Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463/9c6fb6db-9ad0-332e-bb05-8c8dbaae9e4e.roa
File: 9c6fb6db-9ad0-332e-bb05-8c8dbaae9e4e.roa (raw, json)
Hash identifier: dx9HGP+8/CIvG/WfY70GMWcIY11yJwxGUBU0S3uRBEI=
Subject key identifier: 6F:0A:31:70:E2:31:EC:9B:4E:E0:E3:06:35:EB:E3:1B:3D:15:03:13
Certificate issuer: /CN=f9832b96-bd4c-421c-9299-d5f2c689d463
Certificate serial: 010D0C9F43285849203C117747DB83855D3DF100
Authority key identifier: 20:9C:BB:41:66:DA:B5:0B:B5:94:F9:34:2E:BD:4C:6D:D0:53:11:54
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463/9c6fb6db-9ad0-332e-bb05-8c8dbaae9e4e.roa
Signing time: Sun 09 Mar 2025 02:00:39 +0000
ROA not before: Sun 09 Mar 2025 02:00:39 +0000
ROA not after: Sat 07 Jun 2025 01:00:39 +0000
asID: 21565
IP address blocks: 64.138.192.0/18 maxlen: 24
64.150.128.0/19 maxlen: 24
66.153.128.0/17 maxlen: 24
66.220.64.0/20 maxlen: 24
67.212.32.0/19 maxlen: 24
107.190.144.0/20 maxlen: 24
108.175.176.0/20 maxlen: 24
152.44.112.0/20 maxlen: 24
159.117.160.0/19 maxlen: 24
162.221.104.0/21 maxlen: 24
162.252.0.0/21 maxlen: 24
198.29.48.0/20 maxlen: 24
198.52.224.0/20 maxlen: 24
198.232.104.0/21 maxlen: 24
206.195.64.0/19 maxlen: 24
216.16.160.0/19 maxlen: 24
216.223.192.0/19 maxlen: 24
2606:8400::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:20:3c:11:77:47:db:83:85:5d:3d:f1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9832b96-bd4c-421c-9299-d5f2c689d463
Validity
Not Before: Mar 9 02:00:39 2025 GMT
Not After : Jun 7 01:00:39 2025 GMT
Subject: CN=f1382d18-73a9-45ee-89db-6944e8019e3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:43:5f:66:83:0a:14:4f:0a:94:b0:19:a2:00:
8a:a1:af:2d:fa:4d:73:f6:32:88:c0:74:ce:fd:3b:
7f:74:45:df:16:0b:73:88:ff:84:02:97:74:5b:a6:
1f:ad:14:2a:a1:74:37:fe:19:36:55:0d:f8:13:21:
fd:31:13:85:be:6b:e8:eb:2f:7f:65:78:cc:e0:cd:
e8:11:01:af:0c:ea:b8:f0:55:f3:89:a7:b9:17:45:
cd:31:ed:42:02:56:86:de:bc:90:cd:12:8f:e3:67:
b6:2e:7d:73:ba:17:5c:0f:e3:8b:aa:76:c1:80:b6:
90:8c:40:a7:b0:03:7d:80:3a:7d:d7:0f:d8:b2:73:
73:34:29:f0:29:08:38:3f:c4:ef:ae:93:02:c2:33:
af:cd:1d:e8:f7:a3:2e:15:37:84:78:f1:1d:a8:e5:
3d:d6:44:6f:89:cc:45:bf:09:ee:dd:e7:45:d4:5f:
75:d4:2e:1a:87:70:95:6b:2a:b3:3d:a4:4d:bc:e9:
f8:66:cf:24:ea:26:7f:9b:4b:25:d5:65:a1:2f:58:
ef:9e:6b:0c:5a:ce:90:04:7e:61:40:b6:dc:d7:e4:
a6:c0:8a:4a:8a:54:2c:fe:65:20:06:d2:80:c6:1f:
d7:32:fc:fb:9c:9a:f7:06:31:d5:8b:92:cc:4d:30:
84:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:0A:31:70:E2:31:EC:9B:4E:E0:E3:06:35:EB:E3:1B:3D:15:03:13
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463/9c6fb6db-9ad0-332e-bb05-8c8dbaae9e4e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463/f9832b96-bd4c-421c-9299-d5f2c689d463.crl
X509v3 Authority Key Identifier:
keyid:20:9C:BB:41:66:DA:B5:0B:B5:94:F9:34:2E:BD:4C:6D:D0:53:11:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463.cer
sbgp-ipAddrBlock: critical
IPv4:
64.138.192.0/18
64.150.128.0/19
66.153.128.0/17
66.220.64.0/20
67.212.32.0/19
