Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/18a2f7cf-2c91-44c2-a109-17138ef87fcc/7b3dcf11-208f-3819-b32d-5cca7bef5de2.roa
File: 7b3dcf11-208f-3819-b32d-5cca7bef5de2.roa (raw, json)
Hash identifier: 0qhbjUX9CbZ8ArjlopLpl9oqiK7E6aesVm7AzmQCuVo=
Subject key identifier: 9E:1C:6E:A9:9E:BF:A3:C3:32:02:EB:84:48:D1:B4:ED:1B:04:FC:57
Certificate issuer: /CN=18a2f7cf-2c91-44c2-a109-17138ef87fcc
Certificate serial: 010D0C9F4328584902EC17B6803B4F9FEC05D700
Authority key identifier: 66:06:53:1B:FE:2C:EE:A0:B5:C1:45:EB:7A:10:2B:28:AE:13:84:06
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/18a2f7cf-2c91-44c2-a109-17138ef87fcc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/18a2f7cf-2c91-44c2-a109-17138ef87fcc/7b3dcf11-208f-3819-b32d-5cca7bef5de2.roa
Signing time: Wed 26 Feb 2025 14:00:51 +0000
ROA not before: Wed 26 Feb 2025 14:00:51 +0000
ROA not after: Tue 27 May 2025 13:00:51 +0000
asID: 13781
IP address blocks: 66.255.240.0/21 maxlen: 24
66.255.248.0/22 maxlen: 24
66.255.252.0/24 maxlen: 24
66.255.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:02:ec:17:b6:80:3b:4f:9f:ec:05:d7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18a2f7cf-2c91-44c2-a109-17138ef87fcc
Validity
Not Before: Feb 26 14:00:51 2025 GMT
Not After : May 27 13:00:51 2025 GMT
Subject: CN=4a0c84e0-3593-4957-b3e3-776fa920195f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5c:bb:75:a2:58:d7:a9:58:2a:93:0b:95:e5:
e3:10:a3:c7:07:8c:e5:d1:43:56:18:13:2f:b8:21:
6c:a9:33:09:60:da:df:81:e4:58:8f:11:d5:f8:31:
c6:9c:71:01:f2:13:e1:e3:f3:94:7a:01:47:72:fc:
02:dc:de:2f:c0:65:00:91:25:85:cb:fb:54:60:30:
dc:b3:60:76:21:d4:34:4c:de:91:50:f0:6c:6a:5d:
d9:11:45:dd:56:13:8a:69:36:85:6d:ee:bb:f6:70:
5d:ea:30:c0:2a:2a:16:0b:de:18:b6:6b:28:e4:59:
fa:87:34:0f:ff:ad:0a:7a:bc:f0:05:0e:1a:1c:f2:
b5:20:4e:05:c5:ea:bc:5e:0c:c4:f5:c7:56:81:47:
3a:2c:f7:dc:1f:ac:2d:9c:73:e1:b4:08:7e:8c:00:
9a:ea:8c:a6:88:b0:9d:a3:42:56:9f:89:b4:21:01:
a1:7d:44:4d:7f:83:29:c7:f7:46:e9:83:a8:77:33:
8c:a4:3c:a2:f8:e0:e6:c0:9a:4a:2c:e2:60:3e:25:
4f:f4:f2:ea:1e:fe:7a:d8:5c:f3:3f:84:ac:7b:22:
02:24:83:4f:0c:b3:c3:d3:d2:e7:cf:35:81:24:a6:
7e:96:79:a3:db:e6:ab:12:5d:17:ec:02:cb:59:ad:
91:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:1C:6E:A9:9E:BF:A3:C3:32:02:EB:84:48:D1:B4:ED:1B:04:FC:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/18a2f7cf-2c91-44c2-a109-17138ef87fcc/7b3dcf11-208f-3819-b32d-5cca7bef5de2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/18a2f7cf-2c91-44c2-a109-17138ef87fcc/18a2f7cf-2c91-44c2-a109-17138ef87fcc.crl
X509v3 Authority Key Identifier:
keyid:66:06:53:1B:FE:2C:EE:A0:B5:C1:45:EB:7A:10:2B:28:AE:13:84:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/18a2f7cf-2c91-44c2-a109-17138ef87fcc.cer
sbgp-ipAddrBlock: critical
