Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/5f470726-ba1c-3327-8ebe-1cd7737a8735.roa
File: 5f470726-ba1c-3327-8ebe-1cd7737a8735.roa (raw, json)
Hash identifier: qGxE3o+yDPYyGX4+bCBCoFG5OrwMWjvT/s95sRCunXs=
Subject key identifier: 6C:33:56:0C:7F:07:6B:57:17:E6:57:A9:3B:30:74:9E:48:08:15:BC
Certificate issuer: /CN=1add3b23-5fb0-4412-be17-98450d352516
Certificate serial: 010D0C9F43285848ADC60CCA23234FDE6F42AF00
Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/5f470726-ba1c-3327-8ebe-1cd7737a8735.roa
Signing time: Mon 27 Jan 2025 02:00:39 +0000
ROA not before: Mon 27 Jan 2025 02:00:39 +0000
ROA not after: Sun 27 Apr 2025 01:00:39 +0000
asID: 17054
IP address blocks: 64.72.128.0/19 maxlen: 24
64.255.240.0/20 maxlen: 24
66.11.0.0/19 maxlen: 24
66.159.64.0/19 maxlen: 24
66.181.64.0/19 maxlen: 24
66.230.64.0/20 maxlen: 24
69.7.96.0/20 maxlen: 24
206.41.192.0/19 maxlen: 24
206.183.0.0/19 maxlen: 24
206.210.64.0/19 maxlen: 24
206.223.22.0/24 maxlen: 24
207.54.128.0/18 maxlen: 24
207.114.0.0/17 maxlen: 24
208.40.128.0/18 maxlen: 24
208.40.192.0/20 maxlen: 24
208.40.224.0/19 maxlen: 24
209.114.128.0/18 maxlen: 24
209.143.64.0/18 maxlen: 24
209.166.128.0/18 maxlen: 24
209.190.128.0/18 maxlen: 24
209.221.0.0/19 maxlen: 24
216.37.0.0/18 maxlen: 24
216.82.64.0/18 maxlen: 24
216.130.0.0/19 maxlen: 24
216.151.64.0/18 maxlen: 24
216.183.160.0/19 maxlen: 24
216.230.96.0/19 maxlen: 24
216.239.240.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ad:c6:0c:ca:23:23:4f:de:6f:42:af:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516
Validity
Not Before: Jan 27 02:00:39 2025 GMT
Not After : Apr 27 01:00:39 2025 GMT
Subject: CN=70535789-43ca-4bd3-a03b-1e43396e45e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6f:1d:9b:07:50:05:42:02:b0:1e:7e:41:51:
da:59:ec:d4:b1:59:e1:85:20:29:67:15:38:a5:ee:
30:f3:7c:1d:cb:b3:43:36:6b:fe:eb:00:e6:0f:7b:
51:ef:66:22:22:e1:65:4d:a0:bf:90:75:91:44:ec:
b5:1e:0f:df:b3:92:f2:5d:c1:86:e5:88:39:31:2a:
aa:d9:d0:6e:9a:66:cd:70:83:73:e7:9a:43:27:ec:
ba:4b:56:52:ba:4e:9c:d9:04:d4:9d:5c:2e:bd:05:
b8:d2:3a:e3:2d:43:37:83:62:f8:c3:ca:fa:84:ce:
1e:4d:8d:c4:0c:bd:5b:8b:a4:6d:9c:fb:6f:b0:c6:
f7:92:46:ac:9e:f2:fd:f1:a9:a5:63:21:f9:14:6b:
4e:b7:ac:52:bf:5e:ce:12:b3:4f:57:09:3a:65:c8:
f3:db:78:7d:10:94:d6:2e:b3:92:14:14:6c:19:74:
57:e7:f5:75:35:a4:75:9f:b0:04:c6:f1:84:75:d7:
86:76:1d:4e:f3:29:cc:de:f1:c3:94:7d:89:03:ce:
13:4b:a1:3f:c6:11:c6:83:07:b4:b7:42:b7:d4:7c:
f3:56:d0:e2:9e:f3:a7:91:a6:87:a9:59:74:af:f3:
51:37:d0:50:61:00:a2:76:71:75:f0:78:92:26:d0:
a7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:33:56:0C:7F:07:6B:57:17:E6:57:A9:3B:30:74:9E:48:08:15:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/5f470726-ba1c-3327-8ebe-1cd7737a8735.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl
X509v3 Authority Key Identifier:
keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer
sbgp-ipAddrBlock: critical
IPv4:
64.72.128.0/19
64.255.240.0/20
66.11.0.0/19
66.159.64.0/19
66.181.64.0/19
66.230.64.0/20
69.7.96.0/20
206.41.192.0/19
206.183.0.0/19
206.210.64.0/19
206.223.22.0/24
207.54.128.0/18
207.114.0.0/17
208.40.128.0-208.40.207.255
208.40.224.0/19
209.114.128.0/18
