Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/efacbaaf-444a-32fb-8ee0-e182bd9e55fb.roa
File: efacbaaf-444a-32fb-8ee0-e182bd9e55fb.roa (raw, json)
Hash identifier: je8vvVgBQKy6709OzARDII+vi2uY9f51hxdqBpMkYk0=
Subject key identifier: 6B:EA:7B:3E:10:44:AC:30:C7:6D:9B:BA:A2:E6:AD:13:F5:81:FD:BD
Certificate issuer: /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
Certificate serial: 010D0C9F432858489340A2E992BF09C225CF7C00
Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/efacbaaf-444a-32fb-8ee0-e182bd9e55fb.roa
Signing time: Fri 17 Jan 2025 14:00:53 +0000
ROA not before: Fri 17 Jan 2025 14:00:53 +0000
ROA not after: Thu 17 Apr 2025 13:00:53 +0000
asID: 6621
IP address blocks: 174.32.76.0/24 maxlen: 24
174.32.81.0/24 maxlen: 24
174.32.92.0/24 maxlen: 24
174.32.107.0/24 maxlen: 24
174.32.108.0/22 maxlen: 22
174.32.112.0/20 maxlen: 20
174.32.129.0/24 maxlen: 24
174.32.130.0/23 maxlen: 23
174.32.133.0/24 maxlen: 24
174.32.134.0/23 maxlen: 23
174.32.136.0/21 maxlen: 21
174.32.144.0/23 maxlen: 23
174.32.160.0/22 maxlen: 22
174.32.164.0/22 maxlen: 22
174.32.168.0/22 maxlen: 22
174.32.172.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:93:40:a2:e9:92:bf:09:c2:25:cf:7c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
Validity
Not Before: Jan 17 14:00:53 2025 GMT
Not After : Apr 17 13:00:53 2025 GMT
Subject: CN=d488de8f-e777-42cd-9d67-ade6c785f7ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:47:e0:60:65:3d:d3:df:3b:9a:5a:0b:2a:4c:
09:b1:85:06:b0:1d:34:a6:97:6a:b6:7b:f2:52:8a:
16:fd:be:2d:c6:f0:b2:88:ac:68:31:0b:3f:ef:23:
d0:ba:65:4b:b7:cb:5b:5a:46:56:5d:bd:f4:7e:cf:
e2:dd:07:b7:69:93:cc:cf:0c:1c:36:6e:b7:8a:29:
a0:bf:30:81:3b:12:aa:ed:27:0b:81:56:ca:4a:a5:
ed:42:96:2a:26:a8:48:be:ff:7b:42:6c:9f:66:63:
ef:26:5c:e0:5e:cc:42:39:42:7c:9f:c0:e1:c0:88:
fb:82:59:a9:a3:2b:4c:5e:1d:c5:6b:cd:f1:8e:9e:
01:16:8b:b2:63:fb:01:71:a4:5d:69:66:5e:76:54:
4d:5b:84:7a:78:ad:fb:70:c3:f6:f0:55:4a:be:cb:
1f:45:63:29:86:32:af:64:fd:5a:84:0b:59:56:a2:
c1:68:06:bc:c0:a2:41:83:01:9e:fe:d1:17:80:0e:
6e:1a:8d:98:ee:38:0d:5b:ed:1d:6a:ed:c6:d7:e4:
9e:6d:91:6a:a9:ec:ef:0c:b8:33:54:a3:ee:7b:36:
c0:92:53:53:29:80:08:3a:21:ad:94:64:11:49:f3:
03:58:f6:9d:29:70:59:94:a9:a7:b9:32:17:7b:c7:
47:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:EA:7B:3E:10:44:AC:30:C7:6D:9B:BA:A2:E6:AD:13:F5:81:FD:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/efacbaaf-444a-32fb-8ee0-e182bd9e55fb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl
X509v3 Authority Key Identifier:
keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
sbgp-ipAddrBlock: critical
IPv4:
174.32.76.0/24
174.32.81.0/24
174.32.92.0/24
174.32.107.0-174.32.127.255
174.32.129.0-174.32.131.255
