Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/022d0269-7d56-45cc-8167-b1e7ab13f1f4/e986cb99-90f6-3599-9f1f-a52d8d946895.roa
File: e986cb99-90f6-3599-9f1f-a52d8d946895.roa (raw, json)
Hash identifier: pyYoykEAsQJPFIvAveYZqzWju41zQqPgQUQO6Zingag=
Subject key identifier: F8:6F:49:CA:17:D3:D3:98:74:93:8E:F5:6B:38:07:E3:2A:16:13:D2
Certificate issuer: /CN=022d0269-7d56-45cc-8167-b1e7ab13f1f4
Certificate serial: 010D0C9F43285848FA8BEE245939A10FFF137FC0
Authority key identifier: 4E:42:8C:95:8C:2E:77:BF:29:92:4C:43:07:CA:4C:7A:AF:CC:AC:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/022d0269-7d56-45cc-8167-b1e7ab13f1f4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/022d0269-7d56-45cc-8167-b1e7ab13f1f4/e986cb99-90f6-3599-9f1f-a52d8d946895.roa
Signing time: Sun 23 Feb 2025 14:00:51 +0000
ROA not before: Sun 23 Feb 2025 14:00:51 +0000
ROA not after: Sat 24 May 2025 13:00:51 +0000
asID: 13150
IP address blocks: 45.62.176.0/20 maxlen: 24
149.20.192.0/20 maxlen: 24
150.195.192.0/20 maxlen: 24
199.27.32.0/19 maxlen: 24
216.194.96.0/20 maxlen: 24
216.205.112.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fa:8b:ee:24:59:39:a1:0f:ff:13:7f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=022d0269-7d56-45cc-8167-b1e7ab13f1f4
Validity
Not Before: Feb 23 14:00:51 2025 GMT
Not After : May 24 13:00:51 2025 GMT
Subject: CN=bd653cbe-0cdb-4652-b3d2-4e5ed7c8360f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a3:cd:b8:18:d1:9a:64:e1:ba:a2:40:f1:bd:
a9:e9:cf:f0:97:4c:5c:4d:62:d4:95:fd:d9:33:d0:
45:7f:cb:5f:a0:9c:0b:92:33:c3:8e:d8:03:67:e8:
05:5f:97:0d:14:a3:23:6b:61:6a:cc:aa:86:79:67:
52:1e:fc:e6:b1:d8:44:d2:fe:c4:a4:60:be:01:8d:
12:72:3a:22:5d:53:4c:fd:8f:d1:10:41:69:b1:1a:
ec:c7:7f:67:f1:d3:f2:dc:74:04:55:3f:79:dc:b6:
be:69:2f:02:2b:8c:ea:3f:2b:a0:96:9c:03:4f:0b:
21:4e:89:fc:d7:16:93:9b:a2:64:e5:d8:e1:42:bc:
ac:33:6d:6a:87:8b:68:33:58:38:e3:4c:0f:4f:d7:
e6:0e:0b:d5:d9:22:28:91:a2:75:80:35:d9:16:1e:
3d:06:3e:dc:df:b5:84:dd:05:e8:81:35:b5:a8:9b:
ed:da:c9:e8:07:64:71:31:29:73:03:ba:b9:53:4e:
d0:28:09:f4:ba:6a:0f:99:c6:61:3b:8a:fa:f9:33:
e4:83:2e:bf:70:b6:2f:a6:f5:f5:15:2e:5c:a5:92:
61:7a:7f:9a:79:82:70:45:97:71:e2:ae:64:8a:d4:
8b:89:0b:45:9b:bc:40:06:d0:b8:3e:90:aa:c0:ad:
a0:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:6F:49:CA:17:D3:D3:98:74:93:8E:F5:6B:38:07:E3:2A:16:13:D2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/022d0269-7d56-45cc-8167-b1e7ab13f1f4/e986cb99-90f6-3599-9f1f-a52d8d946895.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/022d0269-7d56-45cc-8167-b1e7ab13f1f4/022d0269-7d56-45cc-8167-b1e7ab13f1f4.crl
X509v3 Authority Key Identifier:
keyid:4E:42:8C:95:8C:2E:77:BF:29:92:4C:43:07:CA:4C:7A:AF:CC:AC:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/022d0269-7d56-45cc-8167-b1e7ab13f1f4.cer
sbgp-ipAddrBlock: critical
