Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/be8f58f7-002e-3d7d-afd2-cab8d90abd25.roa
File: be8f58f7-002e-3d7d-afd2-cab8d90abd25.roa (raw, json)
Hash identifier: h1lnx1NwDAlDQyJEdqLtAkQelowgMVhsTbNyw6mabqs=
Subject key identifier: E2:FC:DA:53:B7:45:68:2B:85:1B:29:CF:C6:2E:E5:F1:95:EA:CF:B5
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F43285848E2D1FD0D312F98F564930840
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/be8f58f7-002e-3d7d-afd2-cab8d90abd25.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 20115
IP address blocks: 66.188.144.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:fd:0d:31:2f:98:f5:64:93:08:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=e2856fa5-8cba-4f1d-a785-b07e2b733eae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:40:8d:07:bc:71:94:a1:32:fc:cb:5e:09:47:
35:25:62:f7:2a:1b:65:b9:c9:1d:36:d1:eb:94:d8:
dd:24:15:4d:ae:81:5f:3a:6d:65:bd:da:13:af:e5:
a1:2c:02:5d:1c:e0:75:95:c6:dd:ac:28:2b:1e:56:
1a:7f:f8:86:af:02:e3:7c:02:3c:50:2e:4b:a8:7d:
b1:bb:b6:9a:a2:e7:e6:02:eb:27:ea:e1:ab:1f:16:
d5:a7:c2:66:91:3e:58:13:c4:ea:0e:6a:96:d0:b0:
9c:35:dc:9e:28:f9:5d:4d:3a:d3:34:3d:84:e4:64:
d7:62:43:92:be:fc:80:61:11:22:10:43:7e:f4:29:
90:c1:b8:a9:b9:46:7c:b2:8f:6f:2d:fc:30:a7:a1:
36:c3:07:38:f8:7d:43:95:ab:66:e1:8f:52:cc:9a:
4a:6c:fe:6e:4d:04:49:80:43:d5:ed:20:f6:a0:53:
93:83:20:2e:a2:da:69:bb:b9:28:2f:c4:94:4d:62:
da:e1:1e:f3:51:e0:c7:88:b5:74:2a:3d:4c:45:43:
b8:0d:fc:dd:68:58:bf:56:94:81:b0:4f:f5:6a:0b:
c4:89:99:9c:a4:14:b4:4c:84:35:f0:ee:2c:6b:02:
e7:a0:51:df:75:f9:fe:cc:e3:11:24:e8:8f:a1:8d:
1f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:FC:DA:53:B7:45:68:2B:85:1B:29:CF:C6:2E:E5:F1:95:EA:CF:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/be8f58f7-002e-3d7d-afd2-cab8d90abd25.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
66.188.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:eb:07:0d:9f:6b:3c:47:bc:71:8a:0f:49:31:c4:e3:99:74:
ad:d9:7b:d7:c8:d7:3b:47:f1:d6:17:9d:b8:39:5c:96:8a:e8:
e9:4b:3d:2e:70:1b:91:26:b3:2d:57:a8:63:37:ec:24:1d:ef:
ac:d0:b0:4f:d2:6e:21:98:69:6f:b6:d0:eb:5c:b2:e7:93:65:
a6:26:41:d0:e8:5a:be:60:f2:0a:30:0d:45:b4:c1:7f:90:e1:
16:2b:4a:a7:c1:8b:53:6d:ef:67:6f:9f:e7:49:0c:d0:35:76:
66:6e:e0:a4:15:c4:33:03:c1:0b:8a:2a:1e:44:d3:3e:1c:54:
0a:92:d8:c7:8d:94:50:30:14:ba:77:66:9d:b2:4b:3f:78:35:
80:4a:01:cb:a1:47:54:8b:b5:4a:e7:1b:1d:ee:5c:1b:e4:5f:
e9:69:a3:08:75:31:56:19:d7:74:16:e8:84:5e:a7:eb:72:78:
86:ff:1c:ae:62:01:ba:c5:d8:0b:9c:ba:ab:c4:ac:85:b0:d1:
dc:42:e4:96:99:5f:38:fb:69:8b:61:3d:a3:bc:ee:b6:bf:bf:
fd:ae:cf:77:61:42:75:09:57:86:df:d3:22:f2:99:cd:05:7e:
ee:cb:81:87:13:c9:6a:d5:1c:d8:8c:bd:81:d5:93:4d:ba:3b:
00:46:c7:e1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0f0NMS+Y9WSTCEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk
ZTI4NTZmYTUtOGNiYS00ZjFkLWE3ODUtYjA3ZTJiNzMzZWFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkCNB7xxlKEy/MteCUc1JWL3KhtluckdNtHr
lNjdJBVNroFfOm1lvdoTr+WhLAJdHOB1lcbdrCgrHlYaf/iGrwLjfAI8UC5LqH2x
u7aaoufmAusn6uGrHxbVp8JmkT5YE8TqDmqW0LCcNdyeKPldTTrTND2E5GTXYkOS
vvyAYREiEEN+9CmQwbipuUZ8so9vLfwwp6E2wwc4+H1Dlatm4Y9SzJpKbP5uTQRJ
gEPV7SD2oFOTgyAuotppu7koL8SUTWLa4R7zUeDHiLV0Kj1MRUO4DfzdaFi/VpSB
sE/1agvEiZmcpBS0TIQ18O4sawLnoFHfdfn+zOMRJOiPoY0fmwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOL82lO3RWgrhRspz8Yu5fGV6s+1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvYmU4ZjU4ZjctMDAyZS0z
ZDdkLWFmZDItY2FiOGQ5MGFiZDI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQryQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFTrBw2fazxHvHGKD0kxxOOZdK3Ze9fI1ztH8dYXnbg5XJaK6OlLPS5w
G5Emsy1XqGM37CQd76zQsE/SbiGYaW+20OtcsueTZaYmQdDoWr5g8gowDUW0wX+Q
4RYrSqfBi1Nt72dvn+dJDNA1dmZu4KQVxDMDwQuKKh5E0z4cVAqS2MeNlFAwFLp3
Zp2ySz94NYBKAcuhR1SLtUrnGx3uXBvkX+lpowh1MVYZ13QW6IRep+tyeIb/HK5i
AbrF2AucuqvErIWw0dxC5JaZXzj7aYthPaO87ra/v/2uz3dhQnUJV4bf0yLymc0F
fu7LgYcTyWrVHNiMvYHVk026OwBGx+E=
-----END CERTIFICATE-----
Generated at Sun Apr 6 22:38:15 2025 by rpki-client