.0/24 maxlen: 24
156.55.133.0/24 maxlen: 24
156.55.134.0/24 maxlen: 24
156.55.135.0/24 maxlen: 24
156.55.137.0/24 maxlen: 24
156.55.142.0/24 maxlen: 24
156.55.143.0/24 maxlen: 24
156.55.173.0/24 maxlen: 24
156.55.174.0/24 maxlen: 24
156.55.175.0/24 maxlen: 24
156.55.200.0/24 maxlen: 24
156.55.201.0/24 maxlen: 24
206.71.16.0/24 maxlen: 24
206.71.17.0/24 maxlen: 24
206.71.18.0/24 maxlen: 24
206.71.19.0/24 maxlen: 24
206.71.20.0/24 maxlen: 24
206.71.21.0/24 maxlen: 24
206.71.22.0/24 maxlen: 24
206.71.28.0/24 maxlen: 24
206.71.29.0/24 maxlen: 24
206.71.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:54:70:24:2f:7e:c2:01:81:69:ff:02:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
Validity
Not Before: Dec 26 02:00:40 2024 GMT
Not After : Mar 26 01:00:40 2025 GMT
Subject: CN=4237a8ae-29d0-4290-81d2-c53ae4891033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:cf:8f:20:80:25:7f:6d:7d:bf:04:75:71:13:
c7:22:f5:6d:68:18:75:65:ae:47:5a:3a:2b:0d:96:
6d:e7:da:b7:46:a5:3b:2b:2d:bd:6d:70:45:75:9e:
e2:92:86:42:0f:e7:89:f5:b9:9f:05:d5:d8:41:72:
61:f9:8a:76:7f:f3:f8:6c:1f:82:53:71:51:f2:ab:
99:4a:ad:be:61:06:bc:20:d0:0a:64:dd:bd:64:e3:
97:aa:c8:32:3f:da:5c:04:6e:58:16:a6:56:6a:e1:
c9:ed:51:2f:d8:68:9a:0d:df:fd:9f:04:ad:14:25:
df:3e:2b:02:41:2a:33:21:f2:4b:26:7c:90:6e:67:
33:a5:02:b3:c2:ab:4b:28:fc:04:79:fd:14:a4:67:
a5:d5:d1:0f:74:a8:98:35:eb:27:38:d8:1a:e3:34:
e2:ae:89:0a:c0:e3:bd:7d:2b:4a:8a:b4:26:94:79:
e8:8c:ad:68:d6:3f:81:42:19:38:93:90:fc:c5:21:
6c:f0:03:42:ee:5d:a5:98:cf:d5:49:f3:c6:93:7c:
ce:78:97:4a:ef:bd:ef:fe:d7:6b:be:ea:d4:43:8c:
02:35:4c:92:ca:34:96:75:34:7c:07:bd:5f:d2:ee:
a2:95:92:cd:94:9d:57:c6:6a:b6:85:76:30:7f:70:
38:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:BA:6C:67:77:1F:D2:B9:6F:17:83:FF:A1:96:BE:19:48:BC:84:24
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/879a6e9a-d30e-3050-9480-e528056dbbb2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl
X509v3 Authority Key Identifier:
keyid:57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
sbgp-ipAddrBlock: critical
IPv4:
147.249.4.0/22
156.55.78.0/24
156.55.112.0/24
156.55.132.0/22
156.55.137.0/24
156.55.142.0/23
156.55.173.0-156.55.175.255
156.55.200.0/23
206.71.16.0-206.71.22.255
206.71.28.0/23
206.71.31.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:3e:c3:da:0d:aa:30:36:06:85:ff:c7:93:08:e9:4d:73:6a:
89:ae:85:59:16:a8:80:49:37:c8:13:6a:6b:29:db:ec:87:c5:
dc:45:04:d9:43:ac:fb:3e:ca:8d:ed:a1:44:3e:22:91:b5:22:
fa:36:7d:de:05:07:f8:78:b1:92:c8:b6:fa:cd:6c:5b:f2:63:
