Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0eacb3d0-4b6b-4f2c-9dd1-e2875bfd0cba/caf40528-fd91-3c64-8165-eed915d60d9c.roa
File: caf40528-fd91-3c64-8165-eed915d60d9c.roa (raw, json)
Hash identifier: sA54Gmarz4nSmiVv0v+lykS4UWG1c75RBa9IN4NRwfI=
Subject key identifier: 7E:5E:F5:52:FA:26:18:5B:5B:E7:77:11:47:F9:C6:FA:67:C5:90:41
Certificate issuer: /CN=0eacb3d0-4b6b-4f2c-9dd1-e2875bfd0cba
Certificate serial: 010D0C9F43285848696067E12F2489ED8BE63408
Authority key identifier: 1A:35:5B:4D:FB:45:AB:2E:F6:04:4F:09:EF:1D:C7:3E:F8:39:74:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0eacb3d0-4b6b-4f2c-9dd1-e2875bfd0cba.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0eacb3d0-4b6b-4f2c-9dd1-e2875bfd0cba/caf40528-fd91-3c64-8165-eed915d60d9c.roa
Signing time: Thu 02 Jan 2025 14:00:52 +0000
ROA not before: Thu 02 Jan 2025 14:00:52 +0000
ROA not after: Wed 02 Apr 2025 13:00:52 +0000
asID: 8560
IP address blocks: 158.222.102.0/23 maxlen: 32
162.254.24.0/22 maxlen: 32
192.96.159.0/24 maxlen: 32
192.152.28.0/24 maxlen: 32
192.206.141.0/24 maxlen: 32
208.94.36.0/22 maxlen: 32
2607:b500::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:69:60:67:e1:2f:24:89:ed:8b:e6:34:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eacb3d0-4b6b-4f2c-9dd1-e2875bfd0cba
Validity
Not Before: Jan 2 14:00:52 2025 GMT
Not After : Apr 2 13:00:52 2025 GMT
Subject: CN=e3ceb237-6655-479f-b0f3-d85ec1246574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7a:bd:69:27:7c:f5:56:82:b3:d4:3b:33:99:
d8:c8:f1:63:80:01:6b:d3:8d:89:65:5a:90:c5:d7:
a1:64:d0:6b:12:14:2d:5e:f7:b1:95:12:15:d2:b8:
23:18:86:71:61:05:46:42:41:7e:06:22:66:3a:36:
13:5e:49:34:7d:21:c2:03:1e:86:1f:16:08:85:8d:
53:8c:4d:cb:33:83:9d:db:99:84:eb:83:13:89:39:
d4:83:10:4c:19:86:ff:4f:ae:54:23:53:81:b2:a2:
a3:bf:c5:12:36:c9:5a:a9:3c:1d:0f:24:ec:23:52:
c4:5c:da:fb:18:89:04:10:fc:e4:2b:3f:a5:30:4d:
7f:09:71:aa:89:e5:e9:7e:17:a2:a0:3a:92:6b:14:
70:7b:1d:35:cd:42:55:f3:bf:4b:02:71:d0:bc:84:
84:80:ee:74:30:42:d9:a5:f7:ab:52:46:35:02:6b:
c3:85:ff:c4:ca:7b:0f:db:c3:ef:b0:bd:b5:60:d7:
36:3b:60:71:61:b9:0b:24:76:b1:8b:1e:33:25:ba:
33:ac:7c:5c:ee:1d:e2:67:8f:ba:f7:47:13:12:06:
e8:e4:50:40:9c:60:b9:9a:39:de:5d:5a:bb:31:33:
ac:82:a3:00:fb:b2:d2:d2:27:e0:19:b4:69:41:19:
df:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:5E:F5:52:FA:26:18:5B:5B:E7:77:11:47:F9:C6:FA:67:C5:90:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0eacb3d0-4b6b-4f2c-9dd1-e2875bfd0cba/caf40528-fd91-3c64-8165-eed915d60d9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0eacb3d0-4b6b-4f2c-9dd1-e2875bfd0cba/0eacb3d0-4b6b-4f2c-9dd1-e2875bfd0cba.crl
X509v3 Authority Key Identifier:
keyid:1A:35:5B:4D:FB:45:AB:2E:F6:04:4F:09:EF:1D:C7:3E:F8:39:74:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0eacb3d0-4b6b-4f2c-9dd1-e2875bfd0cba.cer
sbgp-ipAddrBlock: critical
IPv4:
