Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3364015a-cbd4-4063-84a8-a6b77c470bce/ca578e82-bf4a-3c60-bc1c-118f73b7a0be.roa
File: ca578e82-bf4a-3c60-bc1c-118f73b7a0be.roa (raw, json)
Hash identifier: lOiLC9PGo/8/UDFAdDA+9g9gIOVsQXBovOdMuqiQbZM=
Subject key identifier: 16:F3:04:65:8A:38:21:7B:B7:37:0C:41:08:1B:4F:FA:23:B1:50:8E
Certificate issuer: /CN=3364015a-cbd4-4063-84a8-a6b77c470bce
Certificate serial: 010D0C9F432858490E16C87562295D8699061A00
Authority key identifier: 22:CB:26:11:CA:C0:7D:01:DE:58:59:94:FC:53:FF:79:C8:34:48:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3364015a-cbd4-4063-84a8-a6b77c470bce.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3364015a-cbd4-4063-84a8-a6b77c470bce/ca578e82-bf4a-3c60-bc1c-118f73b7a0be.roa
Signing time: Sun 02 Mar 2025 14:00:52 +0000
ROA not before: Sun 02 Mar 2025 14:00:52 +0000
ROA not after: Sat 31 May 2025 13:00:52 +0000
asID: 396073
IP address blocks: 192.30.242.0/23 maxlen: 24
198.135.52.0/22 maxlen: 24
198.135.56.0/22 maxlen: 24
216.250.254.0/23 maxlen: 24
2602:fdb7:1::/48 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0e:16:c8:75:62:29:5d:86:99:06:1a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3364015a-cbd4-4063-84a8-a6b77c470bce
Validity
Not Before: Mar 2 14:00:52 2025 GMT
Not After : May 31 13:00:52 2025 GMT
Subject: CN=46bb606c-5ae7-4cc4-8dcc-d0092fe7800a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2d:25:29:30:9d:e6:38:47:64:0d:15:b3:ef:
9c:1d:31:69:63:0e:c8:c1:75:82:90:b8:48:b3:2d:
38:34:dd:8a:e2:60:ca:fd:73:ab:e2:7e:78:a9:50:
2b:f5:64:a7:82:4a:ef:5e:e4:5b:d4:c0:2c:93:67:
6d:7e:a6:4c:41:f6:c5:97:e1:ac:70:5f:fc:3f:f5:
30:a9:6d:a8:0c:bb:ba:22:ec:f0:31:a9:48:b4:7c:
75:6d:ae:de:7e:13:f5:aa:cd:44:90:34:3f:7f:97:
be:8d:74:ae:8a:45:3e:4d:98:d8:f9:6a:3e:e9:81:
90:f4:6e:a9:1f:d5:b7:4f:be:e3:d3:13:44:7e:e7:
8f:6e:4e:b6:0e:f2:b9:86:24:1c:a8:8a:56:71:f2:
6b:7f:c5:69:6e:61:a5:74:98:1b:1b:8d:22:e8:31:
a4:53:00:ae:e6:d9:74:82:3c:ee:f3:4e:78:40:0f:
83:c7:f4:ab:75:e8:79:3d:dc:81:1b:da:18:a1:5e:
d5:7f:f7:49:d3:3f:30:ca:02:91:ba:98:64:7f:f8:
28:50:da:97:f1:00:5a:3c:19:2b:12:eb:d3:2c:bf:
4d:8c:3f:ba:55:66:39:43:c6:0e:48:c3:0a:0e:1b:
5b:8c:ca:17:67:95:38:34:b6:dc:01:15:2b:ae:5f:
a7:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:F3:04:65:8A:38:21:7B:B7:37:0C:41:08:1B:4F:FA:23:B1:50:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3364015a-cbd4-4063-84a8-a6b77c470bce/ca578e82-bf4a-3c60-bc1c-118f73b7a0be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3364015a-cbd4-4063-84a8-a6b77c470bce/3364015a-cbd4-4063-84a8-a6b77c470bce.crl
X509v3 Authority Key Identifier:
keyid:22:CB:26:11:CA:C0:7D:01:DE:58:59:94:FC:53:FF:79:C8:34:48:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3364015a-cbd4-4063-84a8-a6b77c470bce.cer
sbgp-ipAddrBlock: critical
