Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4/209f05b0-1628-31e9-a192-0c7be9aca1b5.roa
File: 209f05b0-1628-31e9-a192-0c7be9aca1b5.roa (raw, json)
Hash identifier: +Er/ukaC2Axwub4jvl7Z9noQN8S7tBZnga31uai4UoQ=
Subject key identifier: B4:B8:7E:C4:8C:CC:AF:CC:47:66:8C:4D:F0:16:EE:9E:46:B5:3D:CD
Certificate issuer: /CN=47a6fbc4-59e2-49b4-a345-3edde81f26a4
Certificate serial: 010D0C9F43285848A400BF0B22DD1F41F5B44200
Authority key identifier: F0:0D:FE:5B:7C:27:3A:40:80:44:7C:E8:75:9B:8B:31:AD:CB:57:5C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4/209f05b0-1628-31e9-a192-0c7be9aca1b5.roa
Signing time: Thu 23 Jan 2025 14:00:52 +0000
ROA not before: Thu 23 Jan 2025 14:00:52 +0000
ROA not after: Wed 23 Apr 2025 13:00:52 +0000
asID: 16509
IP address blocks: 66.33.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a4:00:bf:0b:22:dd:1f:41:f5:b4:42:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47a6fbc4-59e2-49b4-a345-3edde81f26a4
Validity
Not Before: Jan 23 14:00:52 2025 GMT
Not After : Apr 23 13:00:52 2025 GMT
Subject: CN=0ed47124-251b-417c-815f-34bd7a7d2cbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a2:66:b0:4c:6b:d4:95:b6:27:a4:3e:99:6b:
4c:3d:44:0d:4a:31:a5:16:ef:00:e6:9d:90:7c:61:
5a:d6:fa:24:b0:bd:08:8a:59:d2:ad:fc:83:25:b3:
4d:f7:d0:a2:09:57:16:94:75:80:87:d4:6e:94:97:
74:02:03:41:f6:2f:9f:ba:6d:21:90:86:06:0a:2e:
80:a5:96:93:96:32:2e:74:66:9e:f4:1d:a6:37:6e:
5c:68:09:cd:0d:57:f3:2c:38:02:0d:4f:7a:c1:ae:
d6:dc:c6:2f:9f:0f:f3:e8:86:ab:c0:ac:84:8a:bb:
ac:db:f9:28:0c:26:b1:1e:36:d2:22:c5:c8:6a:49:
a4:55:e7:4b:e5:d6:e3:9b:08:f7:fa:cf:e0:91:c5:
58:11:ad:da:e6:fc:ba:61:dc:fe:8a:10:73:be:fb:
5f:ec:5a:d8:3c:84:fe:df:44:e2:ac:de:24:40:31:
84:ba:ff:8a:e2:74:bd:80:bd:61:21:98:da:0f:dd:
f8:3f:53:6a:3c:09:9b:38:06:a7:57:25:4b:76:28:
7a:a6:86:28:f0:c4:46:65:1e:a4:e9:e1:21:b8:6b:
60:fa:c8:41:29:40:39:ce:df:91:57:c9:3d:a9:b6:
10:5d:2a:9b:12:08:f0:41:0b:1a:13:c9:85:37:46:
5c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B8:7E:C4:8C:CC:AF:CC:47:66:8C:4D:F0:16:EE:9E:46:B5:3D:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4/209f05b0-1628-31e9-a192-0c7be9aca1b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4/47a6fbc4-59e2-49b4-a345-3edde81f26a4.crl
X509v3 Authority Key Identifier:
keyid:F0:0D:FE:5B:7C:27:3A:40:80:44:7C:E8:75:9B:8B:31:AD:CB:57:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4.cer
sbgp-ipAddrBlock: critical
IPv4:
66.33.96.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:16:4c:38:24:e0:af:f8:1a:f2:90:fd:cc:23:61:60:28:bf:
