Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/495553e5-6804-3997-88ac-54c613b38c17.roa
File: 495553e5-6804-3997-88ac-54c613b38c17.roa (raw, json)
Hash identifier: uqXeSMeBgmEOVELCIyXEhJXRPghz03vqh2o0k5Poqn4=
Subject key identifier: 5C:F0:0E:8E:50:38:A9:B0:B7:CC:52:1F:08:99:68:CF:22:47:59:FB
Certificate issuer: /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
Certificate serial: 010D0C9F432858496FAF0975D5FE27099748C8A0
Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/495553e5-6804-3997-88ac-54c613b38c17.roa
Signing time: Sun 06 Apr 2025 13:01:01 +0000
ROA not before: Sun 06 Apr 2025 13:01:01 +0000
ROA not after: Sat 05 Jul 2025 13:01:01 +0000
asID: 6621
IP address blocks: 67.142.0.0/19 maxlen: 19
67.142.100.0/22 maxlen: 22
67.142.104.0/22 maxlen: 22
67.142.108.0/22 maxlen: 22
67.142.112.0/22 maxlen: 22
67.142.116.0/22 maxlen: 22
67.142.120.0/22 maxlen: 22
67.142.124.0/22 maxlen: 22
67.142.128.0/20 maxlen: 20
67.142.144.0/21 maxlen: 21
67.142.152.0/22 maxlen: 22
67.142.157.0/24 maxlen: 24
67.142.158.0/23 maxlen: 23
67.142.160.0/19 maxlen: 19
67.142.160.0/24 maxlen: 24
67.142.176.0/24 maxlen: 24
67.142.184.0/24 maxlen: 24
67.142.185.0/24 maxlen: 24
67.142.186.0/24 maxlen: 24
67.142.188.0/24 maxlen: 24
67.142.189.0/24 maxlen: 24
67.142.193.0/24 maxlen: 24
67.142.194.0/23 maxlen: 23
67.142.196.0/22 maxlen: 22
67.142.200.0/23 maxlen: 23
67.142.202.0/24 maxlen: 24
67.142.206.0/23 maxlen: 23
67.142.208.0/20 maxlen: 20
67.142.224.0/20 maxlen: 20
67.142.240.0/23 maxlen: 23
67.142.242.0/24 maxlen: 24
67.142.244.0/22 maxlen: 22
67.142.248.0/23 maxlen: 23
67.142.250.0/24 maxlen: 24
67.142.252.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:6f:af:09:75:d5:fe:27:09:97:48:c8:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
Validity
Not Before: Apr 6 13:01:01 2025 GMT
Not After : Jul 5 13:01:01 2025 GMT
Subject: CN=71f3bfd9-ffde-47c2-acb6-85b51b14f93f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:f2:4a:77:5d:a9:53:50:de:c1:48:70:3d:ed:
e9:03:e4:5e:d5:24:06:5b:f2:a8:1f:05:40:3d:f5:
0a:4f:ec:fe:4f:e0:54:5a:89:b3:d7:82:40:12:ae:
29:d7:f7:de:a0:3e:01:e0:d5:81:41:c5:da:65:59:
eb:5b:78:db:a7:1c:e4:df:c8:e0:e2:0e:37:0c:cf:
4d:37:93:19:0d:55:5f:04:74:a9:3a:24:f0:72:0a:
63:2d:5f:97:73:96:b4:76:11:03:ce:66:c0:73:cf:
df:e6:eb:35:09:1c:8a:4d:cb:01:8e:11:df:1a:b8:
3a:ac:f9:8d:ac:fa:34:7f:83:30:94:88:b0:1b:ff:
8f:da:04:d4:4d:cf:be:47:7c:6e:71:1f:13:77:84:
57:b3:e2:76:b9:58:51:dc:d2:44:97:9b:e1:e3:c4:
21:fc:87:39:ab:b2:81:ec:b3:d7:4a:67:95:08:c7:
c5:fb:53:5a:52:c1:c9:4d:0b:0c:17:f8:e7:5e:fc:
c3:c0:8d:af:5d:d8:81:52:1c:0f:cf:18:1a:84:24:
c3:04:50:62:8f:1f:93:72:32:d2:19:b4:1d:02:3d:
d0:7f:fc:c4:a4:30:5b:f0:2d:07:e7:df:fe:83:a7:
fa:24:30:ea:24:5c:b4:b1:b6:fc:75:0a:43:b4:12:
bd:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:F0:0E:8E:50:38:A9:B0:B7:CC:52:1F:08:99:68:CF:22:47:59:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/495553e5-6804-3997-88ac-54c613b38c17.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl
X509v3 Authority Key Identifier:
keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
sbgp-ipAddrBlock: critical
IPv4:
67.142.0.0/19
67.142.100.0-67.142.155.255
67.142.157.0-67.142.191.255
67.142.193.0-67.142.202.255
67.142.206.0-67.142.242.255
67.142.244.0-67.142.250.255
67.142.252.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:77:09:a2:ba:16:f5:6c:4d:1f:7d:dc:5a:64:51:3d:79:cd:
ef:20:d7:19:c2:01:00:d8:d1:dc:23:af:a3:00:41:37:89:45:
10:a4:e2:6f:6a:36:94:2a:ec:3b:23:bd:b0:3e:41:5f:89:ab:
40:35:98:31:f7:f7:0d:f8:df:bf:2a:52:e0:e6:b6:c6:6c:5c:
81:83:3f:10:d4:3a:9a:a4:1e:ce:20:c1:86:af:f5:ab:7e:c9:
6b:8f:4b:45:5e:81:14:81:4d:83:a6:eb:8e:30:25:8b:78:1c:
cc:69:b7:56:b7:ef:d9:38:ff:5d:19:1f:5d:9f:1f:93:6d:1b:
90:85:cc:c7:f4:85:b9:8c:81:8f:4b:7e:36:73:2f:8b:56:ba:
79:da:d2:fa:12:af:8c:c8:4d:cb:d6:cb:6a:1b:ee:98:cc:74:
01:3e:ed:45:61:d3:86:0d:07:b2:a0:c2:31:71:02:8a:ad:55:
7f:c0:61:22:ec:46:a6:12:9f:f5:2f:0a:27:13:be:d1:bd:b2:
bb:9b:d7:70:a1:f4:af:98:75:66:4b:0e:8e:a3:16:c5:08:8e:
c6:81:d6:a9:4c:ca:b4:9b:8e:3b:aa:24:f5:ce:3b:70:2a:ca:
11:4b:07:48:7d:6b:19:3d:1a:59:bd:f2:fa:cf:82:5f:42:af:
df:11:b3:ba
-----BEGIN CERTIFICATE-----
MIIGjzCCBXegAwIBAgIUAQ0Mn0MoWElvrwl11f4nCZdIyKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDFmODg2ZGYtNmM1OC00ZWE3LTlkMWYtMDY1OWUyMzI0
NDYwMB4XDTI1MDQwNjEzMDEwMVoXDTI1MDcwNTEzMDEwMVowLzEtMCsGA1UEAxMk
NzFmM2JmZDktZmZkZS00N2MyLWFjYjYtODViNTFiMTRmOTNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgPJKd12pU1DewUhwPe3pA+Re1SQGW/KoHwVA
PfUKT+z+T+BUWomz14JAEq4p1/feoD4B4NWBQcXaZVnrW3jbpxzk38jg4g43DM9N
N5MZDVVfBHSpOiTwcgpjLV+Xc5a0dhEDzmbAc8/f5us1CRyKTcsBjhHfGrg6rPmN
rPo0f4MwlIiwG/+P2gTUTc++R3xucR8Td4RXs+J2uVhR3NJEl5vh48Qh/Ic5q7KB
7LPXSmeVCMfF+1NaUsHJTQsMF/jnXvzDwI2vXdiBUhwPzxgahCTDBFBijx+TcjLS
GbQdAj3Qf/zEpDBb8C0H59/+g6f6JDDqJFy0sbb8dQpDtBK9cwIDAQABo4IDoTCC
A50wHQYDVR0OBBYEFFzwDo5QOKmwt8xSHwiZaM8iR1n7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4
ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5ZTIzMjQ0NjAvNDk1NTUzZTUtNjgwNC0z
OTk3LTg4YWMtNTRjNjEzYjM4YzE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDFmODg2ZGYtNmM1OC00ZWE3LTlk
MWYtMDY1OWUyMzI0NDYwL2QxZjg4NmRmLTZjNTgtNGVhNy05ZDFmLTA2NTllMjMy
NDQ2MC5jcmwwHwYDVR0jBBgwFoAU3hZRIFaD1ggT5kJFjv0WcO6Hb7swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5
ZTIzMjQ0NjAuY2VyMGsGCCsGAQUFBwEHAQH/BFwwWjBYBAIAATBSAwQFQ44AMAwD
BAJDjmQDBAJDjpgwDAMEAEOOnQMEBkOOgDAMAwQAQ47BAwQAQ47KMAwDBAFDjs4D
BABDjvIwDAMEAkOO9AMEAEOO+gMEAkOO/DBUBgNVHSABAf8ESjBIMEYGCCsGAQUF
Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl
cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBAdwmiuhb1bE0ffdxa
ZFE9ec3vINcZwgEA2NHcI6+jAEE3iUUQpOJvajaUKuw7I72wPkFfiatANZgx9/cN
+N+/KlLg5rbGbFyBgz8Q1DqapB7OIMGGr/Wrfslrj0tFXoEUgU2DpuuOMCWLeBzM
abdWt+/ZOP9dGR9dnx+TbRuQhczH9IW5jIGPS342cy+LVrp52tL6Eq+MyE3L1stq
G+6YzHQBPu1FYdOGDQeyoMIxcQKKrVV/wGEi7EamEp/1LwonE77RvbK7m9dwofSv
mHVmSw6OoxbFCI7GgdapTMq0m447qiT1zjtwKsoRSwdIfWsZPRpZvfL6z4JfQq/f
EbO6
-----END CERTIFICATE-----
Generated at Wed Apr 16 13:56:41 2025 by rpki-client on console.sobornost.net