Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463/9c6fb6db-9ad0-332e-bb05-8c8dbaae9e4e.roa
File: 9c6fb6db-9ad0-332e-bb05-8c8dbaae9e4e.roa (raw, json)
Hash identifier: 1TNRoYHvhD4DhMlJ3aTEJ6k7H2Yai2mmVX0tP9n1C+Q=
Subject key identifier: 2B:71:E7:57:B2:97:8E:14:6C:A8:ED:62:1A:9C:69:92:21:E6:2E:24
Certificate issuer: /CN=f9832b96-bd4c-421c-9299-d5f2c689d463
Certificate serial: 010D0C9F432858484065F384A66CDD717AE1A400
Authority key identifier: 20:9C:BB:41:66:DA:B5:0B:B5:94:F9:34:2E:BD:4C:6D:D0:53:11:54
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463/9c6fb6db-9ad0-332e-bb05-8c8dbaae9e4e.roa
Signing time: Wed 18 Dec 2024 21:44:02 +0000
ROA not before: Wed 18 Dec 2024 21:44:02 +0000
ROA not after: Tue 18 Mar 2025 20:44:02 +0000
asID: 21565
IP address blocks: 64.138.192.0/18 maxlen: 24
64.150.128.0/19 maxlen: 24
66.153.128.0/17 maxlen: 24
66.220.64.0/20 maxlen: 24
67.212.32.0/19 maxlen: 24
107.190.144.0/20 maxlen: 24
108.175.176.0/20 maxlen: 24
152.44.112.0/20 maxlen: 24
159.117.160.0/19 maxlen: 24
162.221.104.0/21 maxlen: 24
162.252.0.0/21 maxlen: 24
198.29.48.0/20 maxlen: 24
198.52.224.0/20 maxlen: 24
198.232.104.0/21 maxlen: 24
206.195.64.0/19 maxlen: 24
216.16.160.0/19 maxlen: 24
216.223.192.0/19 maxlen: 24
2606:8400::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:40:65:f3:84:a6:6c:dd:71:7a:e1:a4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9832b96-bd4c-421c-9299-d5f2c689d463
Validity
Not Before: Dec 18 21:44:02 2024 GMT
Not After : Mar 18 20:44:02 2025 GMT
Subject: CN=1320b45e-d721-4b2f-a8f8-a3be777b41ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6f:fa:6b:e0:75:74:8d:34:9f:49:97:24:87:
df:f6:d6:0d:87:1d:84:80:d2:8e:6e:cb:83:31:59:
f6:2d:9e:97:b1:e0:1e:ef:08:b7:25:f5:0f:70:2d:
00:02:d0:84:66:19:c1:38:4e:96:b2:43:00:63:1d:
e3:a9:6e:49:4c:ad:87:2d:34:83:fd:1a:fc:78:cc:
a8:95:89:8e:be:71:34:03:7f:75:30:6b:77:31:af:
9e:66:ab:0b:4c:d6:b9:4d:34:9f:2e:d9:68:fc:65:
ee:76:bd:f5:d9:2d:cc:4a:63:b6:74:26:54:89:cc:
51:c4:09:83:9e:7b:91:4b:dd:58:70:a8:b0:d6:ef:
14:2e:4b:a5:5a:5a:af:63:e1:37:74:3d:21:ee:43:
38:be:39:4e:1d:e5:2c:d8:3c:7f:14:4a:02:2a:df:
d0:79:e9:75:84:1d:7e:45:62:49:01:c1:02:7b:0a:
d7:99:2c:6d:bd:7a:13:d3:36:38:cd:3f:3b:5e:28:
5d:5e:f5:8b:c8:7b:c9:43:b5:87:e4:7f:61:56:aa:
bb:e1:a1:75:fa:8f:1b:59:bc:d0:ff:7a:28:dd:92:
b7:58:65:35:e3:a5:2a:62:43:7a:0e:b9:c7:cd:8d:
53:65:69:91:9d:5f:db:08:d7:90:a7:50:dc:8d:68:
53:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:71:E7:57:B2:97:8E:14:6C:A8:ED:62:1A:9C:69:92:21:E6:2E:24
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463/9c6fb6db-9ad0-332e-bb05-8c8dbaae9e4e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463/f9832b96-bd4c-421c-9299-d5f2c689d463.crl
X509v3 Authority Key Identifier:
keyid:20:9C:BB:41:66:DA:B5:0B:B5:94:F9:34:2E:BD:4C:6D:D0:53:11:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463.cer
sbgp-ipAddrBlock: critical
IPv4:
64.138.192.0/18
64.150.128.0/19
66.153.128.0/17
66.220.64.0/20