158.222.102.0/23
162.254.24.0/22
192.96.159.0/24
192.152.28.0/24
192.206.141.0/24
208.94.36.0/22
IPv6:
2607:b500::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:51:c6:57:34:5d:dd:23:f2:89:da:20:f0:5d:39:85:29:f5:
94:8d:bf:2e:b7:46:58:3c:e9:bb:da:86:ff:d6:14:35:e1:7e:
a7:84:86:33:be:04:23:fe:b4:92:66:5e:7f:b9:73:12:c4:1d:
9f:9c:02:b3:a1:9e:d0:ea:dc:25:9e:8f:1f:ea:4e:c6:f3:91:
7d:83:20:5e:5b:99:30:73:06:62:32:1f:6f:f4:c4:bc:73:c0:
e0:a1:d8:f2:6c:33:bc:e0:c8:61:9c:aa:d8:b3:c4:86:36:df:
58:f6:f3:00:43:d7:ad:0b:a7:d6:c4:e1:a6:15:0c:25:2e:29:
63:d0:25:8d:dc:c4:38:d0:fc:88:44:20:45:c7:d5:aa:ef:96:
21:75:08:00:4a:90:a0:84:e3:02:cd:a6:51:5d:9d:f8:cf:4a:
76:08:23:3d:e9:65:ca:73:a2:16:54:5b:c2:7e:62:47:67:04:
54:05:67:db:03:b5:84:0b:49:87:b2:a5:2d:25:02:77:eb:2f:
7e:5a:fb:0e:e4:61:6e:55:8e:ca:4d:ce:df:38:2f:5c:67:b5:
c0:5d:56:9a:85:0b:5a:20:47:33:82:b3:a0:86:e8:57:d5:62:
54:91:11:27:97:d3:a1:62:5a:31:ac:90:4e:24:fb:8a:0a:04:
b1:f9:48:ca
-----BEGIN CERTIFICATE-----
MIIGcDCCBVigAwIBAgIUAQ0Mn0MoWEhpYGfhLySJ7YvmNAgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGVhY2IzZDAtNGI2Yi00ZjJjLTlkZDEtZTI4NzViZmQw
Y2JhMB4XDTI1MDEwMjE0MDA1MloXDTI1MDQwMjEzMDA1MlowLzEtMCsGA1UEAxMk
ZTNjZWIyMzctNjY1NS00NzlmLWIwZjMtZDg1ZWMxMjQ2NTc0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHq9aSd89VaCs9Q7M5nYyPFjgAFr042JZVqQ
xdehZNBrEhQtXvexlRIV0rgjGIZxYQVGQkF+BiJmOjYTXkk0fSHCAx6GHxYIhY1T
jE3LM4Od25mE64MTiTnUgxBMGYb/T65UI1OBsqKjv8USNslaqTwdDyTsI1LEXNr7
GIkEEPzkKz+lME1/CXGqieXpfheioDqSaxRwex01zUJV879LAnHQvISEgO50MELZ
pferUkY1AmvDhf/EynsP28PvsL21YNc2O2BxYbkLJHaxix4zJbozrHxc7h3iZ4+6
90cTEgbo5FBAnGC5mjneXVq7MTOsgqMA+7LS0ifgGbRpQRnfEwIDAQABo4IDgjCC
A34wHQYDVR0OBBYEFH5e9VL6JhhbW+d3EUf5xvpnxZBBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wZWFj
YjNkMC00YjZiLTRmMmMtOWRkMS1lMjg3NWJmZDBjYmEvY2FmNDA1MjgtZmQ5MS0z
YzY0LTgxNjUtZWVkOTE1ZDYwZDljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMGVhY2IzZDAtNGI2Yi00ZjJjLTlk
ZDEtZTI4NzViZmQwY2JhLzBlYWNiM2QwLTRiNmItNGYyYy05ZGQxLWUyODc1YmZk
MGNiYS5jcmwwHwYDVR0jBBgwFoAUGjVbTftFqy72BE8J7x3HPvg5dGEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8wZWFjYjNkMC00YjZiLTRmMmMtOWRkMS1lMjg3
NWJmZDBjYmEuY2VyMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQBnt5mAwQC
ov4YAwQAwGCfAwQAwJgcAwQAwM6NAwQC0F4kMA0EAgACMAcDBQAmB7UAMFQGA1Ud
IAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cu
YXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQAD
ggEBADtRxlc0Xd0j8onaIPBdOYUp9ZSNvy63Rlg86bvahv/WFDXhfqeEhjO+BCP+
tJJmXn+5cxLEHZ+cArOhntDq3CWejx/qTsbzkX2DIF5bmTBzBmIyH2/0xLxzwOCh
2PJsM7zgyGGcqtizxIY231j28wBD160Lp9bE4aYVDCUuKWPQJY3cxDjQ/IhEIEXH
1arvliF1CABKkKCE4wLNplFdnfjPSnYIIz3pZcpzohZUW8J+YkdnBFQFZ9sDtYQL
SYeypS0lAnfrL35a+w7kYW5VjspNzt84L1xntcBdVpqFC1ogRzOCs6CG6FfVYlSR
ESeX06FiWjGskE4k+4oKBLH5SMo=
-----END CERTIFICATE-----
Generated at Sat Apr 26 13:00:09 2025 by rpki-client