Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3364015a-cbd4-4063-84a8-a6b77c470bce/ed79258b-93bc-34bd-883d-a471ecbc062d.roa
File: ed79258b-93bc-34bd-883d-a471ecbc062d.roa (raw, json)
Hash identifier: KWUVCc016iSZHJ19T93glKlNrUsU3hIl8+KWaJh0r4E=
Subject key identifier: 6B:0E:5F:8D:CD:54:96:25:BF:F8:AC:4F:1E:6D:55:B9:A0:63:28:DD
Certificate issuer: /CN=3364015a-cbd4-4063-84a8-a6b77c470bce
Certificate serial: 010D0C9F432858482EC00C7270399C77787C9400
Authority key identifier: 22:CB:26:11:CA:C0:7D:01:DE:58:59:94:FC:53:FF:79:C8:34:48:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3364015a-cbd4-4063-84a8-a6b77c470bce.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3364015a-cbd4-4063-84a8-a6b77c470bce/ed79258b-93bc-34bd-883d-a471ecbc062d.roa
Signing time: Thu 12 Dec 2024 14:00:51 +0000
ROA not before: Thu 12 Dec 2024 14:00:51 +0000
ROA not after: Wed 12 Mar 2025 13:00:51 +0000
asID: 396073
IP address blocks: 104.37.172.0/22 maxlen: 24
147.124.208.0/20 maxlen: 24
192.30.240.0/23 maxlen: 24
198.135.48.0/22 maxlen: 24
216.250.248.0/21 maxlen: 24
2602:fdb7::/48 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2e:c0:0c:72:70:39:9c:77:78:7c:94:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3364015a-cbd4-4063-84a8-a6b77c470bce
Validity
Not Before: Dec 12 14:00:51 2024 GMT
Not After : Mar 12 13:00:51 2025 GMT
Subject: CN=2d1c737a-7026-4fa6-a426-749ca28d10d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:99:16:1e:24:15:88:15:23:57:c2:e4:db:a6:
12:31:90:e7:23:aa:d1:f2:69:74:08:91:fa:0d:0a:
8b:60:c5:83:86:98:91:af:f2:be:74:a2:5b:15:ef:
97:09:3e:60:4a:0b:a9:23:d4:d6:74:c8:0a:d4:f1:
64:07:4d:39:1c:67:c8:c9:f9:1a:25:cc:69:c7:20:
c2:67:0b:01:e8:fa:56:04:b1:e3:5e:7d:b0:c9:11:
36:68:e1:9d:66:16:51:82:39:a1:b7:e1:b4:5a:8f:
2c:78:88:a8:78:60:a8:67:96:b9:ae:73:08:00:23:
ee:c3:9d:30:8e:82:ac:b0:00:b7:df:4c:2f:6a:64:
0c:b1:ce:a7:54:93:7a:a4:98:6f:9f:ce:3e:39:34:
d8:bd:eb:07:70:35:b4:34:7e:5d:ce:33:d2:84:77:
46:0b:67:65:4f:26:77:e0:9d:0f:82:99:dd:1f:60:
9c:fe:c4:a5:bb:69:ce:c9:d3:23:7a:24:11:b4:c9:
3e:5d:9a:8a:89:b8:7e:4b:c0:81:37:ac:74:a7:7a:
c3:b9:a6:8b:e0:8f:9e:45:55:3a:ac:47:f3:8c:16:
a2:66:75:0b:54:16:d7:af:a2:48:d9:04:c3:e9:3d:
76:ce:33:74:59:6f:ef:74:17:f0:35:25:fb:da:74:
7a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:0E:5F:8D:CD:54:96:25:BF:F8:AC:4F:1E:6D:55:B9:A0:63:28:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3364015a-cbd4-4063-84a8-a6b77c470bce/ed79258b-93bc-34bd-883d-a471ecbc062d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3364015a-cbd4-4063-84a8-a6b77c470bce/3364015a-cbd4-4063-84a8-a6b77c470bce.crl
X509v3 Authority Key Identifier:
keyid:22:CB:26:11:CA:C0:7D:01:DE:58:59:94:FC:53:FF:79:C8:34:48:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3364015a-cbd4-4063-84a8-a6b77c470bce.cer
sbgp-ipAddrBlock: critical