IPv4:
45.62.176.0/20
149.20.192.0/20
150.195.192.0/20
199.27.32.0/19
216.194.96.0/20
216.205.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:fa:3a:aa:5a:7c:24:11:63:38:cd:c4:fb:a9:00:de:b7:41:
10:9e:51:7c:66:50:9e:5d:8e:aa:cc:98:f7:6a:1b:b9:19:72:
d1:c4:1e:1a:d4:fe:a6:0d:aa:e3:ca:9e:bf:5d:1f:a7:34:35:
de:8b:ad:2b:9a:fa:9b:63:ce:7a:0e:3a:fc:17:e6:05:95:52:
72:59:1f:f1:5f:ec:51:53:d7:29:6a:25:42:ef:0f:89:c6:8b:
b2:a4:ea:5a:71:0a:e7:e0:ae:ff:4b:f6:27:fb:75:18:d1:93:
c2:3d:6b:e4:1a:c6:32:45:c7:e3:77:14:68:ef:b9:76:d8:e3:
88:6e:83:41:7e:f8:fc:6b:85:54:1b:0e:f3:24:d1:b6:76:13:
c3:c7:2e:5c:97:ae:29:1d:a1:10:0f:9b:f4:e1:db:04:ec:99:
e6:cb:ec:1a:0d:75:dd:3e:3a:ae:9b:93:fc:28:31:34:91:0c:
48:1f:53:a9:80:89:4d:23:e9:ac:3f:44:0d:04:41:11:c7:1d:
4c:09:33:92:1f:b5:20:4e:7f:50:9c:73:18:c7:43:48:18:f4:
c1:0f:b2:5a:8d:3b:c2:9f:eb:dc:f9:31:59:c4:cf:a2:e7:ec:
e0:65:ac:7b:bc:cf:7e:ba:dd:9b:bf:24:f8:b3:4b:d6:03:df:
b7:17:24:72
-----BEGIN CERTIFICATE-----
MIIGYTCCBUmgAwIBAgIUAQ0Mn0MoWEj6i+4kWTmhD/8Tf8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDIyZDAyNjktN2Q1Ni00NWNjLTgxNjctYjFlN2FiMTNm
MWY0MB4XDTI1MDIyMzE0MDA1MVoXDTI1MDUyNDEzMDA1MVowLzEtMCsGA1UEAxMk
YmQ2NTNjYmUtMGNkYi00NjUyLWIzZDItNGU1ZWQ3YzgzNjBmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaPNuBjRmmThuqJA8b2p6c/wl0xcTWLUlf3Z
M9BFf8tfoJwLkjPDjtgDZ+gFX5cNFKMja2FqzKqGeWdSHvzmsdhE0v7EpGC+AY0S
cjoiXVNM/Y/REEFpsRrsx39n8dPy3HQEVT953La+aS8CK4zqPyuglpwDTwshTon8
1xaTm6Jk5djhQrysM21qh4toM1g440wPT9fmDgvV2SIokaJ1gDXZFh49Bj7c37WE
3QXogTW1qJvt2snoB2RxMSlzA7q5U07QKAn0umoPmcZhO4r6+TPkgy6/cLYvpvX1
FS5cpZJhen+aeYJwRZdx4q5kitSLiQtFm7xABtC4PpCqwK2gtQIDAQABo4IDczCC
A28wHQYDVR0OBBYEFPhvScoX09OYdJOO9Ws4B+MqFhPSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8wMjJk
MDI2OS03ZDU2LTQ1Y2MtODE2Ny1iMWU3YWIxM2YxZjQvZTk4NmNiOTktOTBmNi0z
NTk5LTlmMWYtYTUyZDhkOTQ2ODk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMDIyZDAyNjktN2Q1Ni00NWNjLTgx
NjctYjFlN2FiMTNmMWY0LzAyMmQwMjY5LTdkNTYtNDVjYy04MTY3LWIxZTdhYjEz
ZjFmNC5jcmwwHwYDVR0jBBgwFoAUTkKMlYwud78pkkxDB8pMeq/MrI8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8wMjJkMDI2OS03ZDU2LTQ1Y2MtODE2Ny1iMWU3
YWIxM2YxZjQuY2VyMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQELT6wAwQE
lRTAAwQElsPAAwQFxxsgAwQE2MJgAwQE2M1wMFQGA1UdIAEB/wRKMEgwRgYIKwYB
BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy
Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAKP6OqpafCQRYzjN
xPupAN63QRCeUXxmUJ5djqrMmPdqG7kZctHEHhrU/qYNquPKnr9dH6c0Nd6LrSua
+ptjznoOOvwX5gWVUnJZH/Ff7FFT1ylqJULvD4nGi7Kk6lpxCufgrv9L9if7dRjR
k8I9a+QaxjJFx+N3FGjvuXbY44hug0F++PxrhVQbDvMk0bZ2E8PHLlyXrikdoRAP
m/Th2wTsmebL7BoNdd0+Oq6bk/woMTSRDEgfU6mAiU0j6aw/RA0EQRHHHUwJM5If
tSBOf1CccxjHQ0gY9MEPslqNO8Kf69z5MVnEz6Ln7OBlrHu8z3663Zu/JPizS9YD
37cXJHI=
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:18:48 2025 by rpki-client