Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/56ad6b5f-2cfc-38c9-bca5-90d7c02ce44d.roa
File: 56ad6b5f-2cfc-38c9-bca5-90d7c02ce44d.roa (raw, json)
Hash identifier: oq3DbrJrfA9CRR+lxKhme1LxyiVVL9tl03Cnz166JjM=
Subject key identifier: C6:B9:D2:72:76:E3:42:8C:EA:AB:80:92:46:4C:EF:43:A3:E5:73:BB
Certificate issuer: /CN=cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd
Certificate serial: 010D0C9F43285847ED24C5F3570681F46A20D8C0
Authority key identifier: 6A:E9:47:06:58:74:54:B8:65:74:FF:0A:EF:34:42:FD:D4:93:07:80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/56ad6b5f-2cfc-38c9-bca5-90d7c02ce44d.roa
Signing time: Tue 19 Nov 2024 02:00:27 +0000
ROA not before: Tue 19 Nov 2024 02:00:27 +0000
ROA not after: Mon 17 Feb 2025 02:00:27 +0000
asID: 16509
IP address blocks: 130.248.129.0/24 maxlen: 24
130.248.140.0/24 maxlen: 24
130.248.152.0/24 maxlen: 24
130.248.153.0/24 maxlen: 24
130.248.154.0/24 maxlen: 24
130.248.155.0/24 maxlen: 24
130.248.165.0/24 maxlen: 24
130.248.176.0/24 maxlen: 24
130.248.179.0/24 maxlen: 24
130.248.180.0/24 maxlen: 24
130.248.181.0/24 maxlen: 24
130.248.183.0/24 maxlen: 24
130.248.189.0/24 maxlen: 24
130.248.190.0/24 maxlen: 24
130.248.192.0/24 maxlen: 24
130.248.193.0/24 maxlen: 24
130.248.194.0/24 maxlen: 24
130.248.195.0/24 maxlen: 24
130.248.196.0/24 maxlen: 24
130.248.197.0/24 maxlen: 24
130.248.198.0/24 maxlen: 24
130.248.204.0/24 maxlen: 24
130.248.205.0/24 maxlen: 24
130.248.206.0/24 maxlen: 24
130.248.207.0/24 maxlen: 24
130.248.208.0/24 maxlen: 24
130.248.210.0/24 maxlen: 24
130.248.220.0/24 maxlen: 24
130.248.221.0/24 maxlen: 24
130.248.222.0/24 maxlen: 24
130.248.226.0/24 maxlen: 24
130.248.229.0/24 maxlen: 24
130.248.230.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ed:24:c5:f3:57:06:81:f4:6a:20:d8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd
Validity
Not Before: Nov 19 02:00:27 2024 GMT
Not After : Feb 17 02:00:27 2025 GMT
Subject: CN=bf18e033-7fb2-49b6-a4d5-e3efe9cdb367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:24:dc:28:5f:1b:01:ab:d7:91:1f:53:bd:84:
2e:ec:a2:15:f9:38:bf:53:5b:76:d0:5c:5a:43:23:
a6:fd:42:ed:78:e4:ff:1c:d9:d6:e9:26:bb:43:9d:
ff:0e:b7:15:11:04:3d:fe:d5:5a:6e:13:8b:32:59:
51:42:21:1a:f2:60:15:17:f2:99:c0:60:06:ee:8f:
52:a7:c0:2f:df:a7:66:b2:62:5e:1f:4e:a2:cb:b2:
c0:15:7b:4b:b7:0a:1c:b4:d9:3d:8d:82:0c:b0:47:
59:63:ac:11:12:1a:a1:1d:dd:5e:62:21:bb:76:5f:
d4:5a:c6:12:b5:91:37:ff:10:dd:25:e2:58:7f:fc:
fa:2d:ce:cf:47:e6:c3:ce:67:c9:f0:5c:b7:3b:39:
7f:98:9e:35:69:4d:70:4a:ec:50:c8:ae:de:91:03:
3f:af:d8:e5:d2:40:4d:b8:2f:11:8c:90:03:7b:fd:
79:cb:7a:f6:44:4b:38:38:e9:b5:84:18:61:38:ab:
99:20:bd:32:fa:66:5c:11:27:b2:44:84:33:e7:73:
55:2c:4b:0b:ee:a6:bd:b9:d8:b9:a8:ab:0d:2f:02:
ce:b3:36:97:6e:b3:28:a9:d3:30:0c:3f:09:85:4a:
93:68:71:a7:48:04:48:bd:ae:0a:b7:a1:e8:c6:b2:
a7:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:B9:D2:72:76:E3:42:8C:EA:AB:80:92:46:4C:EF:43:A3:E5:73:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/56ad6b5f-2cfc-38c9-bca5-90d7c02ce44d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.crl
X509v3 Authority Key Identifier:
keyid:6A:E9:47:06:58:74:54:B8:65:74:FF:0A:EF:34:42:FD:D4:93:07:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.cer
