Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/c2f6db5a-8665-3884-85fd-5bf243a97001.roa
File: c2f6db5a-8665-3884-85fd-5bf243a97001.roa (raw, json)
Hash identifier: xqvMwa5FZ7ERdmDTYg7/L/R+WDwWQksKHduryds1/EA=
Subject key identifier: 3B:0A:21:C8:72:74:B9:14:D2:E4:CA:2B:B0:71:72:C8:70:8D:B1:74
Certificate issuer: /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial: 010D0C9F43285848FD56CF3663D9A750C8DD9380
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/c2f6db5a-8665-3884-85fd-5bf243a97001.roa
Signing time: Mon 24 Feb 2025 14:00:52 +0000
ROA not before: Mon 24 Feb 2025 14:00:52 +0000
ROA not after: Sun 25 May 2025 13:00:52 +0000
asID: 2734
IP address blocks: 66.35.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fd:56:cf:36:63:d9:a7:50:c8:dd:93:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Validity
Not Before: Feb 24 14:00:52 2025 GMT
Not After : May 25 13:00:52 2025 GMT
Subject: CN=8840a9cf-52cd-4eb4-a7c2-a690d0fc32bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4e:37:8e:84:20:b8:3e:b5:92:c7:06:66:69:
aa:5f:5d:a6:5b:7d:ec:dc:9a:06:a7:3d:f8:56:e6:
9f:62:a2:1f:77:22:22:d4:24:38:92:bb:ca:50:73:
2d:b3:09:9d:f2:f6:be:94:f3:dc:0b:54:d6:7e:56:
03:30:de:b0:ca:18:fa:45:ad:47:11:eb:6c:63:a7:
81:b6:8b:20:99:85:34:93:07:3e:c2:e7:37:72:39:
89:4d:30:3e:04:4f:dd:b7:4b:ec:cb:d2:31:d6:81:
c3:10:5b:17:10:17:7c:fd:fc:44:a3:89:ba:2d:5d:
68:6d:7d:c4:a8:f2:ee:63:23:1b:01:27:8b:3b:eb:
8f:05:f7:2a:67:94:f8:1b:4e:bb:1e:cd:e9:a9:26:
52:5a:23:0a:de:30:0f:8f:48:57:7d:7e:f4:b0:af:
a9:57:d6:fc:22:3f:16:b4:60:52:87:2f:c2:60:5b:
7b:1f:6d:3e:c2:95:90:63:05:3c:73:f5:3c:41:67:
bf:e5:24:73:1e:ad:22:07:01:56:08:4e:6b:50:75:
8a:36:88:3b:de:62:68:f3:6c:88:d3:29:69:55:e4:
14:f4:65:77:5b:31:50:c1:fc:a2:8c:20:b5:89:8a:
2f:ff:40:e3:a6:84:23:5b:bc:51:9e:71:3a:44:ce:
32:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:0A:21:C8:72:74:B9:14:D2:E4:CA:2B:B0:71:72:C8:70:8D:B1:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/c2f6db5a-8665-3884-85fd-5bf243a97001.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
X509v3 Authority Key Identifier:
keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
sbgp-ipAddrBlock: critical
IPv4:
66.35.67.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:cc:51:b4:57:80:ce:6a:6f:49:2c:07:17:17:09:ae:ce:fc:
84:1e:66:0b:aa:15:1f:10:1e:6e:b6:63:48:03:17:7e:0d:08:
de:68:0a:01:18:de:8b:63:5a:81:3d:dc:39:ac:22:9c:3b:e0:
d7:39:ad:3b:5b:20:4b:bb:52:77:15:43:93:cc:9b:51:21:94:
8b:6f:19:ef:64:92:74:65:48:ec:2c:c1:bf:38:c5:46:aa:7e:
6d:8f:c8:60:ca:59:6f:05:f7:b3:cf:58:93:2e:f9:d1:07:03:
35:88:e5:cb:57:e9:14:3f:47:6d:12:9c:75:da:12:fd:18:ab:
21:87:cb:ae:a9:33:b0:f8:f9:7e:88:c0:ed:37:b7:47:f8:3f:
2b:7d:a3:54:9d:5f:b3:59:27:d0:e4:30:0f:91:51:91:6d:b7:
bf:07:d3:ae:7b:51:e1:d1:68:41:c4:a9:0e:ae:e3:d5:5f:6a:
9f:eb:79:f6:b8:ea:f2:ed:e7:bc:c9:a6:a0:19:09:5a:b9:e6:
1b:e0:4b:93:b3:c1:05:2e:de:c8:ae:11:fd:6e:db:00:d4:e6:
cb:f2:d8:1d:8e:60:cd:9b:d9:71:86:5a:c3:b5:70:c7:15:b2:
69:80:f5:98:d9:67:94:d4:fa:70:ef:be:2a:3d:9a:3d:f2:b2:
9d:b8:7e:40
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9Vs82Y9mnUMjdk4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjlmNWU0OTYtOGZmOC00MDFmLWFkMjctYTFiNjI0Zjkw
MTRhMB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk
ODg0MGE5Y2YtNTJjZC00ZWI0LWE3YzItYTY5MGQwZmMzMmJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1043joQguD61kscGZmmqX12mW33s3JoGpz34
VuafYqIfdyIi1CQ4krvKUHMtswmd8va+lPPcC1TWflYDMN6wyhj6Ra1HEetsY6eB
tosgmYU0kwc+wuc3cjmJTTA+BE/dt0vsy9Ix1oHDEFsXEBd8/fxEo4m6LV1obX3E
qPLuYyMbASeLO+uPBfcqZ5T4G067Hs3pqSZSWiMK3jAPj0hXfX70sK+pV9b8Ij8W
tGBShy/CYFt7H20+wpWQYwU8c/U8QWe/5SRzHq0iBwFWCE5rUHWKNog73mJo82yI
0ylpVeQU9GV3WzFQwfyijCC1iYov/0DjpoQjW7xRnnE6RM4yKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDsKIchydLkU0uTKK7BxcshwjbF0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yOWY1
ZTQ5Ni04ZmY4LTQwMWYtYWQyNy1hMWI2MjRmOTAxNGEvYzJmNmRiNWEtODY2NS0z
ODg0LTg1ZmQtNWJmMjQzYTk3MDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjlmNWU0OTYtOGZmOC00MDFmLWFk
MjctYTFiNjI0ZjkwMTRhLzI5ZjVlNDk2LThmZjgtNDAxZi1hZDI3LWExYjYyNGY5
MDE0YS5jcmwwHwYDVR0jBBgwFoAUsHS8ugFMyPdv9/jKlpR/Lims27EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8yOWY1ZTQ5Ni04ZmY4LTQwMWYtYWQyNy1hMWI2
MjRmOTAxNGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQiNDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHjMUbRXgM5qb0ksBxcXCa7O/IQeZguqFR8QHm62Y0gDF34NCN5oCgEY
3otjWoE93DmsIpw74Nc5rTtbIEu7UncVQ5PMm1EhlItvGe9kknRlSOwswb84xUaq
fm2PyGDKWW8F97PPWJMu+dEHAzWI5ctX6RQ/R20SnHXaEv0YqyGHy66pM7D4+X6I
wO03t0f4Pyt9o1SdX7NZJ9DkMA+RUZFtt78H0657UeHRaEHEqQ6u49Vfap/refa4
6vLt57zJpqAZCVq55hvgS5OzwQUu3siuEf1u2wDU5svy2B2OYM2b2XGGWsO1cMcV
smmA9ZjZZ5TU+nDvvio9mj3ysp24fkA=
-----END CERTIFICATE-----
Generated at Mon Apr 7 14:12:08 2025 by rpki-client