Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3/5ccc738a-4d60-307a-b635-bbfa03724c5e.roa
File: 5ccc738a-4d60-307a-b635-bbfa03724c5e.roa (raw, json)
Hash identifier: qCMXGkNUgCSm8sfcNCdo6oAjk4yIG7j4XAcQwCFD8JI=
Subject key identifier: 8F:98:66:B5:12:D5:54:33:DA:2B:C7:15:D4:56:87:6F:4E:4A:9C:BC
Certificate issuer: /CN=8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3
Certificate serial: 010D0C9F432858488815E53FE57C371812E86400
Authority key identifier: 33:48:4D:D7:F3:1C:85:0F:19:5D:51:25:B7:79:10:C1:DA:AF:F0:A6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3/5ccc738a-4d60-307a-b635-bbfa03724c5e.roa
Signing time: Mon 13 Jan 2025 14:00:52 +0000
ROA not before: Mon 13 Jan 2025 14:00:52 +0000
ROA not after: Sun 13 Apr 2025 13:00:52 +0000
asID: 19504
IP address blocks: 64.6.112.0/20 maxlen: 24
66.109.112.0/21 maxlen: 24
68.171.176.0/20 maxlen: 24
104.200.208.0/21 maxlen: 24
206.168.16.0/20 maxlen: 24
216.122.152.0/21 maxlen: 24
216.147.224.0/20 maxlen: 24
2604:1c0::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:88:15:e5:3f:e5:7c:37:18:12:e8:64:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3
Validity
Not Before: Jan 13 14:00:52 2025 GMT
Not After : Apr 13 13:00:52 2025 GMT
Subject: CN=6a2512d6-1a7d-4357-bdc7-f62f7b3bd0ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:c7:95:a1:01:b3:10:0c:6a:41:e0:d0:0b:28:
61:14:42:82:b8:79:d2:e4:9e:01:a6:d8:14:fa:78:
c9:d2:73:ae:00:95:4a:2d:92:fd:fd:d6:84:f0:b3:
61:21:a3:ae:95:7c:ae:bf:25:42:8d:27:c4:af:d9:
3f:82:24:93:f3:12:d9:6a:4f:47:a7:3d:b7:85:1c:
b4:3e:33:5c:12:e4:b5:a3:57:29:99:0f:25:69:af:
43:e8:77:50:1c:1c:5c:b2:49:38:9a:ed:b8:ab:73:
0c:53:5b:e6:53:c3:9f:ec:81:93:67:3d:fb:bb:44:
f9:59:89:9a:a9:02:10:18:09:92:b6:79:32:f0:a7:
ed:67:80:10:2f:74:f3:dc:39:28:c6:4e:75:62:e7:
4d:8a:88:db:8e:d0:1b:8e:9e:5b:a7:19:f4:74:27:
09:5e:9e:fe:00:36:fb:5c:a4:75:07:89:38:4f:b9:
3b:05:8d:97:08:38:ff:66:a0:56:0c:bd:14:7b:00:
8a:de:f5:25:2f:dd:3e:eb:5d:e2:da:a5:63:bd:95:
5d:d2:03:fc:6b:d2:ed:9c:50:8f:16:12:e9:b7:1d:
35:30:77:dc:37:c4:22:2f:4f:58:03:bb:0e:71:c1:
2a:8b:46:ec:16:67:9a:30:2f:b7:67:91:f2:3d:d0:
55:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:98:66:B5:12:D5:54:33:DA:2B:C7:15:D4:56:87:6F:4E:4A:9C:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3/5ccc738a-4d60-307a-b635-bbfa03724c5e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3.crl
X509v3 Authority Key Identifier:
keyid:33:48:4D:D7:F3:1C:85:0F:19:5D:51:25:B7:79:10:C1:DA:AF:F0:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3.cer
sbgp-ipAddrBlock: critical
IPv4:
64.6.112.0/20
66.109.112.0/21
68.171.176.0/20
104.200.208.0/21
206.168.16.0/20
216.122.152.0/21
216.147.224.0/20