9f:2a:60:65:f1:23:83:1b:2e:d8:9d:ae:a6:60:1d:6d:26:14:
20:3b:a9:65:54:bf:f3:c5:27:55:d7:26:44:53:ea:18:31:cb:
c2:fb:1f:e0:d8:ce:42:79:56:07:8f:15:06:ab:d4:c6:32:d2:
f4:d0:d3:01:da:ff:be:64:8c:7d:1e:1b:c9:b9:82:b3:de:cf:
38:58:ac:59:40:61:d5:6e:05:80:88:ba:d2:22:65:95:eb:2b:
2b:0e:29:ae:25:12:fb:a2:05:3e:82:d5:d6:27:70:ba:23:ae:
91:eb:b2:3a:36:92:3a:70:12:01:8d:39:10:b6:00:eb:fc:73:
a2:a9:62:aa:4b:a5:a8:56:70:7f:48:f7:0b:c0:3e:6b:14:27:
73:0b:19:2c:11:b8:c9:89:cb:91:5f:fa:07:22:2d:93:ae:eb:
0b:a3:84:d8:74:3a:66:79:63:a9:a6:64:fc:28:45:3b:12:f3:
8e:6a:3f:1c
-----BEGIN CERTIFICATE-----
MIIGjzCCBXegAwIBAgIUAQ0Mn0MoWEhUcCQvfsIBgWn/AoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQzYTU2OTktM2ViOC00ZWNiLTgwYTUtZTg3NjFhMTli
OTcxMB4XDTI0MTIyNjAyMDA0MFoXDTI1MDMyNjAxMDA0MFowLzEtMCsGA1UEAxMk
NDIzN2E4YWUtMjlkMC00MjkwLTgxZDItYzUzYWU0ODkxMDMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6s+PIIAlf219vwR1cRPHIvVtaBh1Za5HWjor
DZZt59q3RqU7Ky29bXBFdZ7ikoZCD+eJ9bmfBdXYQXJh+Yp2f/P4bB+CU3FR8quZ
Sq2+YQa8INAKZN29ZOOXqsgyP9pcBG5YFqZWauHJ7VEv2GiaDd/9nwStFCXfPisC
QSozIfJLJnyQbmczpQKzwqtLKPwEef0UpGel1dEPdKiYNesnONga4zTirokKwOO9
fStKirQmlHnojK1o1j+BQhk4k5D8xSFs8ANC7l2lmM/VSfPGk3zOeJdK773v/tdr
vurUQ4wCNUySyjSWdTR8B71f0u6ilZLNlJ1Xxmq2hXYwf3A4TQIDAQABo4IDoTCC
A50wHQYDVR0OBBYEFH66bGd3H9K5bxeD/6GWvhlIvIQkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wZDNh
NTY5OS0zZWI4LTRlY2ItODBhNS1lODc2MWExOWI5NzEvODc5YTZlOWEtZDMwZS0z
MDUwLTk0ODAtZTUyODA1NmRiYmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGQzYTU2OTktM2ViOC00ZWNiLTgw
YTUtZTg3NjFhMTliOTcxLzBkM2E1Njk5LTNlYjgtNGVjYi04MGE1LWU4NzYxYTE5
Yjk3MS5jcmwwHwYDVR0jBBgwFoAUVxqlJ+wXkXeMcXkDc2JxxVMXZGYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8wZDNhNTY5OS0zZWI4LTRlY2ItODBhNS1lODc2
MWExOWI5NzEuY2VyMGsGCCsGAQUFBwEHAQH/BFwwWjBYBAIAATBSAwQCk/kEAwQA
nDdOAwQAnDdwAwQCnDeEAwQAnDeJAwQBnDeOMAwDBACcN60DBAScN6ADBAGcN8gw
DAMEBM5HEAMEAM5HFgMEAc5HHAMEAM5HHzBUBgNVHSABAf8ESjBIMEYGCCsGAQUF
Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl
cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB4PsPaDaowNgaF/8eT
COlNc2qJroVZFqiASTfIE2prKdvsh8XcRQTZQ6z7PsqN7aFEPiKRtSL6Nn3eBQf4
eLGSyLb6zWxb8mOfKmBl8SODGy7Yna6mYB1tJhQgO6llVL/zxSdV1yZEU+oYMcvC
+x/g2M5CeVYHjxUGq9TGMtL00NMB2v++ZIx9HhvJuYKz3s84WKxZQGHVbgWAiLrS
ImWV6ysrDimuJRL7ogU+gtXWJ3C6I66R67I6NpI6cBIBjTkQtgDr/HOiqWKqS6Wo
VnB/SPcLwD5rFCdzCxksEbjJicuRX/oHIi2TrusLo4TYdDpmeWOppmT8KEU7EvOO
aj8c
-----END CERTIFICATE-----
Generated at Sat Apr 26 01:28:01 2025 by rpki-client