Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS5650.roa
File: AS5650.roa (raw, json)
Hash identifier: zCkJd0nwOLDgq8sFujjxz5St2ATwzusdSzhtplM4fpA=
Subject key identifier: DA:E3:E6:E1:30:2D:D4:58:39:E2:7C:E3:88:6E:DF:67:07:AF:1A:DB
Certificate issuer: /CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Certificate serial: 2E4E83D6799EA4620B96DD4840E43A3DC7EB6566
Authority key identifier: CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS5650.roa
Signing time: Tue 25 Mar 2025 13:22:01 +0000
ROA not before: Tue 25 Mar 2025 13:17:01 +0000
ROA not after: Tue 24 Mar 2026 13:22:01 +0000
asID: 5650
IP address blocks: 45.52.0.0/15 maxlen: 15
45.52.185.0/24 maxlen: 24
50.32.0.0/15 maxlen: 15
50.32.0.0/17 maxlen: 17
50.32.128.0/17 maxlen: 17
50.33.0.0/18 maxlen: 18
50.33.64.0/19 maxlen: 19
50.33.96.0/20 maxlen: 20
50.33.98.0/23 maxlen: 23
50.33.112.0/20 maxlen: 20
50.33.128.0/18 maxlen: 18
50.33.192.0/18 maxlen: 18
50.36.0.0/18 maxlen: 18
50.36.64.0/18 maxlen: 18
50.36.128.0/19 maxlen: 19
50.36.160.0/19 maxlen: 19
50.36.192.0/19 maxlen: 19
50.36.224.0/19 maxlen: 19
50.37.0.0/19 maxlen: 19
50.37.32.0/19 maxlen: 19
50.38.128.0/17 maxlen: 17
50.39.0.0/19 maxlen: 19
50.39.32.0/19 maxlen: 19
50.40.0.0/16 maxlen: 16
50.41.0.0/16 maxlen: 16
50.42.0.0/19 maxlen: 19
50.42.32.0/19 maxlen: 19
50.42.64.0/18 maxlen: 18
50.42.93.0/24 maxlen: 24
50.42.128.0/18 maxlen: 18
50.42.192.0/18 maxlen: 18
50.43.128.0/17 maxlen: 17
50.44.0.0/16 maxlen: 16
50.45.0.0/17 maxlen: 17
50.48.0.0/14 maxlen: 14
50.48.0.0/15 maxlen: 15
50.50.0.0/16 maxlen: 16
50.51.0.0/16 maxlen: 16
50.52.128.0/17 maxlen: 17
50.54.0.0/17 maxlen: 17
50.55.0.0/16 maxlen: 16
50.55.32.0/19 maxlen: 19
50.55.128.0/17 maxlen: 17
50.102.0.0/15 maxlen: 15
50.104.0.0/15 maxlen: 15
50.104.0.0/17 maxlen: 17
50.104.128.0/17 maxlen: 17
50.105.0.0/18 maxlen: 18
50.105.64.0/18 maxlen: 18
50.105.128.0/17 maxlen: 17
50.106.64.0/18 maxlen: 18
50.106.128.0/18 maxlen: 18
50.106.192.0/18 maxlen: 18
50.107.0.0/20 maxlen: 20
50.107.16.0/21 maxlen: 21
50.107.32.0/20 maxlen: 20
50.107.48.0/20 maxlen: 20
50.107.64.0/18 maxlen: 18
50.107.128.0/17 maxlen: 17
50.108.0.0/18 maxlen: 18
50.108.64.0/18 maxlen: 18
50.108.128.0/17 maxlen: 17
50.109.0.0/17 maxlen: 17
50.109.128.0/18 maxlen: 18
50.109.192.0/19 maxlen: 19
50.110.0.0/16 maxlen: 16
50.111.0.0/16 maxlen: 16
50.120.0.0/18 maxlen: 18
50.120.96.0/19 maxlen: 19
50.120.128.0/17 maxlen: 17
50.120.128.0/19 maxlen: 19
50.120.160.0/19 maxlen: 19
50.120.192.0/19 maxlen: 19
50.120.224.0/19 maxlen: 19
50.121.0.0/16 maxlen: 16
50.121.0.0/17 maxlen: 17
50.121.128.0/17 maxlen: 17
