Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/b5bccd91-72af-3e72-9e98-e575bcfa392f.roa
File: b5bccd91-72af-3e72-9e98-e575bcfa392f.roa (raw, json)
Hash identifier: ovhkS8c6Z7JD+N0tFaHIkPP2O8Vj/tXJFNhg2PwqLb0=
Subject key identifier: E7:30:82:83:DF:C2:A6:0D:E8:B4:57:D5:44:42:AE:93:54:C3:B0:A7
Certificate issuer: /CN=e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c
Certificate serial: 010D0C9F43285848748B21C9C63A1135215F1A00
Authority key identifier: 80:B2:BF:71:D3:A4:8D:54:39:E1:B6:9F:8B:B0:32:31:8E:0E:6C:9A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/b5bccd91-72af-3e72-9e98-e575bcfa392f.roa
Signing time: Mon 06 Jan 2025 14:00:52 +0000
ROA not before: Mon 06 Jan 2025 14:00:52 +0000
ROA not after: Sun 06 Apr 2025 13:00:52 +0000
asID: 16410
IP address blocks: 192.112.245.0/24 maxlen: 24
205.157.203.0/24 maxlen: 24
205.157.204.0/24 maxlen: 24
205.157.240.0/24 maxlen: 24
205.157.242.0/24 maxlen: 24
205.157.244.0/24 maxlen: 24
205.157.245.0/24 maxlen: 24
205.157.246.0/24 maxlen: 24
205.157.247.0/24 maxlen: 24
205.157.248.0/24 maxlen: 24
205.157.249.0/24 maxlen: 24
205.157.250.0/24 maxlen: 24
205.157.251.0/24 maxlen: 24
205.157.254.0/24 maxlen: 24
205.157.255.0/24 maxlen: 24
206.180.0.0/23 maxlen: 23
206.180.2.0/24 maxlen: 24
206.180.3.0/24 maxlen: 24
206.180.4.0/24 maxlen: 24
206.180.5.0/24 maxlen: 24
206.180.6.0/24 maxlen: 24
206.180.7.0/24 maxlen: 24
206.180.8.0/24 maxlen: 24
206.180.10.0/24 maxlen: 24
206.180.11.0/24 maxlen: 24
206.180.12.0/22 maxlen: 22
206.180.18.0/24 maxlen: 24
206.180.19.0/24 maxlen: 24
206.180.25.0/24 maxlen: 24
206.180.27.0/24 maxlen: 24
206.180.28.0/24 maxlen: 24
206.180.29.0/24 maxlen: 24
206.180.30.0/24 maxlen: 24
206.180.36.0/24 maxlen: 24
206.180.37.0/24 maxlen: 24
206.180.38.0/24 maxlen: 24
206.180.39.0/24 maxlen: 24
206.180.52.0/24 maxlen: 24
206.180.53.0/24 maxlen: 24
206.180.54.0/24 maxlen: 24
206.180.55.0/24 maxlen: 24
206.180.56.0/24 maxlen: 24
206.180.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:74:8b:21:c9:c6:3a:11:35:21:5f:1a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c
Validity
Not Before: Jan 6 14:00:52 2025 GMT
Not After : Apr 6 13:00:52 2025 GMT
Subject: CN=e55c071f-abe7-41ea-a09d-959489fc9bfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:36:18:56:8e:08:77:a3:62:8a:88:dc:b2:d0:
5f:4c:3d:e4:1c:9b:43:d8:f1:78:04:23:0f:7d:89:
37:b6:87:ad:18:9c:67:47:13:3c:27:20:53:6a:b7:
6f:8e:b1:1a:6f:21:6d:74:11:65:9a:31:75:47:db:
b6:5f:07:2c:d5:92:2c:cb:2f:89:0a:7c:0b:cf:58:
12:31:2d:42:59:87:e8:27:42:b0:ed:1a:b1:55:25:
b8:13:5a:be:6d:f2:8b:bb:76:db:cf:94:c8:ae:fc:
25:61:7b:e6:69:9f:c0:53:5d:2c:62:f2:cc:ea:1a:
fd:2f:ca:1b:50:df:92:3c:e2:3c:b7:7d:d6:48:84:
7f:67:3e:7d:71:e2:5d:18:24:26:ae:ee:ae:e4:01:
5d:2a:b1:62:16:43:f5:33:eb:dd:af:e3:eb:18:10:
37:2a:36:41:da:d7:9f:22:f5:f2:b9:5d:4a:5f:13:
e8:e4:17:04:18:8f:91:13:e7:a2:f0:d7:0b:68:9b:
30:87:f4:57:af:6c:de:10:60:76:4f:99:59:65:40:
6f:91:28:c9:fe:33:7c:3c:a3:9c:de:b8:ad:13:90:
3a:22:7e:cb:be:70:03:7c:63:a9:56:ca:18:96:ef:
6f:94:1a:ef:e4:a5:6c:38:77:0c:1d:36:86:17:94:
f8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:30:82:83:DF:C2:A6:0D:E8:B4:57:D5:44:42:AE:93:54:C3:B0:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/b5bccd91-72af-3e72-9e98-e575bcfa392f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.crl