67.212.32.0/19
107.190.144.0/20
108.175.176.0/20
152.44.112.0/20
159.117.160.0/19
162.221.104.0/21
162.252.0.0/21
198.29.48.0/20
198.52.224.0/20
198.232.104.0/21
206.195.64.0/19
216.16.160.0/19
216.223.192.0/19
IPv6:
2606:8400::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:75:3a:8f:0a:6c:a7:e6:aa:31:a2:a8:92:fa:26:34:18:d8:
0e:62:61:c3:a9:a3:41:fa:28:d3:80:fe:9f:53:84:6e:76:5b:
c9:bf:cf:a8:e3:b6:ac:02:ba:cf:a7:7f:08:bc:1c:72:86:cd:
42:65:2b:b4:66:41:c8:36:96:f3:50:81:83:5a:b9:d4:a7:06:
98:e6:c3:b1:75:d9:72:9c:68:e2:5b:ba:a6:0d:48:e4:0c:22:
ee:a0:a8:5e:a0:4f:73:26:cf:aa:1c:b6:82:cc:7a:7b:64:ed:
66:d4:45:1b:78:50:bb:03:75:22:05:b5:a2:dd:ce:b5:88:28:
49:aa:61:52:72:36:9c:ff:06:28:af:82:23:04:6a:4d:17:22:
88:31:42:6c:c6:3a:3a:96:56:95:3f:5b:cd:a7:16:75:5e:71:
ea:72:97:c6:a2:b5:54:c7:82:2d:58:36:a9:12:86:36:72:18:
4a:08:e8:16:87:0c:8b:38:d0:d9:7f:97:f0:86:fb:7e:36:24:
e4:df:c8:e9:de:36:4e:26:d2:f7:cb:fa:17:a7:ff:a2:0a:3c:
e9:24:ed:10:34:de:bc:a2:ab:14:19:f3:c7:3d:89:bc:4f:15:
11:1e:f0:2c:f2:ab:c8:b8:e8:5b:4c:95:ad:31:bf:1d:f7:b6:
b6:9f:55:52
-----BEGIN CERTIFICATE-----
MIIGszCCBZugAwIBAgIUAQ0Mn0MoWEhAZfOEpmzdcXrhpAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk4MzJiOTYtYmQ0Yy00MjFjLTkyOTktZDVmMmM2ODlk
NDYzMB4XDTI0MTIxODIxNDQwMloXDTI1MDMxODIwNDQwMlowLzEtMCsGA1UEAxMk
MTMyMGI0NWUtZDcyMS00YjJmLWE4ZjgtYTNiZTc3N2I0MWFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwm/6a+B1dI00n0mXJIff9tYNhx2EgNKObsuD
MVn2LZ6XseAe7wi3JfUPcC0AAtCEZhnBOE6WskMAYx3jqW5JTK2HLTSD/Rr8eMyo
lYmOvnE0A391MGt3Ma+eZqsLTNa5TTSfLtlo/GXudr312S3MSmO2dCZUicxRxAmD
nnuRS91YcKiw1u8ULkulWlqvY+E3dD0h7kM4vjlOHeUs2Dx/FEoCKt/Qeel1hB1+
RWJJAcECewrXmSxtvXoT0zY4zT87XihdXvWLyHvJQ7WH5H9hVqq74aF1+o8bWbzQ
/3oo3ZK3WGU146UqYkN6DrnHzY1TZWmRnV/bCNeQp1DcjWhTrQIDAQABo4IDxTCC
A8EwHQYDVR0OBBYEFCtx51eyl44UbKjtYhqcaZIh5i4kMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9mOTgz
MmI5Ni1iZDRjLTQyMWMtOTI5OS1kNWYyYzY4OWQ0NjMvOWM2ZmI2ZGItOWFkMC0z
MzJlLWJiMDUtOGM4ZGJhYWU5ZTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZjk4MzJiOTYtYmQ0Yy00MjFjLTky
OTktZDVmMmM2ODlkNDYzL2Y5ODMyYjk2LWJkNGMtNDIxYy05Mjk5LWQ1ZjJjNjg5
ZDQ2My5jcmwwHwYDVR0jBBgwFoAUIJy7QWbatQu1lPk0Lr1MbdBTEVQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9mOTgzMmI5Ni1iZDRjLTQyMWMtOTI5OS1kNWYy
YzY4OWQ0NjMuY2VyMIGOBggrBgEFBQcBBwEB/wR/MH0wbAQCAAEwZgMEBkCKwAME
BUCWgAMEB0KZgAMEBELcQAMEBUPUIAMEBGu+kAMEBGyvsAMEBJgscAMEBZ91oAME
A6LdaAMEA6L8AAMEBMYdMAMEBMY04AMEA8boaAMEBc7DQAMEBdgQoAMEBdjfwDAN
BAIAAjAHAwUAJgaEADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBkdTqPCmyn5qoxoqiS+iY0GNgOYmHDqaNB
+ijTgP6fU4RudlvJv8+o47asArrPp38IvBxyhs1CZSu0ZkHINpbzUIGDWrnUpwaY
5sOxddlynGjiW7qmDUjkDCLuoKheoE9zJs+qHLaCzHp7ZO1m1EUbeFC7A3UiBbWi
3c61iChJqmFScjac/wYor4IjBGpNFyKIMUJsxjo6llaVP1vNpxZ1XnHqcpfGorVU
x4ItWDapEoY2chhKCOgWhwyLONDZf5fwhvt+NiTk38jp3jZOJtL3y/oXp/+iCjzp
JO0QNN68oqsUGfPHPYm8TxURHvAs8qvIuOhbTJWtMb8d97a2n1VS
-----END CERTIFICATE-----
Generated at Sun Apr 27 09:23:38 2025 by rpki-client