Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/933cd287-75bf-387a-83e6-d85b86aba33d.roa
File: 933cd287-75bf-387a-83e6-d85b86aba33d.roa (raw, json)
Hash identifier: TLY0wglzfowWGypD2FQCI9P7C7AHtilfeJFMxnYPQ1o=
Subject key identifier: 60:79:FD:84:28:AE:00:2C:9C:E8:AD:44:5B:66:FD:C3:E2:66:05:FD
Certificate issuer: /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial: 010D0C9F43285848FD56CF5AAA932A7FA83A2180
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/933cd287-75bf-387a-83e6-d85b86aba33d.roa
Signing time: Mon 24 Feb 2025 14:00:52 +0000
ROA not before: Mon 24 Feb 2025 14:00:52 +0000
ROA not after: Sun 25 May 2025 13:00:52 +0000
asID: 2734
IP address blocks: 66.35.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fd:56:cf:5a:aa:93:2a:7f:a8:3a:21:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Validity
Not Before: Feb 24 14:00:52 2025 GMT
Not After : May 25 13:00:52 2025 GMT
Subject: CN=ec3ad2e0-2fba-4a2d-808a-2cd26e1a1b34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:00:16:15:37:8a:55:09:b0:c3:de:7a:58:ae:
32:7c:ec:de:32:f6:e2:b4:bb:45:fd:86:d7:15:b4:
b2:28:0d:eb:51:bf:63:0b:3a:b2:00:49:7d:f2:09:
8b:58:9d:0e:02:cf:03:ce:52:cc:97:2b:c4:94:1f:
f6:7d:39:44:29:ea:d5:56:5c:9c:29:96:02:5e:db:
f8:0e:c8:3f:69:9b:22:7e:c8:16:35:13:5e:58:0d:
44:c9:82:a2:b8:6c:3c:48:af:ca:81:c4:89:33:ee:
fc:5f:6c:aa:d6:f0:3f:17:12:dc:c3:2e:fe:cf:98:
10:9a:00:f4:a0:0b:ba:3e:6e:ef:4b:c1:9b:2a:69:
6f:aa:99:cf:56:c3:97:06:de:ed:dc:14:38:62:3c:
4b:92:21:95:e0:07:74:8f:93:97:b4:7d:da:28:6d:
fc:d2:4c:e5:8a:77:9d:59:53:8d:3d:58:d0:b5:43:
b3:59:aa:00:30:e4:59:e8:5a:9a:41:c7:10:4f:14:
85:e7:5c:f2:b7:2c:18:00:8d:80:83:56:07:35:f5:
95:af:88:b0:65:3d:02:66:67:7f:82:d0:a7:9e:da:
1a:32:75:51:cd:56:60:a6:76:0e:dc:b2:e9:7b:fd:
3c:08:af:0c:e8:96:81:2d:41:c0:27:90:1b:ea:47:
64:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:79:FD:84:28:AE:00:2C:9C:E8:AD:44:5B:66:FD:C3:E2:66:05:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/933cd287-75bf-387a-83e6-d85b86aba33d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
X509v3 Authority Key Identifier:
keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
sbgp-ipAddrBlock: critical
IPv4:
66.35.86.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:90:3f:84:db:7f:13:5c:19:76:8b:b8:b8:f5:ae:8d:5d:a8:
96:26:43:4f:0d:f7:8b:47:fd:8b:d4:ae:8f:9d:3f:9f:bb:f4:
ee:07:92:08:0e:9a:50:a1:4c:2d:a6:d5:dc:78:88:8a:57:84:
bf:c6:e1:73:75:12:df:bb:ae:0e:8d:67:85:d3:01:ba:42:00:
0a:aa:2f:61:55:9d:51:5f:b5:72:bf:2c:1c:7c:5a:28:76:88:
e0:9a:91:da:ef:30:87:26:d0:bc:18:d3:2c:6b:90:f9:ba:1b:
e8:75:dd:6e:ca:5e:4b:7c:60:b0:86:b2:af:11:bc:10:72:a6:
1b:dd:b0:55:aa:ff:73:32:47:92:37:57:f3:af:8d:7c:31:3d:
6d:66:18:4d:34:70:85:4d:b0:8d:03:b7:23:a6:80:e0:eb:cd:
b7:ee:40:eb:b2:85:02:71:8e:a3:0b:81:7d:fc:26:1f:8d:45:
93:0f:6d:1f:8c:62:55:9e:bb:ed:73:15:d8:af:2a:d2:e6:bf:
30:0a:de:66:43:bf:00:96:14:a2:98:1d:f8:df:4a:70:50:93:
5a:c6:49:c0:b7:0f:7f:93:d6:92:c1:4b:74:59:a7:0f:05:2f:
6f:79:c8:1f:32:70:16:c2:32:90:d3:e0:50:60:a8:43:6c:f5:
c1:22:21:54
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9Vs9aqpMqf6g6IYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjlmNWU0OTYtOGZmOC00MDFmLWFkMjctYTFiNjI0Zjkw
MTRhMB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk
ZWMzYWQyZTAtMmZiYS00YTJkLTgwOGEtMmNkMjZlMWExYjM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgAWFTeKVQmww956WK4yfOzeMvbitLtF/YbX
FbSyKA3rUb9jCzqyAEl98gmLWJ0OAs8DzlLMlyvElB/2fTlEKerVVlycKZYCXtv4
Dsg/aZsifsgWNRNeWA1EyYKiuGw8SK/KgcSJM+78X2yq1vA/FxLcwy7+z5gQmgD0
oAu6Pm7vS8GbKmlvqpnPVsOXBt7t3BQ4YjxLkiGV4Ad0j5OXtH3aKG380kzlined
WVONPVjQtUOzWaoAMORZ6FqaQccQTxSF51zytywYAI2Ag1YHNfWVr4iwZT0CZmd/
gtCnntoaMnVRzVZgpnYO3LLpe/08CK8M6JaBLUHAJ5Ab6kdkEwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGB5/YQorgAsnOitRFtm/cPiZgX9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yOWY1
ZTQ5Ni04ZmY4LTQwMWYtYWQyNy1hMWI2MjRmOTAxNGEvOTMzY2QyODctNzViZi0z
ODdhLTgzZTYtZDg1Yjg2YWJhMzNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjlmNWU0OTYtOGZmOC00MDFmLWFk
MjctYTFiNjI0ZjkwMTRhLzI5ZjVlNDk2LThmZjgtNDAxZi1hZDI3LWExYjYyNGY5
MDE0YS5jcmwwHwYDVR0jBBgwFoAUsHS8ugFMyPdv9/jKlpR/Lims27EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8yOWY1ZTQ5Ni04ZmY4LTQwMWYtYWQyNy1hMWI2
MjRmOTAxNGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQiNWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEaQP4TbfxNcGXaLuLj1ro1dqJYmQ08N94tH/YvUro+dP5+79O4HkggO
mlChTC2m1dx4iIpXhL/G4XN1Et+7rg6NZ4XTAbpCAAqqL2FVnVFftXK/LBx8Wih2
iOCakdrvMIcm0LwY0yxrkPm6G+h13W7KXkt8YLCGsq8RvBByphvdsFWq/3MyR5I3
V/OvjXwxPW1mGE00cIVNsI0DtyOmgODrzbfuQOuyhQJxjqMLgX38Jh+NRZMPbR+M
YlWeu+1zFdivKtLmvzAK3mZDvwCWFKKYHfjfSnBQk1rGScC3D3+T1pLBS3RZpw8F
L295yB8ycBbCMpDT4FBgqENs9cEiIVQ=
-----END CERTIFICATE-----
Generated at Sat Apr 12 05:33:14 2025 by rpki-client