Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/f9de0df3-45cd-363b-a010-4dcc209f6ad8.roa
File: f9de0df3-45cd-363b-a010-4dcc209f6ad8.roa (raw, json)
Hash identifier: LGnJM18Y7b/6z+AUkWKC/Js6hAuWUnrUM0Y3MDqmZqE=
Subject key identifier: 03:EC:6D:07:21:84:A1:74:B6:35:12:EE:50:C6:1E:8B:18:EE:D8:74
Certificate issuer: /CN=8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd
Certificate serial: 010D0C9F432858488DAB464F4CA181901312A600
Authority key identifier: 97:FC:85:1D:72:C6:73:DC:60:DC:E4:F3:FA:12:C4:FA:2B:F3:46:70
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/f9de0df3-45cd-363b-a010-4dcc209f6ad8.roa
Signing time: Wed 15 Jan 2025 14:00:51 +0000
ROA not before: Wed 15 Jan 2025 14:00:51 +0000
ROA not after: Tue 15 Apr 2025 13:00:51 +0000
asID: 47065
IP address blocks: 66.180.190.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8d:ab:46:4f:4c:a1:81:90:13:12:a6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd
Validity
Not Before: Jan 15 14:00:51 2025 GMT
Not After : Apr 15 13:00:51 2025 GMT
Subject: CN=fcc3cd73-5505-4131-9c49-504a88570f2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:b7:e1:a6:0a:28:43:3d:4b:21:a2:7d:f2:d8:
2f:92:cc:45:81:58:c5:88:88:fc:c9:7b:13:bd:a2:
52:bf:7d:d4:ae:be:e0:b3:c8:27:77:fb:c1:e1:68:
c8:62:6e:3e:fd:e0:ba:ad:4c:80:c7:21:61:fa:1f:
cf:a0:e3:f7:e7:bf:1a:61:ce:9b:f0:07:b4:df:6f:
4e:b3:6e:a2:27:02:7c:b3:10:53:d9:f2:e0:ff:e1:
79:fa:21:26:2e:12:1e:21:b4:8f:0a:4d:d6:0b:46:
dd:52:8b:c7:c0:62:33:c7:21:98:31:25:55:98:b9:
3b:79:cd:17:b7:a3:bd:4e:47:19:11:1c:b6:d6:64:
3c:9f:7d:85:81:b2:c8:3b:51:5e:ac:44:fe:66:8d:
39:71:76:b9:64:d1:a5:9d:fb:6a:6f:fa:d8:94:6b:
8b:c3:0c:69:0c:95:fa:0e:55:12:49:8b:f3:3c:89:
97:ac:2f:8a:8a:73:ab:6a:ed:3d:84:2c:8f:2e:13:
9b:21:7d:f2:ce:29:7a:1a:dc:d5:b3:63:0e:95:05:
32:a1:ba:ac:14:1e:0f:57:3a:91:b0:35:d7:ec:ca:
72:af:7b:76:25:5a:39:f3:3d:49:90:76:14:25:88:
e5:ac:4f:de:36:29:f5:78:a5:bb:24:07:b2:73:32:
66:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:EC:6D:07:21:84:A1:74:B6:35:12:EE:50:C6:1E:8B:18:EE:D8:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/f9de0df3-45cd-363b-a010-4dcc209f6ad8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.crl
X509v3 Authority Key Identifier:
keyid:97:FC:85:1D:72:C6:73:DC:60:DC:E4:F3:FA:12:C4:FA:2B:F3:46:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer
sbgp-ipAddrBlock: critical
IPv4:
66.180.190.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:90:3a:ab:a9:80:6f:30:55:dc:4e:40:5e:d2:34:5a:5b:06:
b2:ef:05:4f:7d:a8:d3:ed:ab:0b:d4:93:6e:98:5b:20:47:c2:
de:53:5e:28:ff:4f:5f:a5:23:22:af:05:18:8a:99:65:c2:6c:
88:77:d1:14:58:ad:3a:ea:ca:2a:c2:58:8b:64:b4:e1:cd:da:
3b:3b:6d:7b:db:5e:45:63:96:fc:4c:ad:de:05:bb:e2:83:b1:
a0:fb:0e:8d:8a:a6:24:0b:02:12:68:9e:af:4c:fc:d8:78:bc:
3c:82:b1:fd:25:9b:70:0d:b0:6e:e8:bf:51:9c:88:13:3b:df:
32:2f:ef:c1:19:72:09:83:bc:31:e0:2b:d8:65:73:02:84:d0:
39:3c:16:f2:97:65:9b:83:60:61:7c:87:01:eb:11:fe:27:74:
96:0b:e4:98:6e:d0:1a:a2:f8:55:9f:0d:27:0f:99:4f:b7:5e:
7d:30:70:f0:8d:bf:de:70:48:42:fe:17:e3:99:08:9d:1f:69:
10:fb:13:4b:08:cf:c3:93:83:7a:49:21:81:48:96:46:84:17:
a4:89:4f:af:7b:a9:cb:cc:8e:32:af:6b:24:2c:c2:10:83:cf:
ab:3a:21:49:61:ee:cb:c4:3e:ef:38:b6:43:9a:4d:64:60:ad:
39:66:a2:90
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiNq0ZPTKGBkBMSpgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGJmYzE2ZmUtYmYwYS00ZjNhLWE2NWUtMjE3ZDhmOGMz
ZWNkMB4XDTI1MDExNTE0MDA1MVoXDTI1MDQxNTEzMDA1MVowLzEtMCsGA1UEAxMk
ZmNjM2NkNzMtNTUwNS00MTMxLTljNDktNTA0YTg4NTcwZjJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5rfhpgooQz1LIaJ98tgvksxFgVjFiIj8yXsT
vaJSv33Urr7gs8gnd/vB4WjIYm4+/eC6rUyAxyFh+h/PoOP3578aYc6b8Ae0329O
s26iJwJ8sxBT2fLg/+F5+iEmLhIeIbSPCk3WC0bdUovHwGIzxyGYMSVVmLk7ec0X
t6O9TkcZERy21mQ8n32FgbLIO1FerET+Zo05cXa5ZNGlnftqb/rYlGuLwwxpDJX6
DlUSSYvzPImXrC+KinOrau09hCyPLhObIX3yzil6GtzVs2MOlQUyobqsFB4PVzqR
sDXX7Mpyr3t2JVo58z1JkHYUJYjlrE/eNin1eKW7JAeyczJm1wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAPsbQchhKF0tjUS7lDGHosY7th0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84YmZj
MTZmZS1iZjBhLTRmM2EtYTY1ZS0yMTdkOGY4YzNlY2QvZjlkZTBkZjMtNDVjZC0z
NjNiLWEwMTAtNGRjYzIwOWY2YWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOGJmYzE2ZmUtYmYwYS00ZjNhLWE2
NWUtMjE3ZDhmOGMzZWNkLzhiZmMxNmZlLWJmMGEtNGYzYS1hNjVlLTIxN2Q4Zjhj
M2VjZC5jcmwwHwYDVR0jBBgwFoAUl/yFHXLGc9xg3OTz+hLE+ivzRnAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84YmZjMTZmZS1iZjBhLTRmM2EtYTY1ZS0yMTdk
OGY4YzNlY2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQrS+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHuQOqupgG8wVdxOQF7SNFpbBrLvBU99qNPtqwvUk26YWyBHwt5TXij/
T1+lIyKvBRiKmWXCbIh30RRYrTrqyirCWItktOHN2js7bXvbXkVjlvxMrd4Fu+KD
saD7Do2KpiQLAhJonq9M/Nh4vDyCsf0lm3ANsG7ov1GciBM73zIv78EZcgmDvDHg
K9hlcwKE0Dk8FvKXZZuDYGF8hwHrEf4ndJYL5Jhu0Bqi+FWfDScPmU+3Xn0wcPCN
v95wSEL+F+OZCJ0faRD7E0sIz8OTg3pJIYFIlkaEF6SJT697qcvMjjKvayQswhCD
z6s6IUlh7svEPu84tkOaTWRgrTlmopA=
-----END CERTIFICATE-----
Generated at Wed Apr 9 05:11:25 2025 by rpki-client