IPv4:
66.255.240.0-66.255.252.255
66.255.255.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:0c:6f:2a:75:5f:bd:61:b5:97:0d:d7:27:8a:af:78:ab:15:
3d:65:cd:ce:33:9f:19:74:cb:3b:d5:40:85:12:b9:35:e6:d8:
7d:a1:66:22:fc:2c:a7:d3:3c:7b:80:63:c7:5a:e3:63:82:07:
b9:21:02:a2:48:37:c7:75:68:3b:2d:c9:5a:42:f7:57:30:92:
cb:48:17:86:9a:99:c3:f9:c6:80:b9:70:a5:93:18:5e:f3:23:
78:17:f4:80:d3:d1:8b:2e:8b:e2:f0:ae:5a:b4:a0:28:5a:64:
d5:be:34:12:02:3f:1b:cc:bd:0c:a9:75:a7:b4:97:23:e0:fb:
da:37:2d:db:5f:d2:ba:98:af:38:5d:8a:b4:28:2d:da:1f:69:
a0:a1:fe:94:3e:a1:7d:1a:eb:ca:f8:fc:b3:8a:81:87:06:b6:
2d:09:07:f4:f4:e3:b8:e9:5b:77:75:f5:63:56:1b:c1:fe:59:
fb:6f:d9:f9:3f:97:10:35:62:3e:85:39:6d:54:24:22:15:17:
e2:13:96:d8:d6:ec:f6:60:bb:50:1b:c0:74:4f:71:40:46:35:
cf:2f:2b:e3:98:a4:47:62:dd:0c:4a:94:39:6c:32:4d:c0:e9:
81:a9:7e:14:d9:83:ea:29:ce:76:28:97:78:3c:5d:f2:d7:27:
a3:78:2d:08
-----BEGIN CERTIFICATE-----
MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWEkC7Be2gDtPn+wF1wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMThhMmY3Y2YtMmM5MS00NGMyLWExMDktMTcxMzhlZjg3
ZmNjMB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk
NGEwYzg0ZTAtMzU5My00OTU3LWIzZTMtNzc2ZmE5MjAxOTVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVy7daJY16lYKpMLleXjEKPHB4zl0UNWGBMv
uCFsqTMJYNrfgeRYjxHV+DHGnHEB8hPh4/OUegFHcvwC3N4vwGUAkSWFy/tUYDDc
s2B2IdQ0TN6RUPBsal3ZEUXdVhOKaTaFbe679nBd6jDAKioWC94Ytmso5Fn6hzQP
/60KerzwBQ4aHPK1IE4Fxeq8XgzE9cdWgUc6LPfcH6wtnHPhtAh+jACa6oymiLCd
o0JWn4m0IQGhfURNf4Mpx/dG6YOodzOMpDyi+ODmwJpKLOJgPiVP9PLqHv562Fzz
P4SseyICJINPDLPD09LnzzWBJKZ+lnmj2+arEl0X7ALLWa2RUwIDAQABo4IDYzCC
A18wHQYDVR0OBBYEFJ4cbqmev6PDMgLrhEjRtO0bBPxXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xOGEy
ZjdjZi0yYzkxLTQ0YzItYTEwOS0xNzEzOGVmODdmY2MvN2IzZGNmMTEtMjA4Zi0z
ODE5LWIzMmQtNWNjYTdiZWY1ZGUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMThhMmY3Y2YtMmM5MS00NGMyLWEx
MDktMTcxMzhlZjg3ZmNjLzE4YTJmN2NmLTJjOTEtNDRjMi1hMTA5LTE3MTM4ZWY4
N2ZjYy5jcmwwHwYDVR0jBBgwFoAUZgZTG/4s7qC1wUXrehArKK4ThAYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8xOGEyZjdjZi0yYzkxLTQ0YzItYTEwOS0xNzEz
OGVmODdmY2MuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBARC//AD
BABC//wDBABC//8wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF
BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt
bDANBgkqhkiG9w0BAQsFAAOCAQEAXwxvKnVfvWG1lw3XJ4qveKsVPWXNzjOfGXTL
O9VAhRK5NebYfaFmIvwsp9M8e4Bjx1rjY4IHuSECokg3x3VoOy3JWkL3VzCSy0gX
hpqZw/nGgLlwpZMYXvMjeBf0gNPRiy6L4vCuWrSgKFpk1b40EgI/G8y9DKl1p7SX
I+D72jct21/SupivOF2KtCgt2h9poKH+lD6hfRrryvj8s4qBhwa2LQkH9PTjuOlb
d3X1Y1Ybwf5Z+2/Z+T+XEDViPoU5bVQkIhUX4hOW2Nbs9mC7UBvAdE9xQEY1zy8r
45ikR2LdDEqUOWwyTcDpgal+FNmD6inOdiiXeDxd8tcno3gtCA==
-----END CERTIFICATE-----
Generated at Mon Apr 7 14:18:41 2025 by rpki-client