X509v3 Authority Key Identifier:
keyid:80:B2:BF:71:D3:A4:8D:54:39:E1:B6:9F:8B:B0:32:31:8E:0E:6C:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.cer
sbgp-ipAddrBlock: critical
IPv4:
192.112.245.0/24
205.157.203.0-205.157.204.255
205.157.240.0/24
205.157.242.0/24
205.157.244.0-205.157.251.255
205.157.254.0/23
206.180.0.0-206.180.8.255
206.180.10.0-206.180.15.255
206.180.18.0/23
206.180.25.0/24
206.180.27.0-206.180.30.255
206.180.36.0/22
206.180.52.0-206.180.56.255
206.180.60.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:62:4d:e0:3c:ba:ff:93:c4:5f:97:77:bb:c7:9b:49:26:d4:
db:6d:7b:51:78:fb:3f:3c:24:51:4b:cd:69:d9:ad:df:3b:38:
92:1a:a9:f6:c2:48:d3:73:bc:34:ef:52:0d:c5:c3:fe:d8:95:
29:04:5b:8e:b6:65:53:14:b6:05:6c:59:7e:86:f5:12:c9:c9:
e8:d7:62:47:9a:b1:61:a7:69:9f:58:5d:5a:af:20:ee:35:ad:
59:6d:10:9e:18:5d:f5:32:c7:7b:d3:11:4f:0f:b8:4a:ce:37:
c6:73:b7:f1:70:f9:7b:1b:64:3f:a8:ef:fe:7a:e3:b6:cb:3e:
5a:aa:d1:c5:80:d6:5c:b3:3a:aa:47:d3:20:d0:b2:90:34:d2:
21:2a:2c:2d:dd:40:19:7a:5e:f7:63:5b:db:ca:70:3d:4a:a0:
3a:a6:37:8c:5f:7f:6b:e7:13:8f:88:97:32:2b:d2:5c:f4:72:
06:95:e4:82:c2:cb:9c:26:0d:bf:81:a7:68:54:cc:2c:16:c3:
e4:5a:87:b1:54:ff:d4:0c:6f:44:9b:d0:6b:6e:eb:ed:a5:18:
0a:98:ce:fe:0e:0c:74:8b:1f:05:28:30:99:49:58:c8:0d:bb:
c4:69:fb:3a:78:64:42:a4:47:85:5a:58:59:0c:8f:22:9e:28:
c6:7d:08:c8
-----BEGIN CERTIFICATE-----
MIIGxTCCBa2gAwIBAgIUAQ0Mn0MoWEh0iyHJxjoRNSFfGgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTk4Y2M4ZTUtMWZjZi00YzI4LTlhZGItNDVlMmNjMWMw
MjNjMB4XDTI1MDEwNjE0MDA1MloXDTI1MDQwNjEzMDA1MlowLzEtMCsGA1UEAxMk
ZTU1YzA3MWYtYWJlNy00MWVhLWEwOWQtOTU5NDg5ZmM5YmZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTYYVo4Id6NiiojcstBfTD3kHJtD2PF4BCMP
fYk3toetGJxnRxM8JyBTardvjrEabyFtdBFlmjF1R9u2Xwcs1ZIsyy+JCnwLz1gS
MS1CWYfoJ0Kw7RqxVSW4E1q+bfKLu3bbz5TIrvwlYXvmaZ/AU10sYvLM6hr9L8ob
UN+SPOI8t33WSIR/Zz59ceJdGCQmru6u5AFdKrFiFkP1M+vdr+PrGBA3KjZB2tef
IvXyuV1KXxPo5BcEGI+RE+ei8NcLaJswh/RXr2zeEGB2T5lZZUBvkSjJ/jN8PKOc
3ritE5A6In7LvnADfGOpVsoYlu9vlBrv5KVsOHcMHTaGF5T49QIDAQABo4ID1zCC
A9MwHQYDVR0OBBYEFOcwgoPfwqYN6LRX1URCrpNUw7CnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThj
YzhlNS0xZmNmLTRjMjgtOWFkYi00NWUyY2MxYzAyM2MvYjViY2NkOTEtNzJhZi0z
ZTcyLTllOTgtZTU3NWJjZmEzOTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4Y2M4ZTUtMWZjZi00YzI4LTlh
ZGItNDVlMmNjMWMwMjNjL2U5OGNjOGU1LTFmY2YtNGMyOC05YWRiLTQ1ZTJjYzFj
MDIzYy5jcmwwHwYDVR0jBBgwFoAUgLK/cdOkjVQ54bafi7AyMY4ObJowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThjYzhlNS0xZmNmLTRjMjgtOWFkYi00NWUy
Y2MxYzAyM2MuY2VyMIGgBggrBgEFBQcBBwEB/wSBkDCBjTCBigQCAAEwgYMDBADA
cPUwDAMEAM2dywMEAM2dzAMEAM2d8AMEAM2d8jAMAwQCzZ30AwQCzZ34AwQBzZ3+
MAsDAwLOtAMEAM60CDAMAwQBzrQKAwQEzrQAAwQBzrQSAwQAzrQZMAwDBADOtBsD
BADOtB4DBALOtCQwDAMEAs60NAMEAM60OAMEAM60PDBUBgNVHSABAf8ESjBIMEYG
CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl
c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBaYk3gPLr/
k8Rfl3e7x5tJJtTbbXtRePs/PCRRS81p2a3fOziSGqn2wkjTc7w071INxcP+2JUp
BFuOtmVTFLYFbFl+hvUSycno12JHmrFhp2mfWF1aryDuNa1ZbRCeGF31Msd70xFP
D7hKzjfGc7fxcPl7G2Q/qO/+euO2yz5aqtHFgNZcszqqR9Mg0LKQNNIhKiwt3UAZ
el73Y1vbynA9SqA6pjeMX39r5xOPiJcyK9Jc9HIGleSCwsucJg2/gadoVMwsFsPk
WoexVP/UDG9Em9BrbuvtpRgKmM7+Dgx0ix8FKDCZSVjIDbvEafs6eGRCpEeFWlhZ
DI8inijGfQjI
-----END CERTIFICATE-----
Generated at Sun Apr 27 11:50:16 2025 by rpki-client