9d:a8:b6:6b:0c:40:3f:f1:37:9f:83:43:2c:d2:4a:e7:52:37:
9b:03:b9:65:b8:09:89:70:21:e9:a2:9c:0a:3a:49:ff:e8:ec:
7f:d5:b3:c5:da:b0:ff:a0:98:d2:3b:e6:c2:ba:59:85:2e:99:
b7:31:14:3d:10:8c:cc:7d:94:44:e5:41:db:6b:5b:d0:c7:be:
b3:00:67:aa:73:1c:07:b1:cd:88:48:25:99:58:39:83:e7:6d:
3f:d1:39:2b:99:23:45:b9:bc:fd:d2:26:73:bb:b5:38:1b:dd:
79:58:a7:7c:a9:b0:fe:1e:65:be:fe:5b:4f:c8:9d:c7:f0:54:
36:d4:ec:0a:04:25:b3:92:f6:cb:68:fb:af:87:4e:d4:d5:cb:
04:24:50:51:8a:12:b4:ad:7a:78:4d:a7:6d:11:aa:a0:7f:c7:
4c:2f:1c:cf:99:74:b0:17:a9:ba:74:2c:6e:a5:b5:ae:22:22:
35:2c:b2:b4:47:7a:00:9f:4f:84:82:fb:97:cd:1e:c0:56:6e:
64:1f:ee:5c:6d:ba:36:60:f5:bc:9f:32:d4:12:54:c9:47:a2:
92:be:a1:fb:28:0e:a6:3d:4a:71:d5:ff:15:21:92:86:8e:95:
22:03:ec:42
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEikAL8LIt0fQfW0QgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDdhNmZiYzQtNTllMi00OWI0LWEzNDUtM2VkZGU4MWYy
NmE0MB4XDTI1MDEyMzE0MDA1MloXDTI1MDQyMzEzMDA1MlowLzEtMCsGA1UEAxMk
MGVkNDcxMjQtMjUxYi00MTdjLTgxNWYtMzRiZDdhN2QyY2JkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaJmsExr1JW2J6Q+mWtMPUQNSjGlFu8A5p2Q
fGFa1voksL0IilnSrfyDJbNN99CiCVcWlHWAh9RulJd0AgNB9i+fum0hkIYGCi6A
pZaTljIudGae9B2mN25caAnNDVfzLDgCDU96wa7W3MYvnw/z6IarwKyEirus2/ko
DCaxHjbSIsXIakmkVedL5dbjmwj3+s/gkcVYEa3a5vy6Ydz+ihBzvvtf7FrYPIT+
30TirN4kQDGEuv+K4nS9gL1hIZjaD934P1NqPAmbOAanVyVLdih6poYo8MRGZR6k
6eEhuGtg+shBKUA5zt+RV8k9qbYQXSqbEgjwQQsaE8mFN0ZcCQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLS4fsSMzK/MR2aMTfAW7p5GtT3NMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80N2E2
ZmJjNC01OWUyLTQ5YjQtYTM0NS0zZWRkZTgxZjI2YTQvMjA5ZjA1YjAtMTYyOC0z
MWU5LWExOTItMGM3YmU5YWNhMWI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDdhNmZiYzQtNTllMi00OWI0LWEz
NDUtM2VkZGU4MWYyNmE0LzQ3YTZmYmM0LTU5ZTItNDliNC1hMzQ1LTNlZGRlODFm
MjZhNC5jcmwwHwYDVR0jBBgwFoAU8A3+W3wnOkCARHzodZuLMa3LV1wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80N2E2ZmJjNC01OWUyLTQ5YjQtYTM0NS0zZWRk
ZTgxZjI2YTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQiFgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEIWTDgk4K/4GvKQ/cwjYWAov52otmsMQD/xN5+DQyzSSudSN5sDuWW4
CYlwIeminAo6Sf/o7H/Vs8XasP+gmNI75sK6WYUumbcxFD0QjMx9lETlQdtrW9DH
vrMAZ6pzHAexzYhIJZlYOYPnbT/ROSuZI0W5vP3SJnO7tTgb3XlYp3ypsP4eZb7+
W0/IncfwVDbU7AoEJbOS9sto+6+HTtTVywQkUFGKErStenhNp20RqqB/x0wvHM+Z
dLAXqbp0LG6lta4iIjUssrRHegCfT4SC+5fNHsBWbmQf7lxtujZg9byfMtQSVMlH
opK+ofsoDqY9SnHV/xUhkoaOlSID7EI=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:13:00 2025 by rpki-client