IPv6:
2604:1c0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:64:29:16:7c:fa:07:0f:66:72:19:2a:5b:45:1f:0c:9d:2e:
e2:1c:03:46:48:8e:5c:bc:14:14:f3:03:4c:7f:b6:7b:e1:59:
a7:30:c0:81:2a:4a:c8:4d:3b:0b:5d:81:97:2d:53:87:f3:24:
19:f4:8f:b9:4f:1f:48:cc:f6:79:33:fb:9e:26:b9:d5:99:23:
62:e9:ae:9e:bc:31:69:c8:0e:c6:cf:e4:58:6c:8f:60:f5:15:
df:ed:26:67:f4:5b:cd:6e:a3:56:a2:ee:97:9b:b0:e6:a2:d1:
35:5a:9f:40:8e:a1:8e:ac:23:f4:b5:2b:95:37:83:be:16:dc:
62:5b:c9:0b:18:ea:9b:49:2e:a7:19:45:61:ea:38:fb:9f:cf:
f7:11:91:a7:c9:60:86:3f:31:20:17:5a:7e:42:8d:72:97:4e:
a5:ce:1c:07:cb:78:a4:c0:ee:08:43:35:f6:29:17:7b:16:70:
e4:7c:40:3d:ce:12:60:46:3f:98:db:2c:1c:33:22:a2:6a:18:
4a:96:17:8d:33:24:52:16:c5:2b:77:1b:0f:38:bf:6a:59:e8:
19:85:0f:c0:8f:d5:fe:c3:e0:91:9e:3f:42:20:fb:c4:de:8f:
97:42:cd:4c:c4:c3:2b:24:b0:0d:77:58:6c:d8:14:f7:9f:bd:
bb:fe:34:2e
-----BEGIN CERTIFICATE-----
MIIGdjCCBV6gAwIBAgIUAQ0Mn0MoWEiIFeU/5Xw3GBLoZAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGQ3N2UzYTQtYWIxYi00MGMzLWFlNTQtOWU1MGEyMTM0
Y2QzMB4XDTI1MDExMzE0MDA1MloXDTI1MDQxMzEzMDA1MlowLzEtMCsGA1UEAxMk
NmEyNTEyZDYtMWE3ZC00MzU3LWJkYzctZjYyZjdiM2JkMGNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMeVoQGzEAxqQeDQCyhhFEKCuHnS5J4BptgU
+njJ0nOuAJVKLZL9/daE8LNhIaOulXyuvyVCjSfEr9k/giST8xLZak9Hpz23hRy0
PjNcEuS1o1cpmQ8laa9D6HdQHBxcskk4mu24q3MMU1vmU8Of7IGTZz37u0T5WYma
qQIQGAmStnky8KftZ4AQL3Tz3Dkoxk51YudNiojbjtAbjp5bpxn0dCcJXp7+ADb7
XKR1B4k4T7k7BY2XCDj/ZqBWDL0UewCK3vUlL90+613i2qVjvZVd0gP8a9LtnFCP
FhLptx01MHfcN8QiL09YA7sOccEqi0bsFmeaMC+3Z5HyPdBVgwIDAQABo4IDiDCC
A4QwHQYDVR0OBBYEFI+YZrUS1VQz2ivHFdRWh29OSpy8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84ZDc3
ZTNhNC1hYjFiLTQwYzMtYWU1NC05ZTUwYTIxMzRjZDMvNWNjYzczOGEtNGQ2MC0z
MDdhLWI2MzUtYmJmYTAzNzI0YzVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOGQ3N2UzYTQtYWIxYi00MGMzLWFl
NTQtOWU1MGEyMTM0Y2QzLzhkNzdlM2E0LWFiMWItNDBjMy1hZTU0LTllNTBhMjEz
NGNkMy5jcmwwHwYDVR0jBBgwFoAUM0hN1/MchQ8ZXVElt3kQwdqv8KYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy84ZDc3ZTNhNC1hYjFiLTQwYzMtYWU1NC05ZTUw
YTIxMzRjZDMuY2VyMFIGCCsGAQUFBwEHAQH/BEMwQTAwBAIAATAqAwQEQAZwAwQD
Qm1wAwQERKuwAwQDaMjQAwQEzqgQAwQD2HqYAwQE2JPgMA0EAgACMAcDBQAmBAHA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFxkKRZ8+gcPZnIZKltFHwydLuIcA0ZIjly8FBTzA0x/tnvhWacw
wIEqSshNOwtdgZctU4fzJBn0j7lPH0jM9nkz+54mudWZI2Lprp68MWnIDsbP5Fhs
j2D1Fd/tJmf0W81uo1ai7pebsOai0TVan0COoY6sI/S1K5U3g74W3GJbyQsY6ptJ
LqcZRWHqOPufz/cRkafJYIY/MSAXWn5CjXKXTqXOHAfLeKTA7ghDNfYpF3sWcOR8
QD3OEmBGP5jbLBwzIqJqGEqWF40zJFIWxSt3Gw84v2pZ6BmFD8CP1f7D4JGeP0Ig
+8Tej5dCzUzEwysksA13WGzYFPefvbv+NC4=
-----END CERTIFICATE-----
Generated at Mon Apr 28 11:25:40 2025 by rpki-client