Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bfbc46f-3c48-4406-ba8c-a423b906a63e/065ac7bb-bf21-3a5a-847d-e97aa48db175.roa
File: 065ac7bb-bf21-3a5a-847d-e97aa48db175.roa (raw, json)
Hash identifier: ZyS8vndQg18T4I6i30PCkb/FjZ2EAXrb1uzkSaigWYI=
Subject key identifier: CC:87:81:51:DE:44:AE:94:50:4A:38:77:16:25:5D:6A:5B:B7:4A:14
Certificate issuer: /CN=1bfbc46f-3c48-4406-ba8c-a423b906a63e
Certificate serial: 010D0C9F43285848E9CBCF32E161BED2839CA480
Authority key identifier: 46:5D:03:13:67:9C:B3:F8:AC:69:42:A1:7C:9B:B7:86:4A:DB:F6:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bfbc46f-3c48-4406-ba8c-a423b906a63e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bfbc46f-3c48-4406-ba8c-a423b906a63e/065ac7bb-bf21-3a5a-847d-e97aa48db175.roa
Signing time: Mon 17 Feb 2025 14:00:52 +0000
ROA not before: Mon 17 Feb 2025 14:00:52 +0000
ROA not after: Sun 18 May 2025 13:00:52 +0000
asID: 13427
IP address blocks: 137.83.103.0/24 maxlen: 24
173.243.64.0/20 maxlen: 20
192.96.17.0/24 maxlen: 24
192.156.255.0/24 maxlen: 24
198.153.60.0/22 maxlen: 22
2604:8d80::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e9:cb:cf:32:e1:61:be:d2:83:9c:a4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bfbc46f-3c48-4406-ba8c-a423b906a63e
Validity
Not Before: Feb 17 14:00:52 2025 GMT
Not After : May 18 13:00:52 2025 GMT
Subject: CN=0328af88-791e-4d7f-862b-5030983fba06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:3f:02:ec:6d:f6:08:46:43:76:09:41:e7:54:
9f:9e:09:09:3c:59:fd:b9:b0:0e:e7:54:f9:50:e6:
37:c5:df:02:b3:9d:54:8b:cc:f8:15:67:a2:4b:b3:
d9:6d:78:85:d4:ca:2a:c7:5d:3c:1f:2c:d9:f2:10:
90:db:54:2b:94:1c:2a:2c:18:75:81:0d:eb:5e:83:
00:14:eb:17:c9:07:d3:c9:36:88:7a:96:5d:57:1e:
4f:37:05:b5:43:71:c2:9f:1d:2c:ae:60:e2:56:8b:
1e:be:bf:91:7e:f3:7d:60:1e:e0:22:74:9a:a3:3c:
3b:75:f9:46:76:8c:5e:fa:8b:3a:71:5a:f7:33:e0:
bf:5a:55:5e:e3:82:04:69:a5:80:95:34:26:7d:2c:
c1:d7:ea:19:2d:8d:59:5b:b1:4d:3c:a3:52:dc:8f:
38:95:7c:23:8c:d6:64:91:7e:62:4d:70:45:6e:e7:
92:ef:9d:44:67:13:3a:23:63:1f:82:2f:17:c4:1e:
c6:35:6d:36:77:70:e1:85:c7:cd:4f:ed:02:0b:69:
8c:da:91:40:90:51:ba:ac:91:6f:c4:45:68:7c:f4:
f7:da:5d:e7:3c:bd:f8:e7:73:4f:1d:bf:29:de:59:
23:5c:5c:2c:aa:89:94:11:81:fe:17:bb:d7:14:f9:
19:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:87:81:51:DE:44:AE:94:50:4A:38:77:16:25:5D:6A:5B:B7:4A:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bfbc46f-3c48-4406-ba8c-a423b906a63e/065ac7bb-bf21-3a5a-847d-e97aa48db175.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bfbc46f-3c48-4406-ba8c-a423b906a63e/1bfbc46f-3c48-4406-ba8c-a423b906a63e.crl
X509v3 Authority Key Identifier:
keyid:46:5D:03:13:67:9C:B3:F8:AC:69:42:A1:7C:9B:B7:86:4A:DB:F6:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bfbc46f-3c48-4406-ba8c-a423b906a63e.cer
sbgp-ipAddrBlock: critical
IPv4:
137.83.103.0/24
173.243.64.0/20
192.96.17.0/24
192.156.255.0/24
198.153.60.0/22
IPv6:
2604:8d80::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b9:ce:e8:99:17:ae:44:25:f9:3e:53:11:c2:bf:a2:9c:c7:3f:
98:20:5e:8d:bb:c3:1f:06:48:12:49:14:0a:00:a7:67:69:15:
db:c2:b1:8d:99:22:35:6e:17:15:1d:04:75:41:75:fc:e9:b6:
30:fb:8c:eb:0b:a6:f2:02:50:bf:de:94:99:10:78:14:46:66:
9e:b5:f2:4e:07:cf:3b:cd:cf:c9:24:d3:af:f7:24:ca:9c:2e:
6e:90:ca:1d:3f:69:81:dc:bb:5a:06:bb:12:e3:41:94:13:06:
39:8a:ab:27:38:63:6e:08:cf:1a:97:cc:10:88:f2:1b:af:33:
e0:78:1f:b6:ff:df:c6:ad:2e:09:b3:a0:aa:93:50:21:39:b7:
1e:33:46:11:73:79:87:51:f2:4b:3a:31:80:bb:b2:d6:9b:18:
6a:fa:6c:f4:ca:09:d9:27:fb:6c:26:a7:54:ea:8e:47:df:e4:
95:34:eb:ec:3a:f5:fc:97:5d:19:0f:5b:9a:6a:e3:77:5f:da:
33:86:97:e0:71:b2:ed:dd:fa:1c:02:9e:1d:02:79:50:77:21:
0c:01:05:7a:a9:30:00:86:72:34:8c:0d:c0:95:7c:dd:0a:15:
1f:67:37:19:14:c6:91:4d:a5:76:03:44:02:55:a8:d9:2e:c8:
dc:00:35:1b
-----BEGIN CERTIFICATE-----
MIIGajCCBVKgAwIBAgIUAQ0Mn0MoWEjpy88y4WG+0oOcpIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWJmYmM0NmYtM2M0OC00NDA2LWJhOGMtYTQyM2I5MDZh
NjNlMB4XDTI1MDIxNzE0MDA1MloXDTI1MDUxODEzMDA1MlowLzEtMCsGA1UEAxMk
MDMyOGFmODgtNzkxZS00ZDdmLTg2MmItNTAzMDk4M2ZiYTA2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkD8C7G32CEZDdglB51SfngkJPFn9ubAO51T5
UOY3xd8Cs51Ui8z4FWeiS7PZbXiF1Moqx108HyzZ8hCQ21QrlBwqLBh1gQ3rXoMA
FOsXyQfTyTaIepZdVx5PNwW1Q3HCnx0srmDiVosevr+RfvN9YB7gInSaozw7dflG
doxe+os6cVr3M+C/WlVe44IEaaWAlTQmfSzB1+oZLY1ZW7FNPKNS3I84lXwjjNZk
kX5iTXBFbueS751EZxM6I2Mfgi8XxB7GNW02d3DhhcfNT+0CC2mM2pFAkFG6rJFv
xEVofPT32l3nPL3453NPHb8p3lkjXFwsqomUEYH+F7vXFPkZFwIDAQABo4IDfDCC
A3gwHQYDVR0OBBYEFMyHgVHeRK6UUEo4dxYlXWpbt0oUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmZi
YzQ2Zi0zYzQ4LTQ0MDYtYmE4Yy1hNDIzYjkwNmE2M2UvMDY1YWM3YmItYmYyMS0z
YTVhLTg0N2QtZTk3YWE0OGRiMTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMWJmYmM0NmYtM2M0OC00NDA2LWJh
OGMtYTQyM2I5MDZhNjNlLzFiZmJjNDZmLTNjNDgtNDQwNi1iYThjLWE0MjNiOTA2
YTYzZS5jcmwwHwYDVR0jBBgwFoAURl0DE2ecs/isaUKhfJu3hkrb9skwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmZiYzQ2Zi0zYzQ4LTQ0MDYtYmE4Yy1hNDIz
YjkwNmE2M2UuY2VyMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQAiVNnAwQE
rfNAAwQAwGARAwQAwJz/AwQCxpk8MA0EAgACMAcDBQAmBI2AMFQGA1UdIAEB/wRK
MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u
ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBALnO
6JkXrkQl+T5TEcK/opzHP5ggXo27wx8GSBJJFAoAp2dpFdvCsY2ZIjVuFxUdBHVB
dfzptjD7jOsLpvICUL/elJkQeBRGZp618k4HzzvNz8kk06/3JMqcLm6Qyh0/aYHc
u1oGuxLjQZQTBjmKqyc4Y24IzxqXzBCI8huvM+B4H7b/38atLgmzoKqTUCE5tx4z
RhFzeYdR8ks6MYC7stabGGr6bPTKCdkn+2wmp1Tqjkff5JU06+w69fyXXRkPW5pq
43df2jOGl+Bxsu3d+hwCnh0CeVB3IQwBBXqpMACGcjSMDcCVfN0KFR9nNxkUxpFN
pXYDRAJVqNkuyNwANRs=
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:40:12 2025 by rpki-client