IPv4:
192.30.242.0/23
198.135.52.0-198.135.59.255
216.250.254.0/23
IPv6:
2602:fdb7:1::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:de:c2:53:a1:e5:26:8c:f4:d9:15:9a:dc:0f:8f:f6:bd:d5:
9c:43:92:ce:ec:c3:b0:38:2a:7e:5a:3b:b5:ef:4b:bc:56:ba:
82:e2:15:2e:a2:b2:4f:e3:6a:ce:e2:12:b5:70:00:df:15:f5:
37:71:8f:f8:83:04:8c:f0:19:43:0a:85:fb:ba:21:35:7d:eb:
f4:fa:01:6b:1f:1e:7e:89:93:a1:49:f6:47:79:d1:55:9e:e8:
4d:48:97:b2:3a:8a:b7:bf:86:9f:ae:0a:7a:87:d2:6b:bb:8f:
db:8c:4c:7d:4b:40:b2:2b:a7:d4:72:c5:32:f2:22:7c:be:0a:
3d:c2:36:d3:ef:7c:5c:33:08:1d:85:30:ba:70:5f:d7:7d:90:
20:59:0a:f1:1e:00:f6:34:27:24:56:c2:e8:96:f3:20:c8:fb:
05:a3:c9:e9:37:a2:de:00:c9:ba:f8:97:8b:10:3d:6a:31:ef:
ed:54:df:e0:42:99:e7:0c:dc:37:9d:99:b1:48:06:a3:2e:c3:
c2:09:44:84:22:57:e9:65:02:67:0c:44:8b:b1:72:3b:59:ec:
0e:4c:9f:36:50:bb:00:f1:bf:de:30:06:57:a5:8c:5d:04:6e:
94:57:ad:38:21:6b:d7:61:c8:f0:c0:e9:78:45:4f:6f:78:88:
18:65:02:b7
-----BEGIN CERTIFICATE-----
MIIGaDCCBVCgAwIBAgIUAQ0Mn0MoWEkOFsh1YildhpkGGgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzM2NDAxNWEtY2JkNC00MDYzLTg0YTgtYTZiNzdjNDcw
YmNlMB4XDTI1MDMwMjE0MDA1MloXDTI1MDUzMTEzMDA1MlowLzEtMCsGA1UEAxMk
NDZiYjYwNmMtNWFlNy00Y2M0LThkY2MtZDAwOTJmZTc4MDBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoS0lKTCd5jhHZA0Vs++cHTFpYw7IwXWCkLhI
sy04NN2K4mDK/XOr4n54qVAr9WSngkrvXuRb1MAsk2dtfqZMQfbFl+GscF/8P/Uw
qW2oDLu6IuzwMalItHx1ba7efhP1qs1EkDQ/f5e+jXSuikU+TZjY+Wo+6YGQ9G6p
H9W3T77j0xNEfuePbk62DvK5hiQcqIpWcfJrf8VpbmGldJgbG40i6DGkUwCu5tl0
gjzu8054QA+Dx/Srdeh5PdyBG9oYoV7Vf/dJ0z8wygKRuphkf/goUNqX8QBaPBkr
EuvTLL9NjD+6VWY5Q8YOSMMKDhtbjMoXZ5U4NLbcARUrrl+n1wIDAQABo4IDejCC
A3YwHQYDVR0OBBYEFBbzBGWKOCF7tzcMQQgbT/ojsVCOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zMzY0
MDE1YS1jYmQ0LTQwNjMtODRhOC1hNmI3N2M0NzBiY2UvY2E1NzhlODItYmY0YS0z
YzYwLWJjMWMtMTE4ZjczYjdhMGJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzM2NDAxNWEtY2JkNC00MDYzLTg0
YTgtYTZiNzdjNDcwYmNlLzMzNjQwMTVhLWNiZDQtNDA2My04NGE4LWE2Yjc3YzQ3
MGJjZS5jcmwwHwYDVR0jBBgwFoAUIssmEcrAfQHeWFmU/FP/ecg0SJ4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8zMzY0MDE1YS1jYmQ0LTQwNjMtODRhOC1hNmI3
N2M0NzBiY2UuY2VyMEQGCCsGAQUFBwEHAQH/BDUwMzAgBAIAATAaAwQBwB7yMAwD
BALGhzQDBALGhzgDBAHY+v4wDwQCAAIwCQMHACYC/bcAATBUBgNVHSABAf8ESjBI
MEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0
L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB03sJT
oeUmjPTZFZrcD4/2vdWcQ5LO7MOwOCp+Wju170u8VrqC4hUuorJP42rO4hK1cADf
FfU3cY/4gwSM8BlDCoX7uiE1fev0+gFrHx5+iZOhSfZHedFVnuhNSJeyOoq3v4af
rgp6h9Jru4/bjEx9S0CyK6fUcsUy8iJ8vgo9wjbT73xcMwgdhTC6cF/XfZAgWQrx
HgD2NCckVsLolvMgyPsFo8npN6LeAMm6+JeLED1qMe/tVN/gQpnnDNw3nZmxSAaj
LsPCCUSEIlfpZQJnDESLsXI7WewOTJ82ULsA8b/eMAZXpYxdBG6UV604IWvXYcjw
wOl4RU9veIgYZQK3
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:38:38 2025 by rpki-client