sbgp-ipAddrBlock: critical
IPv4:
130.248.129.0/24
130.248.140.0/24
130.248.152.0/22
130.248.165.0/24
130.248.176.0/24
130.248.179.0-130.248.181.255
130.248.183.0/24
130.248.189.0-130.248.190.255
130.248.192.0-130.248.198.255
130.248.204.0-130.248.208.255
130.248.210.0/24
130.248.220.0-130.248.222.255
130.248.226.0/24
130.248.229.0-130.248.230.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:33:ec:8b:ed:42:3e:99:82:2f:07:5b:9d:53:8d:c6:59:7b:
60:aa:ac:8f:fc:f6:3f:f9:1b:23:48:09:a7:c9:d0:03:8f:3b:
23:87:10:c2:d1:bc:77:18:30:73:ad:f6:48:f1:74:a5:a1:39:
71:35:3a:9c:b0:37:15:a4:1d:67:7f:19:56:c4:89:85:70:03:
52:80:50:ed:3d:4c:46:c9:f9:ee:bf:19:63:fc:0c:91:52:78:
0b:6b:13:a6:0e:90:d6:16:44:3f:e0:e5:d0:a1:c9:d3:b3:87:
34:e2:a5:60:a5:51:58:88:fb:27:85:cf:b3:d3:53:5a:5b:20:
fb:1e:55:c4:87:d4:57:84:ad:ed:22:d1:07:02:d1:4c:96:cc:
e9:a4:a8:1f:cb:5a:2f:82:fb:d3:f6:1f:01:86:9e:a2:3f:eb:
17:68:81:e2:62:b8:f2:41:56:85:b4:d6:31:b8:e5:a7:3c:dc:
24:6b:b1:75:1a:b0:34:d8:ec:8f:76:c8:f3:34:78:ed:1e:b1:
16:0c:af:23:d9:a5:9e:ec:25:02:b2:ad:89:87:a0:3d:84:06:
a8:31:f1:3c:be:0d:94:04:79:e0:78:da:1c:ae:4f:ed:ba:88:
38:82:ce:d4:5d:3c:93:b2:ee:de:ed:df:1c:01:23:bf:c7:a5:
79:78:ab:e8
-----BEGIN CERTIFICATE-----
MIIGxjCCBa6gAwIBAgIUAQ0Mn0MoWEftJMXzVwaB9Gog2MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2RiNDJmN2QtYTJhNS00YmEzLTljNTctZDVjM2VlMjUx
MmJkMB4XDTI0MTExOTAyMDAyN1oXDTI1MDIxNzAyMDAyN1owLzEtMCsGA1UEAxMk
YmYxOGUwMzMtN2ZiMi00OWI2LWE0ZDUtZTNlZmU5Y2RiMzY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkiTcKF8bAavXkR9TvYQu7KIV+Ti/U1t20Fxa
QyOm/ULteOT/HNnW6Sa7Q53/DrcVEQQ9/tVabhOLMllRQiEa8mAVF/KZwGAG7o9S
p8Av36dmsmJeH06iy7LAFXtLtwoctNk9jYIMsEdZY6wREhqhHd1eYiG7dl/UWsYS
tZE3/xDdJeJYf/z6Lc7PR+bDzmfJ8Fy3Ozl/mJ41aU1wSuxQyK7ekQM/r9jl0kBN
uC8RjJADe/15y3r2REs4OOm1hBhhOKuZIL0y+mZcESeyRIQz53NVLEsL7qa9udi5
qKsNLwLOszaXbrMoqdMwDD8JhUqTaHGnSARIva4Kt6HoxrKn5wIDAQABo4ID2DCC
A9QwHQYDVR0OBBYEFMa50nJ240KM6quAkkZM70Oj5XO7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9jZGI0
MmY3ZC1hMmE1LTRiYTMtOWM1Ny1kNWMzZWUyNTEyYmQvNTZhZDZiNWYtMmNmYy0z
OGM5LWJjYTUtOTBkN2MwMmNlNDRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvY2RiNDJmN2QtYTJhNS00YmEzLTlj
NTctZDVjM2VlMjUxMmJkL2NkYjQyZjdkLWEyYTUtNGJhMy05YzU3LWQ1YzNlZTI1
MTJiZC5jcmwwHwYDVR0jBBgwFoAUaulHBlh0VLhldP8K7zRC/dSTB4AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9jZGI0MmY3ZC1hMmE1LTRiYTMtOWM1Ny1kNWMz
ZWUyNTEyYmQuY2VyMIGhBggrBgEFBQcBBwEB/wSBkTCBjjCBiwQCAAEwgYQDBACC
+IEDBACC+IwDBAKC+JgDBACC+KUDBACC+LAwDAMEAIL4swMEAYL4tAMEAIL4tzAM
AwQAgvi9AwQAgvi+MAwDBAaC+MADBACC+MYwDAMEAoL4zAMEAIL40AMEAIL40jAM
AwQCgvjcAwQAgvjeAwQAgvjiMAwDBACC+OUDBACC+OYwVAYDVR0gAQH/BEowSDBG
BggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9y
ZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEACjPsi+1C
PpmCLwdbnVONxll7YKqsj/z2P/kbI0gJp8nQA487I4cQwtG8dxgwc632SPF0paE5
cTU6nLA3FaQdZ38ZVsSJhXADUoBQ7T1MRsn57r8ZY/wMkVJ4C2sTpg6Q1hZEP+Dl
0KHJ07OHNOKlYKVRWIj7J4XPs9NTWlsg+x5VxIfUV4St7SLRBwLRTJbM6aSoH8ta
L4L70/YfAYaeoj/rF2iB4mK48kFWhbTWMbjlpzzcJGuxdRqwNNjsj3bI8zR47R6x
FgyvI9mlnuwlArKtiYegPYQGqDHxPL4NlAR54HjaHK5P7bqIOILO1F08k7Lu3u3f
HAEjv8eleXir6A==
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:29:51 2025 by rpki-client