174.32.133.0-174.32.145.255
174.32.160.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:45:1b:9a:12:b2:8d:01:a9:a5:63:66:6e:bb:61:36:95:03:
1a:3b:a0:1c:cc:fc:75:d0:0f:88:32:06:cb:94:07:be:ab:04:
27:9f:69:1f:9a:9e:d0:76:72:bd:d8:85:dc:dd:d6:a8:86:2b:
bf:3a:b0:c6:1d:19:13:c1:3b:83:b8:58:41:69:8b:8a:bd:96:
7f:66:d6:2f:43:75:e6:29:7e:11:d9:83:1c:65:53:9b:86:75:
e0:9e:c9:bb:02:d8:66:2b:ed:b6:23:bf:31:f1:7e:be:82:1a:
98:2e:e4:80:1c:d1:3f:20:c3:99:99:cd:c3:15:45:00:20:72:
3e:a8:fd:f7:6c:5c:96:bf:6b:fc:fb:7f:84:28:7e:0f:35:7c:
bb:db:9a:d3:5c:a0:0c:26:d5:c1:ba:b8:d6:0a:c2:1a:e5:09:
6e:71:35:30:c2:e3:9e:8c:90:35:35:56:02:e4:eb:e1:42:d2:
9f:94:43:31:db:ce:a9:c3:88:74:9e:b1:bf:dd:e2:d3:44:54:
89:1b:f8:9f:33:50:1c:3d:c6:b9:82:9f:66:8a:b9:fb:5f:ee:
4c:bf:89:ea:96:f9:41:29:6a:8f:69:44:70:e3:bb:c9:55:cd:
37:1f:27:a9:64:c4:98:32:0d:ed:1b:01:72:84:3d:13:47:01:
e1:0b:ef:c0
-----BEGIN CERTIFICATE-----
MIIGfzCCBWegAwIBAgIUAQ0Mn0MoWEiTQKLpkr8JwiXPfAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDFmODg2ZGYtNmM1OC00ZWE3LTlkMWYtMDY1OWUyMzI0
NDYwMB4XDTI1MDExNzE0MDA1M1oXDTI1MDQxNzEzMDA1M1owLzEtMCsGA1UEAxMk
ZDQ4OGRlOGYtZTc3Ny00MmNkLTlkNjctYWRlNmM3ODVmN2FkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUfgYGU90987mloLKkwJsYUGsB00ppdqtnvy
UooW/b4txvCyiKxoMQs/7yPQumVLt8tbWkZWXb30fs/i3Qe3aZPMzwwcNm63iimg
vzCBOxKq7ScLgVbKSqXtQpYqJqhIvv97QmyfZmPvJlzgXsxCOUJ8n8DhwIj7glmp
oytMXh3Fa83xjp4BFouyY/sBcaRdaWZedlRNW4R6eK37cMP28FVKvssfRWMphjKv
ZP1ahAtZVqLBaAa8wKJBgwGe/tEXgA5uGo2Y7jgNW+0dau3G1+SebZFqqezvDLgz
VKPuezbAklNTKYAIOiGtlGQRSfMDWPadKXBZlKmnuTIXe8dHBwIDAQABo4IDkTCC
A40wHQYDVR0OBBYEFGvqez4QRKwwx22buqLmrRP1gf29MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4
ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5ZTIzMjQ0NjAvZWZhY2JhYWYtNDQ0YS0z
MmZiLThlZTAtZTE4MmJkOWU1NWZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDFmODg2ZGYtNmM1OC00ZWE3LTlk
MWYtMDY1OWUyMzI0NDYwL2QxZjg4NmRmLTZjNTgtNGVhNy05ZDFmLTA2NTllMjMy
NDQ2MC5jcmwwHwYDVR0jBBgwFoAU3hZRIFaD1ggT5kJFjv0WcO6Hb7swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5
ZTIzMjQ0NjAuY2VyMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQAriBMAwQA
riBRAwQAriBcMAwDBACuIGsDBAeuIAAwDAMEAK4ggQMEAq4ggDAMAwQAriCFAwQB
riCQAwQEriCgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBADBFG5oSso0BqaVjZm67YTaVAxo7oBzM/HXQD4gy
BsuUB76rBCefaR+antB2cr3Yhdzd1qiGK786sMYdGRPBO4O4WEFpi4q9ln9m1i9D
deYpfhHZgxxlU5uGdeCeybsC2GYr7bYjvzHxfr6CGpgu5IAc0T8gw5mZzcMVRQAg
cj6o/fdsXJa/a/z7f4Qofg81fLvbmtNcoAwm1cG6uNYKwhrlCW5xNTDC456MkDU1
VgLk6+FC0p+UQzHbzqnDiHSesb/d4tNEVIkb+J8zUBw9xrmCn2aKuftf7ky/ieqW
+UEpao9pRHDju8lVzTcfJ6lkxJgyDe0bAXKEPRNHAeEL78A=
-----END CERTIFICATE-----
Generated at Mon Apr 7 15:48:40 2025 by rpki-client