Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/a526353f-2ddc-3457-bc41-da1cd1cc0f3c.roa
File: a526353f-2ddc-3457-bc41-da1cd1cc0f3c.roa (raw, json)
Hash identifier: sy/AO7oOEdnQt/VkONpYSL+mg/ZhIrOn9t0BwW6GCSk=
Subject key identifier: EC:1D:43:7A:45:82:73:33:68:18:C3:EC:18:25:79:C5:D8:DD:E5:0E
Certificate issuer: /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
Certificate serial: 010D0C9F43285848EC96AED558B4D52472F9D8C0
Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/a526353f-2ddc-3457-bc41-da1cd1cc0f3c.roa
Signing time: Tue 18 Feb 2025 14:00:52 +0000
ROA not before: Tue 18 Feb 2025 14:00:52 +0000
ROA not after: Mon 19 May 2025 13:00:52 +0000
asID: 17378
IP address blocks: 208.69.108.0/22 maxlen: 24
208.88.240.0/22 maxlen: 24
209.59.0.0/19 maxlen: 24
209.92.7.0/24 maxlen: 24
209.92.39.0/24 maxlen: 24
209.92.44.0/24 maxlen: 24
209.92.53.0/24 maxlen: 24
209.92.56.0/24 maxlen: 24
209.92.62.0/24 maxlen: 24
209.92.68.0/24 maxlen: 24
209.92.70.0/23 maxlen: 24
209.92.74.0/23 maxlen: 24
209.92.79.0/24 maxlen: 24
209.92.88.0/24 maxlen: 24
209.92.90.0/23 maxlen: 24
209.92.137.0/24 maxlen: 24
209.92.224.0/21 maxlen: 24
209.177.16.0/22 maxlen: 24
216.27.0.0/18 maxlen: 24
216.27.64.0/19 maxlen: 24
216.46.48.0/20 maxlen: 24
216.48.112.0/20 maxlen: 24
216.58.224.0/19 maxlen: 24
216.150.128.0/19 maxlen: 24
216.182.80.0/20 maxlen: 24
216.211.128.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ec:96:ae:d5:58:b4:d5:24:72:f9:d8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
Validity
Not Before: Feb 18 14:00:52 2025 GMT
Not After : May 19 13:00:52 2025 GMT
Subject: CN=3a09f419-287a-4396-b266-f89591895380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:dc:04:31:a3:25:cf:51:6f:ad:51:1f:a6:73:
9b:37:bc:45:e8:47:09:1d:3e:5e:ef:58:ac:98:d7:
d3:60:72:a3:19:fd:ce:a3:83:f7:ba:9c:7f:a3:5b:
81:f3:4a:48:4a:5b:8a:02:62:6f:6b:83:57:95:a2:
2a:c4:43:3f:e3:3f:a2:79:8b:1a:03:d4:a3:63:fb:
76:8c:d6:72:5d:51:71:7a:56:18:b0:74:04:49:a9:
ee:78:aa:6b:7a:41:96:28:3b:13:70:67:ac:da:c9:
22:ce:ea:14:86:f9:90:f3:b1:c9:8a:5b:f6:53:a2:
13:02:aa:4f:f5:09:c4:07:ef:b7:50:29:47:9c:09:
f0:fe:a0:3a:2e:92:85:de:7f:0b:c2:33:97:44:1d:
4c:35:70:47:18:d7:81:95:66:b4:af:46:82:cb:f1:
3b:27:fa:cd:38:03:bd:ea:91:00:73:d3:e5:57:69:
cf:b7:50:20:33:5f:d3:2a:6f:b9:d3:25:e5:7c:6d:
82:6b:b6:1c:f3:26:df:9e:60:f3:de:49:87:79:53:
5f:42:9d:9b:42:94:b7:7f:9c:7a:90:18:1e:4f:42:
42:7a:d6:a4:57:62:80:62:e5:83:08:e9:03:99:0d:
32:ff:33:56:c5:a1:11:e6:82:4c:b6:d6:57:f9:6a:
8e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:1D:43:7A:45:82:73:33:68:18:C3:EC:18:25:79:C5:D8:DD:E5:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/a526353f-2ddc-3457-bc41-da1cd1cc0f3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl
X509v3 Authority Key Identifier:
keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
sbgp-ipAddrBlock: critical
IPv4:
208.69.108.0/22
208.88.240.0/22
209.59.0.0/19
209.92.7.0/24
209.92.39.0/24
209.92.44.0/24
209.92.53.0/24
209.92.56.0/24
209.92.62.0/24
209.92.68.0/24