209.143.64.0/18
209.166.128.0/18
209.190.128.0/18
209.221.0.0/19
216.37.0.0/18
216.82.64.0/18
216.130.0.0/19
216.151.64.0/18
216.183.160.0/19
216.230.96.0/19
216.239.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:c0:78:dd:01:79:07:33:10:dc:03:27:d7:2a:fa:83:de:47:
eb:a3:e0:0c:cd:18:93:c4:af:73:a9:75:0b:ca:27:2a:45:c0:
d9:4b:aa:7c:3e:a1:51:b5:db:b5:e4:9a:2b:98:a7:16:ff:9d:
4b:dd:49:cd:c5:43:0a:c2:00:20:92:f0:25:eb:8d:b9:05:34:
88:b7:81:72:db:0d:ba:f2:64:c3:2a:5f:73:cd:e2:f9:cf:a4:
45:97:6e:67:06:0f:9f:37:a8:c9:a0:ab:73:4d:71:bb:dc:cc:
ba:63:75:43:a9:99:df:f9:4c:d7:13:9b:18:b3:e9:ea:81:ca:
a0:98:35:c2:6a:e1:7a:9e:47:8d:85:dc:7a:8e:13:ce:5f:74:
c4:df:1e:8e:da:b2:46:ff:b8:12:b4:ba:20:d3:04:d3:6e:b4:
ac:9f:f9:df:c6:e1:b1:2b:86:0a:65:3d:69:7e:a8:fc:5a:71:
2f:68:5e:72:0b:cc:8d:7c:f0:bc:97:c1:e9:7e:3f:ce:73:38:
13:11:6f:28:60:2e:2d:e5:9b:f9:b8:2d:76:b4:4f:59:0a:ad:
35:4e:24:d6:7f:9b:8e:04:34:65:e9:16:86:4f:2f:96:c3:a3:
03:9e:6f:13:a8:98:e8:a2:d0:f2:67:5c:15:b8:88:62:e8:75:
7c:d3:c2:5b
-----BEGIN CERTIFICATE-----
MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWEitxgzKIyNP3m9CrwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWFkZDNiMjMtNWZiMC00NDEyLWJlMTctOTg0NTBkMzUy
NTE2MB4XDTI1MDEyNzAyMDAzOVoXDTI1MDQyNzAxMDAzOVowLzEtMCsGA1UEAxMk
NzA1MzU3ODktNDNjYS00YmQzLWEwM2ItMWU0MzM5NmU0NWU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz28dmwdQBUICsB5+QVHaWezUsVnhhSApZxU4
pe4w83wdy7NDNmv+6wDmD3tR72YiIuFlTaC/kHWRROy1Hg/fs5LyXcGG5Yg5MSqq
2dBummbNcINz55pDJ+y6S1ZSuk6c2QTUnVwuvQW40jrjLUM3g2L4w8r6hM4eTY3E
DL1bi6RtnPtvsMb3kkasnvL98amlYyH5FGtOt6xSv17OErNPVwk6Zcjz23h9EJTW
LrOSFBRsGXRX5/V1NaR1n7AExvGEddeGdh1O8ynM3vHDlH2JA84TS6E/xhHGgwe0
t0K31HzzVtDinvOnkaaHqVl0r/NRN9BQYQCidnF18HiSJtCnkQIDAQABo4ID/jCC
A/owHQYDVR0OBBYEFGwzVgx/B2tXF+ZXqTswdJ5ICBW8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xYWRk
M2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1MGQzNTI1MTYvNWY0NzA3MjYtYmExYy0z
MzI3LThlYmUtMWNkNzczN2E4NzM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWFkZDNiMjMtNWZiMC00NDEyLWJl
MTctOTg0NTBkMzUyNTE2LzFhZGQzYjIzLTVmYjAtNDQxMi1iZTE3LTk4NDUwZDM1
MjUxNi5jcmwwHwYDVR0jBBgwFoAU39arNQjEZ6Npjktd6od4wHodjiYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8xYWRkM2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1
MGQzNTI1MTYuY2VyMIHHBggrBgEFBQcBBwEB/wSBtzCBtDCBsQQCAAEwgaoDBAVA
SIADBARA//ADBAVCCwADBAVCn0ADBAVCtUADBARC5kADBARFB2ADBAXOKcADBAXO
twADBAXO0kADBADO3xYDBAbPNoADBAfPcgAwDAMEB9AogAMEBNAowAMEBdAo4AME
BtFygAMEBtGPQAMEBtGmgAMEBtG+gAMEBdHdAAMEBtglAAMEBthSQAMEBdiCAAME
BtiXQAMEBdi3oAMEBdjmYAMEBNjv8DBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C
MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y
cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBRwHjdAXkHMxDcAyfXKvqD
3kfro+AMzRiTxK9zqXULyicqRcDZS6p8PqFRtdu15JormKcW/51L3UnNxUMKwgAg
kvAl6425BTSIt4Fy2w268mTDKl9zzeL5z6RFl25nBg+fN6jJoKtzTXG73My6Y3VD
qZnf+UzXE5sYs+nqgcqgmDXCauF6nkeNhdx6jhPOX3TE3x6O2rJG/7gStLog0wTT
brSsn/nfxuGxK4YKZT1pfqj8WnEvaF5yC8yNfPC8l8Hpfj/OczgTEW8oYC4t5Zv5
uC12tE9ZCq01TiTWf5uOBDRl6RaGTy+Ww6MDnm8TqJjootDyZ1wVuIhi6HV808Jb
-----END CERTIFICATE-----
Generated at Mon Apr 7 15:48:40 2025 by rpki-client