Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/f4996217-8b86-3d06-ac32-26d4f109d5db.roa
File: f4996217-8b86-3d06-ac32-26d4f109d5db.roa (raw, json)
Hash identifier: 7pPqu9KTWMt6rC7GcCA+nDPFqOF1iB1OzpSnY3llCrk=
Subject key identifier: 62:F2:9B:DB:4A:B6:85:64:B4:27:B0:DD:0A:E0:E3:B9:76:DA:C5:75
Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial: 010D0C9F432858488AE0A2BE9D6901F7F6633F80
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/f4996217-8b86-3d06-ac32-26d4f109d5db.roa
Signing time: Tue 14 Jan 2025 14:00:51 +0000
ROA not before: Tue 14 Jan 2025 14:00:51 +0000
ROA not after: Mon 14 Apr 2025 13:00:51 +0000
asID: 30103
IP address blocks: 144.195.0.0/21 maxlen: 24
144.195.8.0/21 maxlen: 24
144.195.16.0/21 maxlen: 24
144.195.24.0/21 maxlen: 24
144.195.32.0/21 maxlen: 24
144.195.40.0/21 maxlen: 24
144.195.48.0/21 maxlen: 24
144.195.56.0/21 maxlen: 24
144.195.64.0/21 maxlen: 24
144.195.72.0/21 maxlen: 24
144.195.80.0/21 maxlen: 24
144.195.88.0/21 maxlen: 24
144.195.96.0/21 maxlen: 24
144.195.104.0/21 maxlen: 24
144.195.112.0/21 maxlen: 24
144.195.120.0/21 maxlen: 24
144.195.128.0/21 maxlen: 24
144.195.136.0/21 maxlen: 24
144.195.144.0/21 maxlen: 24
144.195.152.0/21 maxlen: 24
144.195.160.0/21 maxlen: 24
144.195.168.0/21 maxlen: 24
144.195.176.0/21 maxlen: 24
144.195.184.0/21 maxlen: 24
144.195.192.0/21 maxlen: 24
144.195.200.0/21 maxlen: 24
144.195.208.0/21 maxlen: 24
144.195.216.0/21 maxlen: 24
144.195.224.0/21 maxlen: 24
144.195.232.0/21 maxlen: 24
144.195.240.0/21 maxlen: 24
144.195.248.0/21 maxlen: 24
156.45.0.0/21 maxlen: 24
156.45.8.0/21 maxlen: 24
156.45.16.0/21 maxlen: 24
156.45.24.0/21 maxlen: 24
156.45.32.0/21 maxlen: 24
156.45.40.0/21 maxlen: 24
156.45.48.0/21 maxlen: 24
156.45.56.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8a:e0:a2:be:9d:69:01:f7:f6:63:3f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
Validity
Not Before: Jan 14 14:00:51 2025 GMT
Not After : Apr 14 13:00:51 2025 GMT
Subject: CN=901fa9af-7949-45cc-93e4-befd4bb8bcce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:24:f7:42:18:05:e4:6a:ed:4f:b5:ff:2f:7b:
05:2f:6e:38:06:3c:72:5d:af:1d:90:f6:94:59:5c:
8f:49:b8:86:e2:e1:96:b5:83:dc:bd:71:ed:a0:c1:
c7:45:3c:94:4c:fd:f2:b8:b3:d7:02:40:e8:9f:ca:
5c:a5:1a:e1:60:97:d5:b3:24:62:9a:f7:1d:51:ee:
22:7e:21:1b:97:01:9c:53:d4:82:bf:ce:6b:f5:f2:
d0:77:92:cd:60:66:1b:6a:ed:20:df:44:37:62:45:
bb:a3:ed:a1:57:b9:e3:70:e6:2a:60:de:92:5b:24:
65:c1:d3:93:1b:52:d7:4c:7a:c4:43:c8:a8:61:f4:
a7:07:76:f3:46:e4:e9:fa:8a:b2:a9:c6:ab:b7:c3:
72:c6:f4:d8:78:b5:da:64:b5:33:5b:f5:20:fd:99:
b0:a2:0d:43:9d:8e:1c:6f:53:5a:af:10:a7:28:d9:
6d:6e:ed:79:22:c4:d6:c9:40:aa:01:5f:54:29:98:
a4:c5:a8:68:32:8a:8f:04:ed:e6:a0:41:6c:ac:69:
36:1a:ab:4e:99:95:06:05:b7:07:01:74:6e:59:18:
78:7c:b1:75:7d:09:2e:83:a8:ee:74:fa:a5:0d:6b:
af:45:75:47:6b:95:41:11:94:5d:c1:02:7f:ea:a7:
6e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:F2:9B:DB:4A:B6:85:64:B4:27:B0:DD:0A:E0:E3:B9:76:DA:C5:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/f4996217-8b86-3d06-ac32-26d4f109d5db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
X509v3 Authority Key Identifier:
keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
sbgp-ipAddrBlock: critical
IPv4:
144.195.0.0/16
156.45.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a8:75:9d:bd:8a:e9:c5:73:d5:2f:4f:c0:31:4c:b8:65:57:4d:
4e:91:b0:de:56:66:1c:63:df:57:fa:04:3d:49:a1:b9:be:1b:
f0:bb:f3:dd:5b:4a:c9:3b:08:35:74:9e:20:d5:2e:40:00:56:
50:a5:fd:b9:65:27:38:37:9b:48:d6:aa:aa:f6:7a:ee:e7:2b:
1c:b4:a1:13:f6:24:b8:ab:3e:04:6e:e8:ea:42:ce:c0:1b:f1:
3b:9a:4a:8f:b9:ca:7f:1e:9a:8c:12:b7:15:42:ca:47:2c:30:
e5:da:1b:cd:a5:b2:44:37:07:fa:d8:30:21:fe:c5:56:cd:ea:
2a:34:0e:cb:dd:ac:02:99:c1:5a:ed:ef:f5:77:12:f9:bb:fa:
5b:d4:32:ce:73:f6:e5:a7:dd:4a:07:71:31:5c:e6:a1:3b:e4:
6b:ff:ae:ed:d4:d5:dd:53:a9:f8:75:e6:9c:8e:15:e7:ff:73:
07:ba:21:65:87:57:4e:8d:1f:0e:76:9f:b3:5e:2b:23:71:26:
db:92:03:d8:f9:40:e1:7d:75:30:d9:dc:b8:b6:af:e3:8e:ca:
eb:c9:0a:ca:d1:76:d7:17:28:c9:3e:94:a4:84:d3:39:7a:eb:
26:c6:af:12:80:34:6d:a4:21:7a:c5:8d:83:9f:34:cf:e1:51:
42:d2:e3:ba
-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWEiK4KK+nWkB9/ZjP4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx
YzY1MB4XDTI1MDExNDE0MDA1MVoXDTI1MDQxNDEzMDA1MVowLzEtMCsGA1UEAxMk
OTAxZmE5YWYtNzk0OS00NWNjLTkzZTQtYmVmZDRiYjhiY2NlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyT3QhgF5GrtT7X/L3sFL244BjxyXa8dkPaU
WVyPSbiG4uGWtYPcvXHtoMHHRTyUTP3yuLPXAkDon8pcpRrhYJfVsyRimvcdUe4i
fiEblwGcU9SCv85r9fLQd5LNYGYbau0g30Q3YkW7o+2hV7njcOYqYN6SWyRlwdOT
G1LXTHrEQ8ioYfSnB3bzRuTp+oqyqcart8NyxvTYeLXaZLUzW/Ug/Zmwog1DnY4c
b1NarxCnKNltbu15IsTWyUCqAV9UKZikxahoMoqPBO3moEFsrGk2GqtOmZUGBbcH
AXRuWRh4fLF1fQkug6judPqlDWuvRXVHa5VBEZRdwQJ/6qduVwIDAQABo4IDWjCC
A1YwHQYDVR0OBBYEFGLym9tKtoVktCew3Qrg47l22sV1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1
NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvZjQ5OTYyMTctOGI4Ni0z
ZDA2LWFjMzItMjZkNGYxMDlkNWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4
MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy
MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5
NjVhMjFjNjUuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAATALAwMAkMMDBAac
LQAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEAqHWdvYrpxXPVL0/AMUy4ZVdNTpGw3lZmHGPfV/oEPUmhub4b
8Lvz3VtKyTsINXSeINUuQABWUKX9uWUnODebSNaqqvZ67ucrHLShE/YkuKs+BG7o
6kLOwBvxO5pKj7nKfx6ajBK3FULKRyww5dobzaWyRDcH+tgwIf7FVs3qKjQOy92s
ApnBWu3v9XcS+bv6W9QyznP25afdSgdxMVzmoTvka/+u7dTV3VOp+HXmnI4V5/9z
B7ohZYdXTo0fDnafs14rI3Em25ID2PlA4X11MNncuLav447K68kKytF21xcoyT6U
pITTOXrrJsavEoA0baQhesWNg580z+FRQtLjug==
-----END CERTIFICATE-----
Generated at Sun Apr 6 17:48:14 2025 by rpki-client