107.190.144.0/20
108.175.176.0/20
152.44.112.0/20
159.117.160.0/19
162.221.104.0/21
162.252.0.0/21
198.29.48.0/20
198.52.224.0/20
198.232.104.0/21
206.195.64.0/19
216.16.160.0/19
216.223.192.0/19
IPv6:
2606:8400::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c7:51:c3:88:e9:0e:a4:00:40:25:aa:4c:38:fe:d6:d2:f8:0d:
66:0a:66:86:d6:cb:8f:a6:27:f0:f7:cb:7f:72:56:ea:be:ee:
8c:9f:88:0f:ba:e4:4a:d2:01:6b:86:2e:8c:a5:59:b4:90:13:
69:92:3f:99:78:c3:d7:7d:b1:c1:ce:2f:c9:f3:8a:e5:ae:40:
5d:2d:e5:82:be:7d:e2:c9:47:2e:68:22:b0:40:2a:13:50:4f:
af:92:82:ad:56:66:02:30:33:46:2f:3f:b9:71:d5:b8:ad:9f:
ac:08:14:b7:92:94:1f:f4:e0:3c:14:8f:0e:f5:66:44:46:e4:
68:8f:89:d8:49:d8:43:9a:b1:da:e3:4b:9f:08:a8:6a:91:ea:
dd:10:b5:30:80:33:de:82:cf:ba:20:4f:39:39:73:69:4d:0b:
12:e3:6e:df:67:e7:47:51:31:90:e8:3c:36:c7:a5:ea:77:e1:
7b:89:f3:c2:08:09:79:2d:fa:39:9f:d1:db:a4:68:9f:60:a5:
b7:67:85:c3:8e:8f:e7:0f:ee:c2:d1:94:33:16:36:84:a6:36:
81:15:8a:ca:b8:31:42:ef:7a:b5:b9:84:40:b0:40:bf:40:43:
56:5a:bd:02:19:b3:53:da:ed:fa:af:e3:70:3d:f5:e2:12:b9:
bc:0b:e5:20
-----BEGIN CERTIFICATE-----
MIIGszCCBZugAwIBAgIUAQ0Mn0MoWEkgPBF3R9uDhV098QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk4MzJiOTYtYmQ0Yy00MjFjLTkyOTktZDVmMmM2ODlk
NDYzMB4XDTI1MDMwOTAyMDAzOVoXDTI1MDYwNzAxMDAzOVowLzEtMCsGA1UEAxMk
ZjEzODJkMTgtNzNhOS00NWVlLTg5ZGItNjk0NGU4MDE5ZTNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokNfZoMKFE8KlLAZogCKoa8t+k1z9jKIwHTO
/Tt/dEXfFgtziP+EApd0W6YfrRQqoXQ3/hk2VQ34EyH9MROFvmvo6y9/ZXjM4M3o
EQGvDOq48FXziae5F0XNMe1CAlaG3ryQzRKP42e2Ln1zuhdcD+OLqnbBgLaQjECn
sAN9gDp91w/YsnNzNCnwKQg4P8TvrpMCwjOvzR3o96MuFTeEePEdqOU91kRvicxF
vwnu3edF1F911C4ah3CVayqzPaRNvOn4Zs8k6iZ/m0sl1WWhL1jvnmsMWs6QBH5h
QLbc1+SmwIpKilQs/mUgBtKAxh/XMvz7nJr3BjHVi5LMTTCEBwIDAQABo4IDxTCC
A8EwHQYDVR0OBBYEFG8KMXDiMeybTuDjBjXr4xs9FQMTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9mOTgz
MmI5Ni1iZDRjLTQyMWMtOTI5OS1kNWYyYzY4OWQ0NjMvOWM2ZmI2ZGItOWFkMC0z
MzJlLWJiMDUtOGM4ZGJhYWU5ZTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZjk4MzJiOTYtYmQ0Yy00MjFjLTky
OTktZDVmMmM2ODlkNDYzL2Y5ODMyYjk2LWJkNGMtNDIxYy05Mjk5LWQ1ZjJjNjg5
ZDQ2My5jcmwwHwYDVR0jBBgwFoAUIJy7QWbatQu1lPk0Lr1MbdBTEVQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9mOTgzMmI5Ni1iZDRjLTQyMWMtOTI5OS1kNWYy
YzY4OWQ0NjMuY2VyMIGOBggrBgEFBQcBBwEB/wR/MH0wbAQCAAEwZgMEBkCKwAME
BUCWgAMEB0KZgAMEBELcQAMEBUPUIAMEBGu+kAMEBGyvsAMEBJgscAMEBZ91oAME
A6LdaAMEA6L8AAMEBMYdMAMEBMY04AMEA8boaAMEBc7DQAMEBdgQoAMEBdjfwDAN
BAIAAjAHAwUAJgaEADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDHUcOI6Q6kAEAlqkw4/tbS+A1mCmaG1suP
pifw98t/clbqvu6Mn4gPuuRK0gFrhi6MpVm0kBNpkj+ZeMPXfbHBzi/J84rlrkBd
LeWCvn3iyUcuaCKwQCoTUE+vkoKtVmYCMDNGLz+5cdW4rZ+sCBS3kpQf9OA8FI8O
9WZERuRoj4nYSdhDmrHa40ufCKhqkerdELUwgDPegs+6IE85OXNpTQsS427fZ+dH
UTGQ6Dw2x6Xqd+F7ifPCCAl5Lfo5n9HbpGifYKW3Z4XDjo/nD+7C0ZQzFjaEpjaB
FYrKuDFC73q1uYRAsEC/QENWWr0CGbNT2u36r+NwPfXiErm8C+Ug
-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:23 2025 by rpki-client on console.sobornost.net