Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/a1511da0-2047-36ce-973f-c8381433105e.roa
File: a1511da0-2047-36ce-973f-c8381433105e.roa (raw, json)
Hash identifier: reSw7C6+Aa3toaw6cFMvMQd1CXd05zNb5EsSkrBNtbw=
Subject key identifier: 96:5F:FD:F1:BE:CF:4E:CE:D7:F7:D3:2D:2B:25:F2:C6:A8:BF:0D:A4
Certificate issuer: /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial: 010D0C9F43285848AF2B76EA31EDE6AB68C3AF80
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/a1511da0-2047-36ce-973f-c8381433105e.roa
Signing time: Mon 27 Jan 2025 14:00:52 +0000
ROA not before: Mon 27 Jan 2025 14:00:52 +0000
ROA not after: Sun 27 Apr 2025 13:00:52 +0000
asID: 6128
IP address blocks: 24.38.0.0/17 maxlen: 24
24.157.32.0/19 maxlen: 24
24.246.96.0/19 maxlen: 24
63.247.160.0/19 maxlen: 24
65.51.0.0/16 maxlen: 24
69.27.224.0/19 maxlen: 24
69.74.0.0/16 maxlen: 24
108.179.0.0/18 maxlen: 24
173.251.0.0/17 maxlen: 24
198.46.96.0/19 maxlen: 24
216.255.96.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:af:2b:76:ea:31:ed:e6:ab:68:c3:af:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Validity
Not Before: Jan 27 14:00:52 2025 GMT
Not After : Apr 27 13:00:52 2025 GMT
Subject: CN=3d7618a1-7f87-46b9-8540-b2a607ab543c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c3:90:91:64:2d:36:fe:65:e7:ae:95:63:9a:
56:57:0a:6d:09:e5:62:8f:1a:ac:b1:1e:bd:e5:37:
69:1b:dd:72:37:43:4b:74:e5:f6:8e:21:9e:5d:ef:
0e:2a:e9:16:07:b2:2e:b2:32:41:ce:c8:b8:3e:b8:
00:17:33:86:77:09:7c:74:a2:df:51:bb:42:67:d6:
34:4b:db:2e:b1:1a:bd:c3:29:f7:03:8e:4d:df:64:
f0:b2:a1:78:29:84:25:fd:3e:ba:61:1a:1c:95:a6:
e1:51:6a:ff:52:c6:ad:ef:d6:03:b6:24:a7:bc:1f:
0e:b1:7b:6b:55:4f:8c:fc:c0:65:43:c0:57:4d:e6:
93:e2:c7:7b:64:b0:92:f0:27:f5:ff:92:12:b4:3a:
db:5d:fd:6c:db:b1:67:0b:65:17:01:13:ce:bf:8f:
d3:ba:c8:c9:c1:7e:7b:57:9f:52:4f:b7:fe:84:71:
6a:d2:e2:c3:88:31:0a:f7:a7:16:f1:a3:cb:4b:d8:
46:92:01:1c:bc:4d:4e:87:70:3d:4d:15:89:e2:d6:
ea:4f:85:b9:2b:d9:2f:a7:79:d8:b3:5d:33:8f:c8:
d2:6c:23:84:47:af:ce:e5:0d:6e:98:f8:3a:ce:b4:
81:ea:12:ef:25:a1:44:01:ad:61:09:78:4a:17:0a:
47:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:5F:FD:F1:BE:CF:4E:CE:D7:F7:D3:2D:2B:25:F2:C6:A8:BF:0D:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/a1511da0-2047-36ce-973f-c8381433105e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
X509v3 Authority Key Identifier:
keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
sbgp-ipAddrBlock: critical
IPv4:
24.38.0.0/17
24.157.32.0/19
24.246.96.0/19
63.247.160.0/19
65.51.0.0/16
69.27.224.0/19
69.74.0.0/16
108.179.0.0/18
173.251.0.0/17
198.46.96.0/19
216.255.96.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:09:6a:c0:77:7d:50:cd:ee:c5:a0:07:68:68:ea:00:2f:39:
11:9a:e2:a8:fc:19:be:6f:63:e7:4b:8d:a5:d8:4c:26:6d:75:
d5:45:b3:39:2f:74:d3:64:aa:6a:a9:07:ee:98:9f:f5:99:aa:
56:cd:de:49:85:63:5b:d0:2b:4a:3d:58:06:5e:20:97:3a:da:
4d:86:f2:a1:fa:61:20:89:8e:1d:e1:2c:28:c8:2d:b3:eb:f0:
12:0b:46:fa:36:89:41:c4:94:ec:a9:11:fe:47:ee:1e:e0:39:
02:c9:f8:7d:9b:41:c3:54:80:d8:f3:b1:84:3f:2a:00:3c:6b:
90:17:de:43:cd:ec:2d:72:0d:0b:d5:30:73:73:04:3f:62:c3:
ea:d7:d1:d9:0b:16:e4:06:03:db:ea:87:05:69:d0:50:4a:e9:
f0:c9:30:d1:de:1f:46:f9:f5:75:2e:0b:af:ba:ff:df:0d:93:
ec:26:92:19:e1:ff:fc:26:1a:e7:10:82:ac:9e:3b:cf:e2:39:
64:f3:ed:fe:09:5e:10:28:99:df:08:3b:40:6e:ac:55:17:36:
19:4d:60:51:40:55:f5:dd:76:a9:77:b0:fd:ea:b0:94:17:84:
35:13:90:ba:0e:ed:58:c9:1d:24:8d:54:45:97:57:f6:f4:63:
41:f8:1f:f3
-----BEGIN CERTIFICATE-----
MIIGfTCCBWWgAwIBAgIUAQ0Mn0MoWEivK3bqMe3mq2jDr4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZThmOGM0MTEtZmE1Yy00MjhjLThhYzEtZTA4ZThhMDBh
ZDE1MB4XDTI1MDEyNzE0MDA1MloXDTI1MDQyNzEzMDA1MlowLzEtMCsGA1UEAxMk
M2Q3NjE4YTEtN2Y4Ny00NmI5LTg1NDAtYjJhNjA3YWI1NDNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMOQkWQtNv5l566VY5pWVwptCeVijxqssR69
5TdpG91yN0NLdOX2jiGeXe8OKukWB7IusjJBzsi4PrgAFzOGdwl8dKLfUbtCZ9Y0
S9susRq9wyn3A45N32TwsqF4KYQl/T66YRoclabhUWr/Usat79YDtiSnvB8OsXtr
VU+M/MBlQ8BXTeaT4sd7ZLCS8Cf1/5IStDrbXf1s27FnC2UXARPOv4/TusjJwX57
V59ST7f+hHFq0uLDiDEK96cW8aPLS9hGkgEcvE1Oh3A9TRWJ4tbqT4W5K9kvp3nY
s10zj8jSbCOER6/O5Q1umPg6zrSB6hLvJaFEAa1hCXhKFwpHBQIDAQABo4IDjzCC
A4swHQYDVR0OBBYEFJZf/fG+z07O1/fTLSsl8saovw2kMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lOGY4
YzQxMS1mYTVjLTQyOGMtOGFjMS1lMDhlOGEwMGFkMTUvYTE1MTFkYTAtMjA0Ny0z
NmNlLTk3M2YtYzgzODE0MzMxMDVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZThmOGM0MTEtZmE1Yy00MjhjLThh
YzEtZTA4ZThhMDBhZDE1L2U4ZjhjNDExLWZhNWMtNDI4Yy04YWMxLWUwOGU4YTAw
YWQxNS5jcmwwHwYDVR0jBBgwFoAU2mOPS3cNceq6IgA5tQH/tSVxq18wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lOGY4YzQxMS1mYTVjLTQyOGMtOGFjMS1lMDhl
OGEwMGFkMTUuY2VyMFkGCCsGAQUFBwEHAQH/BEowSDBGBAIAATBAAwQHGCYAAwQF
GJ0gAwQFGPZgAwQFP/egAwMAQTMDBAVFG+ADAwBFSgMEBmyzAAMEB637AAMEBcYu
YAMEBdj/YDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEW
LGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0G
CSqGSIb3DQEBCwUAA4IBAQBRCWrAd31Qze7FoAdoaOoALzkRmuKo/Bm+b2PnS42l
2EwmbXXVRbM5L3TTZKpqqQfumJ/1mapWzd5JhWNb0CtKPVgGXiCXOtpNhvKh+mEg
iY4d4SwoyC2z6/ASC0b6NolBxJTsqRH+R+4e4DkCyfh9m0HDVIDY87GEPyoAPGuQ
F95Dzewtcg0L1TBzcwQ/YsPq19HZCxbkBgPb6ocFadBQSunwyTDR3h9G+fV1Lguv
uv/fDZPsJpIZ4f/8JhrnEIKsnjvP4jlk8+3+CV4QKJnfCDtAbqxVFzYZTWBRQFX1
3Xapd7D96rCUF4Q1E5C6Du1YyR0kjVRFl1f29GNB+B/z
-----END CERTIFICATE-----
Generated at Sun Apr 6 07:13:40 2025 by rpki-client