Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/12fc4be4-3d5b-366a-ad43-dd4389a0ad27.roa
File: 12fc4be4-3d5b-366a-ad43-dd4389a0ad27.roa (raw, json)
Hash identifier: eoL1lNUmzCkXlkHeXPszbwVfKyDxLKVrIe0VSK6Qwp8=
Subject key identifier: DC:90:50:CE:A8:6B:D6:9E:25:71:0A:9E:3C:46:30:64:EC:AB:5A:99
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848AF2B80109FD37E61C696B800
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/12fc4be4-3d5b-366a-ad43-dd4389a0ad27.roa
Signing time: Mon 27 Jan 2025 14:00:52 +0000
ROA not before: Mon 27 Jan 2025 14:00:52 +0000
ROA not after: Sun 27 Apr 2025 13:00:52 +0000
asID: 212609
IP address blocks: 108.165.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:af:2b:80:10:9f:d3:7e:61:c6:96:b8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jan 27 14:00:52 2025 GMT
Not After : Apr 27 13:00:52 2025 GMT
Subject: CN=796badc6-bc8e-4f71-a860-a2b8babcd7e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4b:9e:e1:2e:c0:43:d6:29:5f:17:35:23:43:
55:43:0f:e5:75:c2:29:0b:db:98:ce:3b:42:b0:e7:
16:2f:59:34:ef:2a:64:65:f9:ca:a4:20:9c:1a:91:
f8:c6:7e:3c:47:65:f1:00:7d:2f:f4:91:c8:89:3a:
5e:d6:d0:a5:a1:1f:4e:50:85:6f:cc:39:fb:8f:0a:
e5:db:36:4d:55:61:32:d8:42:45:09:d3:98:a6:4d:
37:94:71:2d:c0:de:b5:8f:19:4e:f6:47:64:e8:c2:
81:95:9f:56:49:16:a4:4d:f5:a5:d4:73:d5:20:07:
39:fc:06:a0:73:01:e4:28:72:e6:04:0a:c8:0e:f3:
93:f0:2d:fa:d0:68:26:94:58:91:53:da:22:d4:32:
ce:ec:a7:0b:51:bf:64:8c:6f:01:a7:fa:7e:94:b7:
1f:91:74:4c:79:c2:ad:9e:92:21:8b:1d:03:e5:ca:
5a:b4:d2:2f:06:77:69:11:eb:48:90:6a:0e:96:43:
2c:ff:d2:07:95:26:aa:7f:e9:b6:a9:9f:91:95:b1:
ca:fa:de:ed:f4:1c:09:49:03:d0:75:ce:22:4a:14:
78:0e:48:68:5d:01:36:17:a7:3a:b8:8d:7f:81:55:
89:c7:19:55:8a:11:a1:34:1c:db:e4:6a:fb:be:ba:
62:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:90:50:CE:A8:6B:D6:9E:25:71:0A:9E:3C:46:30:64:EC:AB:5A:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/12fc4be4-3d5b-366a-ad43-dd4389a0ad27.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.210.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:29:1f:f4:b1:c7:4c:0c:e8:30:25:b3:17:1e:c1:be:03:39:
81:03:4d:7a:d6:3d:d0:68:38:f0:4d:0b:fd:41:88:84:5d:79:
ab:17:c9:93:1f:51:c2:06:4c:2d:03:ee:7c:a1:31:33:66:89:
06:b9:77:39:40:3a:94:ac:2d:5b:6a:00:06:55:1e:1d:49:b4:
f3:1b:b5:20:64:20:f6:d5:a6:fa:ed:91:e1:5e:e4:93:2b:12:
b0:07:64:5e:b7:c6:36:80:c9:cb:7e:97:39:df:86:d8:ed:ce:
1d:75:b1:44:fc:6a:03:bb:cf:5c:b9:01:2e:61:2f:ac:2b:98:
84:7a:06:90:68:5b:33:8b:4f:41:75:ae:5a:2b:51:76:7b:45:
22:fc:c0:35:12:51:e7:01:46:1c:52:b5:ff:86:86:0c:a3:7d:
4e:db:b3:7d:31:1d:c0:4b:af:28:af:21:7f:29:90:fc:71:5a:
0b:fa:1d:5d:31:80:2a:95:78:ce:0e:03:7b:3f:5f:1e:69:d8:
84:34:1c:34:57:02:6c:c8:97:7e:15:2f:44:a3:61:4b:36:d6:
e1:99:1b:d6:90:75:9d:9b:32:72:08:5a:1c:f7:9b:6c:1e:65:
a3:5e:4d:9c:37:e6:cd:db:93:51:a2:57:98:71:53:b7:72:01:
c1:01:27:2e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEivK4AQn9N+YcaWuAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDEyNzE0MDA1MloXDTI1MDQyNzEzMDA1MlowLzEtMCsGA1UEAxMk
Nzk2YmFkYzYtYmM4ZS00ZjcxLWE4NjAtYTJiOGJhYmNkN2UyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0ue4S7AQ9YpXxc1I0NVQw/ldcIpC9uYzjtC
sOcWL1k07ypkZfnKpCCcGpH4xn48R2XxAH0v9JHIiTpe1tCloR9OUIVvzDn7jwrl
2zZNVWEy2EJFCdOYpk03lHEtwN61jxlO9kdk6MKBlZ9WSRakTfWl1HPVIAc5/Aag
cwHkKHLmBArIDvOT8C360GgmlFiRU9oi1DLO7KcLUb9kjG8Bp/p+lLcfkXRMecKt
npIhix0D5cpatNIvBndpEetIkGoOlkMs/9IHlSaqf+m2qZ+RlbHK+t7t9BwJSQPQ
dc4iShR4DkhoXQE2F6c6uI1/gVWJxxlVihGhNBzb5Gr7vrpilwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNyQUM6oa9aeJXEKnjxGMGTsq1qZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMTJmYzRiZTQtM2Q1Yi0z
NjZhLWFkNDMtZGQ0Mzg5YTBhZDI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKXSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFIpH/Sxx0wM6DAlsxcewb4DOYEDTXrWPdBoOPBNC/1BiIRdeasXyZMf
UcIGTC0D7nyhMTNmiQa5dzlAOpSsLVtqAAZVHh1JtPMbtSBkIPbVpvrtkeFe5JMr
ErAHZF63xjaAyct+lznfhtjtzh11sUT8agO7z1y5AS5hL6wrmIR6BpBoWzOLT0F1
rlorUXZ7RSL8wDUSUecBRhxStf+GhgyjfU7bs30xHcBLryivIX8pkPxxWgv6HV0x
gCqVeM4OA3s/Xx5p2IQ0HDRXAmzIl34VL0SjYUs21uGZG9aQdZ2bMnIIWhz3m2we
ZaNeTZw35s3bk1GiV5hxU7dyAcEBJy4=
-----END CERTIFICATE-----
Generated at Sat Apr 5 20:54:06 2025 by rpki-client