50.122.0.0/16 maxlen: 16
50.122.0.0/18 maxlen: 18
50.122.64.0/19 maxlen: 19
50.122.96.0/19 maxlen: 19
50.122.128.0/17 maxlen: 17
50.123.0.0/18 maxlen: 18
50.123.128.0/18 maxlen: 18
50.123.192.0/18 maxlen: 18
50.124.0.0/18 maxlen: 18
50.124.64.0/19 maxlen: 19
50.124.96.0/19 maxlen: 19
50.124.128.0/18 maxlen: 18
50.124.192.0/19 maxlen: 19
50.124.202.0/24 maxlen: 24
50.124.224.0/19 maxlen: 19
50.126.0.0/19 maxlen: 19
50.126.32.0/19 maxlen: 19
50.126.128.0/18 maxlen: 18
50.126.192.0/18 maxlen: 18
50.127.0.0/17 maxlen: 17
50.127.128.0/18 maxlen: 18
50.127.192.0/19 maxlen: 19
50.127.224.0/19 maxlen: 19
65.37.0.0/17 maxlen: 17
65.73.0.0/16 maxlen: 16
66.133.128.0/18 maxlen: 18
66.133.171.0/24 maxlen: 24
70.100.0.0/15 maxlen: 15
74.32.0.0/12 maxlen: 12
74.36.112.0/20 maxlen: 20
74.36.136.0/21 maxlen: 21
74.37.24.0/24 maxlen: 24
74.39.33.0/24 maxlen: 24
74.39.44.0/22 maxlen: 22
74.39.188.0/24 maxlen: 24
74.40.66.0/24 maxlen: 24
74.42.128.0/20 maxlen: 20
74.43.114.0/24 maxlen: 24
74.43.219.0/24 maxlen: 24
74.44.208.0/21 maxlen: 21
74.45.1.0/24 maxlen: 24
74.45.32.0/19 maxlen: 19
74.45.99.0/24 maxlen: 24
74.45.231.0/24 maxlen: 24
74.45.243.0/24 maxlen: 24
74.45.244.0/24 maxlen: 24
74.45.245.0/24 maxlen: 24
74.46.46.0/23 maxlen: 23
74.46.252.0/22 maxlen: 22
104.169.0.0/16 maxlen: 16
104.235.0.0/16 maxlen: 16
104.240.0.0/16 maxlen: 16
170.215.0.0/16 maxlen: 16
170.215.71.0/24 maxlen: 24
170.215.75.0/24 maxlen: 24
172.76.0.0/14 maxlen: 14
173.84.0.0/14 maxlen: 14
173.84.12.0/24 maxlen: 24
173.84.14.0/24 maxlen: 24
173.85.0.0/20 maxlen: 20
173.86.76.0/22 maxlen: 22
173.86.198.0/23 maxlen: 23
173.86.225.0/24 maxlen: 24
173.87.28.0/22 maxlen: 22
173.87.176.0/20 maxlen: 20
184.8.0.0/13 maxlen: 13
184.8.228.0/22 maxlen: 22
184.9.28.0/24 maxlen: 24
184.10.176.0/20 maxlen: 20
184.12.6.0/24 maxlen: 24
184.12.136.0/22 maxlen: 22
184.16.0.0/14 maxlen: 14
192.182.0.0/17 maxlen: 17
192.182.0.0/18 maxlen: 18
192.182.64.0/18 maxlen: 18
192.182.160.0/19 maxlen: 19
192.182.192.0/19 maxlen: 19
192.182.224.0/19 maxlen: 19
192.183.0.0/18 maxlen: 18
192.183.64.0/18 maxlen: 18
192.183.128.0/19 maxlen: 19
192.183.224.0/19 maxlen: 19
209.177.112.0/20 maxlen: 20
216.67.192.0/19 maxlen: 19
2001:1960::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:4e:83:d6:79:9e:a4:62:0b:96:dd:48:40:e4:3a:3d:c7:eb:65:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Validity
Not Before: Mar 25 13:17:01 2025 GMT
Not After : Mar 24 13:22:01 2026 GMT
Subject: CN=DAE3E6E1302DD45839E27CE3886EDF6707AF1ADB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:19:4e:36:c6:cc:d7:11:32:db:bb:41:b4:ce:
34:a0:8d:83:1b:b5:f7:c2:31:0e:25:96:f6:6d:55:
ed:ea:c6:72:9e:6c:cf:9b:b6:81:35:68:dc:4e:82:
54:0a:d9:a6:2b:02:b5:af:f8:23:b7:28:08:2a:f6:
f2:5c:b3:e0:8b:83:5a:93:8b:c1:81:23:21:d7:6e:
25:03:0f:c0:fd:b6:a5:2b:a7:23:8b:3a:7a:f5:19:
60:8b:b3:34:5d:2e:25:cc:64:57:28:5d:83:3b:a9:
ac:a6:15:6d:cc:2d:b8:78:6b:3d:9b:05:81:75:2e:
32:f2:10:c9:92:1c:8a:43:1c:3b:92:94:2b:28:f2:
b4:a4:69:ca:60:af:fa:7c:77:03:25:68:f2:86:46:
13:c4:5d:6f:43:39:49:b8:8d:c9:3d:af:ad:7b:87:
7d:de:43:18:46:1d:72:2e:1e:75:54:a2:0c:11:54:
1d:40:9d:5d:6d:06:a9:e5:cd:5b:d6:a1:a7:88:49:
2b:0c:c7:2f:86:58:ea:ce:cf:d1:e2:3e:a8:e6:e8:
e2:3f:4b:aa:13:e6:a3:ce:a5:eb:b8:d0:af:da:85:
90:41:1f:b6:8c:37:c2:3e:a1:68:a5:ea:b3:86:20:
d9:87:4a:5e:e5:91:4d:4a:23:68:e9:10:d1:1a:c7:
7d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:E3:E6:E1:30:2D:D4:58:39:E2:7C:E3:88:6E:DF:67:07:AF:1A:DB
X509v3 Authority Key Identifier:
keyid:CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS5650.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.52.0.0/15
50.32.0.0/15
50.36.0.0-50.37.63.255
50.38.128.0-50.39.63.255
50.40.0.0-50.42.255.255
50.43.128.0-50.45.127.255
50.48.0.0/14
50.52.128.0/17
50.54.0.0/17
50.55.0.0/16
50.102.0.0-50.105.255.255
50.106.64.0-50.107.23.255
50.107.32.0-50.109.223.255
50.110.0.0/15
50.120.0.0/18
50.120.96.0-50.123.63.255
50.123.128.0-50.124.255.255
50.126.0.0/18
50.126.128.0-50.127.255.255
65.37.0.0/17
65.73.0.0/16
66.133.128.0/18
70.100.0.0/15
74.32.0.0/12
104.169.0.0/16
104.235.0.0/16
104.240.0.0/16
170.215.0.0/16
172.76.0.0/14
173.84.0.0/14
184.8.0.0-184.19.255.255
192.182.0.0/17
192.182.160.0-192.183.159.255
192.183.224.0/19
209.177.112.0/20
216.67.192.0/19
IPv6:
2001:1960::/32
Signature Algorithm: sha256WithRSAEncryption
21:12:93:01:a5:8f:1b:f9:9b:8b:db:2e:58:de:7a:a6:08:b5:
df:91:7d:f5:27:67:2d:a5:8e:6c:09:ba:e3:bb:7d:96:e0:be:
d1:27:19:65:6a:a7:c1:d5:eb:10:c4:90:a8:c7:ab:45:1b:b8:
f2:ea:82:bd:2d:fd:a0:8d:a7:f8:72:f5:c7:64:65:49:21:05:
bf:15:c8:6c:88:db:a2:c8:aa:7e:e1:ff:d1:b3:15:1a:c8:19:
8e:34:26:ab:7f:9e:ac:19:b3:2f:54:13:8b:00:4f:a1:06:25:
54:46:0f:cf:4b:80:6c:5b:0f:be:99:cc:43:a1:d7:e1:92:04:
e3:4d:68:56:06:f5:9c:e5:b3:c2:fa:10:4f:51:6d:ef:4a:a0:
e9:a6:bd:38:07:1e:e2:2f:8e:be:c1:88:69:cd:eb:80:a9:50:
fe:37:c6:87:c7:40:36:18:8a:98:e6:9e:79:47:3f:6a:e1:82:
5f:17:c2:ec:a8:f3:82:fa:10:d6:cc:75:d6:d6:66:cd:da:d4:
e1:9b:84:5c:46:ad:2d:a5:4e:b5:8b:c4:57:a1:89:e6:b9:f7:
90:de:f0:06:3c:24:c1:e7:e8:cc:93:93:a3:50:e1:81:9c:47:
29:df:b9:c6:63:8b:32:c3:40:41:8a:1c:57:fa:66:2b:77:a1:
04:9b:d8:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:57:35 2025 by rpki-client