209.92.70.0/23
209.92.74.0/23
209.92.79.0/24
209.92.88.0/24
209.92.90.0/23
209.92.137.0/24
209.92.224.0/21
209.177.16.0/22
216.27.0.0-216.27.95.255
216.46.48.0/20
216.48.112.0/20
216.58.224.0/19
216.150.128.0/19
216.182.80.0/20
216.211.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:a6:4d:d6:ad:72:e2:30:b8:93:68:44:3e:20:d9:9c:2e:af:
fe:87:8f:dc:93:36:bd:38:a0:73:66:e2:9c:f0:3e:4b:e0:53:
91:cd:ce:87:d1:a8:ad:45:bd:4c:f3:c0:df:94:75:f9:16:5f:
d7:a4:9a:0c:4e:c4:dd:49:c5:03:f1:58:28:41:92:2e:15:96:
92:3e:e7:f9:2a:56:0a:78:59:44:a4:bd:64:30:81:b6:82:c5:
3c:a3:10:af:61:52:34:93:f1:18:e4:e4:8d:bc:fe:a1:65:20:
aa:f3:a9:3b:b9:9c:64:9d:bc:44:8e:43:46:f8:15:80:ea:c5:
55:8f:8c:9f:8c:d0:90:9b:ed:9c:1b:81:69:ba:fc:9f:6c:50:
ba:14:b6:20:00:eb:01:a0:2a:7e:08:d0:cf:3c:24:1d:81:e0:
f4:f7:9c:3e:9c:a4:2e:aa:07:80:f7:7b:fc:06:9f:6a:e5:7e:
26:d5:cf:c3:82:d6:20:77:d3:45:f3:25:61:dd:cb:24:e8:0c:
7b:af:7a:82:69:95:65:ee:b2:5b:11:af:17:a4:b9:68:d1:d4:
14:56:db:2d:12:c9:f6:46:92:38:96:5d:0e:25:87:15:ba:7e:
38:b2:94:69:10:de:cb:c8:3e:5a:28:66:57:57:08:78:d1:60:
9e:d4:1c:f5
-----BEGIN CERTIFICATE-----
MIIG3zCCBcegAwIBAgIUAQ0Mn0MoWEjslq7VWLTVJHL52MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWRkOGJlOGEtYmVhZC00ZDViLWE4MTgtNGQxNDgyZjQ3
OWZmMB4XDTI1MDIxODE0MDA1MloXDTI1MDUxOTEzMDA1MlowLzEtMCsGA1UEAxMk
M2EwOWY0MTktMjg3YS00Mzk2LWIyNjYtZjg5NTkxODk1MzgwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdwEMaMlz1FvrVEfpnObN7xF6EcJHT5e71is
mNfTYHKjGf3Oo4P3upx/o1uB80pISluKAmJva4NXlaIqxEM/4z+ieYsaA9SjY/t2
jNZyXVFxelYYsHQESanueKprekGWKDsTcGes2skizuoUhvmQ87HJilv2U6ITAqpP
9QnEB++3UClHnAnw/qA6LpKF3n8LwjOXRB1MNXBHGNeBlWa0r0aCy/E7J/rNOAO9
6pEAc9PlV2nPt1AgM1/TKm+50yXlfG2Ca7Yc8ybfnmDz3kmHeVNfQp2bQpS3f5x6
kBgeT0JCetakV2KAYuWDCOkDmQ0y/zNWxaER5oJMttZX+WqOqwIDAQABo4ID8TCC
A+0wHQYDVR0OBBYEFOwdQ3pFgnMzaBjD7BglecXY3eUOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4
YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0ODJmNDc5ZmYvYTUyNjM1M2YtMmRkYy0z
NDU3LWJjNDEtZGExY2QxY2MwZjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWRkOGJlOGEtYmVhZC00ZDViLWE4
MTgtNGQxNDgyZjQ3OWZmLzFkZDhiZThhLWJlYWQtNGQ1Yi1hODE4LTRkMTQ4MmY0
NzlmZi5jcmwwHwYDVR0jBBgwFoAU4yhAhJRGSB1vsr1QLE5krzJWszcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0
ODJmNDc5ZmYuY2VyMIG6BggrBgEFBQcBBwEB/wSBqjCBpzCBpAQCAAEwgZ0DBALQ
RWwDBALQWPADBAXROwADBADRXAcDBADRXCcDBADRXCwDBADRXDUDBADRXDgDBADR
XD4DBADRXEQDBAHRXEYDBAHRXEoDBADRXE8DBADRXFgDBAHRXFoDBADRXIkDBAPR
XOADBALRsRAwCwMDANgbAwQF2BtAAwQE2C4wAwQE2DBwAwQF2DrgAwQF2JaAAwQE
2LZQAwQE2NOAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAGSmTdatcuIwuJNoRD4g2Zwur/6Hj9yTNr04oHNm
4pzwPkvgU5HNzofRqK1FvUzzwN+UdfkWX9ekmgxOxN1JxQPxWChBki4VlpI+5/kq
Vgp4WUSkvWQwgbaCxTyjEK9hUjST8Rjk5I28/qFlIKrzqTu5nGSdvESOQ0b4FYDq
xVWPjJ+M0JCb7ZwbgWm6/J9sULoUtiAA6wGgKn4I0M88JB2B4PT3nD6cpC6qB4D3
e/wGn2rlfibVz8OC1iB300XzJWHdyyToDHuveoJplWXuslsRrxekuWjR1BRW2y0S
yfZGkjiWXQ4lhxW6fjiylGkQ3svIPlooZldXCHjRYJ7UHPU=
-----END CERTIFICATE-----
Generated at Sun Apr 6 07:17:57 2025 by rpki-client