IPv4:
104.37.172.0/22
147.124.208.0/20
192.30.240.0/23
198.135.48.0/22
216.250.248.0/21
IPv6:
2602:fdb7::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:08:0a:75:29:bb:1e:10:09:48:2b:5e:aa:d9:ea:95:fb:00:
23:ed:bb:0e:52:4a:d4:d8:db:16:ea:3e:04:34:bd:5a:26:76:
cc:28:94:d3:df:3e:c8:2b:ae:30:b2:ba:c5:d2:8f:58:cd:87:
98:66:a2:e9:72:49:be:dd:22:7d:fa:38:02:81:47:70:55:fb:
10:d9:6e:70:1a:34:3a:cd:49:b8:a5:54:57:b5:de:d2:66:d3:
43:2a:60:5e:ba:ad:03:a8:4b:3f:6c:40:78:66:86:31:dc:05:
ea:d6:cd:f3:b5:e1:00:33:c1:06:a8:67:8a:67:95:01:9c:32:
15:ed:93:68:77:22:3a:52:02:08:d9:57:cd:ba:af:fe:34:b9:
e3:42:76:70:85:d7:a5:2b:39:31:32:a6:fc:5c:3b:d2:7a:a2:
ea:c1:e3:5a:e5:c8:18:c8:df:e1:95:6b:85:e8:b7:94:41:1d:
0a:21:3f:9b:ce:aa:0c:33:70:5f:d4:91:68:20:9f:8f:d9:bb:
72:50:6b:b5:bb:1a:91:d7:4f:24:5d:ea:cc:45:df:e0:1c:26:
a5:08:80:f7:d9:7d:b8:c5:bb:02:be:fc:d7:71:eb:4d:8a:47:
86:70:d7:84:55:17:4c:7c:bb:38:c9:04:a0:95:51:c4:8e:51:
7c:de:d9:f9
-----BEGIN CERTIFICATE-----
MIIGbDCCBVSgAwIBAgIUAQ0Mn0MoWEguwAxycDmcd3h8lAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzM2NDAxNWEtY2JkNC00MDYzLTg0YTgtYTZiNzdjNDcw
YmNlMB4XDTI0MTIxMjE0MDA1MVoXDTI1MDMxMjEzMDA1MVowLzEtMCsGA1UEAxMk
MmQxYzczN2EtNzAyNi00ZmE2LWE0MjYtNzQ5Y2EyOGQxMGQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5kWHiQViBUjV8Lk26YSMZDnI6rR8ml0CJH6
DQqLYMWDhpiRr/K+dKJbFe+XCT5gSgupI9TWdMgK1PFkB005HGfIyfkaJcxpxyDC
ZwsB6PpWBLHjXn2wyRE2aOGdZhZRgjmht+G0Wo8seIioeGCoZ5a5rnMIACPuw50w
joKssAC330wvamQMsc6nVJN6pJhvn84+OTTYvesHcDW0NH5dzjPShHdGC2dlTyZ3
4J0PgpndH2Cc/sSlu2nOydMjeiQRtMk+XZqKibh+S8CBN6x0p3rDuaaL4I+eRVU6
rEfzjBaiZnULVBbXr6JI2QTD6T12zjN0WW/vdBfwNSX72nR6BwIDAQABo4IDfjCC
A3owHQYDVR0OBBYEFGsOX43NVJYlv/isTx5tVbmgYyjdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zMzY0
MDE1YS1jYmQ0LTQwNjMtODRhOC1hNmI3N2M0NzBiY2UvZWQ3OTI1OGItOTNiYy0z
NGJkLTg4M2QtYTQ3MWVjYmMwNjJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzM2NDAxNWEtY2JkNC00MDYzLTg0
YTgtYTZiNzdjNDcwYmNlLzMzNjQwMTVhLWNiZDQtNDA2My04NGE4LWE2Yjc3YzQ3
MGJjZS5jcmwwHwYDVR0jBBgwFoAUIssmEcrAfQHeWFmU/FP/ecg0SJ4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8zMzY0MDE1YS1jYmQ0LTQwNjMtODRhOC1hNmI3
N2M0NzBiY2UuY2VyMEgGCCsGAQUFBwEHAQH/BDkwNzAkBAIAATAeAwQCaCWsAwQE
k3zQAwQBwB7wAwQCxocwAwQD2Pr4MA8EAgACMAkDBwAmAv23AAAwVAYDVR0gAQH/
BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmlu
Lm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEA
EwgKdSm7HhAJSCteqtnqlfsAI+27DlJK1NjbFuo+BDS9WiZ2zCiU098+yCuuMLK6
xdKPWM2HmGai6XJJvt0iffo4AoFHcFX7ENlucBo0Os1JuKVUV7Xe0mbTQypgXrqt
A6hLP2xAeGaGMdwF6tbN87XhADPBBqhnimeVAZwyFe2TaHciOlICCNlXzbqv/jS5
40J2cIXXpSs5MTKm/Fw70nqi6sHjWuXIGMjf4ZVrhei3lEEdCiE/m86qDDNwX9SR
aCCfj9m7clBrtbsakddPJF3qzEXf4BwmpQiA99l9uMW7Ar7813HrTYpHhnDXhFUX
THy7OMkEoJVRxI5RfN7Z+Q==
-----END CERTIFICATE-----
Generated at Fri Apr 25 21:13:29 2025 by rpki-client