Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ca54ebdf-2178-33e1-8f18-10c1abac0c88.roa
File: ca54ebdf-2178-33e1-8f18-10c1abac0c88.roa (raw, json)
Hash identifier: LgkUjpGgD1XLxZgs2LFwIyFPo4I1IXn/iIerRtPQOEQ=
Subject key identifier: 52:42:51:D7:0C:A0:15:99:EE:D8:A5:A0:B9:2C:15:54:8B:77:D1:5C
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584921343414D3AD99316090D080
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ca54ebdf-2178-33e1-8f18-10c1abac0c88.roa
Signing time: Sun 09 Mar 2025 10:20:41 +0000
ROA not before: Sun 09 Mar 2025 10:20:41 +0000
ROA not after: Sat 07 Jun 2025 10:20:41 +0000
asID: 40439
IP address blocks: 142.176.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:34:34:14:d3:ad:99:31:60:90:d0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 9 10:20:41 2025 GMT
Not After : Jun 7 10:20:41 2025 GMT
Subject: CN=b323d690-e752-4d35-bd26-bc6de098e107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0e:d6:55:3a:d3:19:d6:d9:39:52:5b:86:f8:
35:06:34:4d:68:72:22:c1:ad:eb:56:e0:1c:f1:dd:
24:c8:03:86:cc:57:3d:d7:b0:97:99:43:a3:ff:58:
72:3a:2c:f3:08:0e:a7:5c:02:6a:31:6a:d6:70:05:
37:cc:98:13:31:d4:64:03:ad:1a:7c:ef:ee:4b:cd:
f2:21:5f:01:cd:9c:f6:97:65:03:ff:00:cd:9b:71:
68:6c:a9:e8:e1:be:4a:74:58:f4:9e:37:3c:21:fb:
92:59:97:cd:b8:43:ad:04:07:24:e1:cf:ce:e5:0c:
8c:18:ee:87:bc:02:15:24:67:41:f9:71:ce:b3:17:
b0:60:0a:9f:f9:e1:48:c6:95:a7:1d:7a:a2:c8:80:
9d:2f:1c:de:32:69:38:21:19:37:f2:d1:42:75:92:
36:dc:51:b1:28:13:c7:3a:1b:b0:a0:70:5b:c0:0d:
ec:10:e1:e6:a2:da:cf:78:93:b5:63:57:0d:97:af:
54:4e:6c:46:cb:c8:38:0d:b4:3d:25:6f:73:fa:9d:
d6:d6:92:a2:05:d4:de:fa:35:54:a9:a7:de:24:55:
66:a0:aa:50:f0:91:a7:87:82:47:53:49:07:8f:c5:
80:b7:9a:95:80:63:c7:09:5a:c6:f7:26:2e:cf:4f:
00:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:42:51:D7:0C:A0:15:99:EE:D8:A5:A0:B9:2C:15:54:8B:77:D1:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ca54ebdf-2178-33e1-8f18-10c1abac0c88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
142.176.66.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:30:8d:05:f2:27:dc:12:ee:2a:5c:ed:89:82:93:03:f0:f9:
78:33:61:65:b6:99:f6:48:63:cb:56:6a:77:7a:6f:88:cd:b2:
08:07:d3:1f:5c:b2:6f:3b:97:2e:d5:52:25:cc:ef:07:7b:40:
46:7f:7e:6a:5d:a7:e6:7d:2e:30:53:b1:f0:51:a0:c8:5c:a1:
ea:b2:77:58:f5:59:03:e0:f5:be:e8:e6:6a:1c:cb:57:61:bf:
8a:a9:60:8a:a0:b0:8a:48:9c:31:5f:6b:17:0c:46:5c:c3:7e:
21:f7:e3:92:e7:23:12:7e:9f:8e:df:fd:ae:f1:d3:05:51:45:
fd:77:81:a3:42:7e:08:4d:e3:39:df:35:40:b9:97:e2:59:d2:
fa:bc:ad:bb:1e:08:f6:a2:de:72:90:f4:d5:ba:bb:d2:09:85:
de:f5:6c:17:bd:6b:bc:22:fb:c9:d9:9f:7a:08:02:a1:36:a7:
31:00:69:2f:8b:78:4f:15:fb:ff:48:f2:99:e6:88:1a:cc:1e:
9f:c7:de:35:a7:d3:fb:f2:72:7f:04:3c:d5:29:54:17:c5:d6:
90:4b:e9:df:30:2b:37:00:a9:2b:cf:bb:a6:9f:ae:88:8e:92:
b4:44:64:d1:3b:cc:71:ef:b8:d4:f3:c9:35:33:4d:9c:32:82:
0c:dd:b1:3b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkhNDQU062ZMWCQ0IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI1MDMwOTEwMjA0MVoXDTI1MDYwNzEwMjA0MVowLzEtMCsGA1UEAxMk
YjMyM2Q2OTAtZTc1Mi00ZDM1LWJkMjYtYmM2ZGUwOThlMTA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQ7WVTrTGdbZOVJbhvg1BjRNaHIiwa3rVuAc
8d0kyAOGzFc917CXmUOj/1hyOizzCA6nXAJqMWrWcAU3zJgTMdRkA60afO/uS83y
IV8BzZz2l2UD/wDNm3FobKno4b5KdFj0njc8IfuSWZfNuEOtBAck4c/O5QyMGO6H
vAIVJGdB+XHOsxewYAqf+eFIxpWnHXqiyICdLxzeMmk4IRk38tFCdZI23FGxKBPH
OhuwoHBbwA3sEOHmotrPeJO1Y1cNl69UTmxGy8g4DbQ9JW9z+p3W1pKiBdTe+jVU
qafeJFVmoKpQ8JGnh4JHU0kHj8WAt5qVgGPHCVrG9yYuz08A4wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFJCUdcMoBWZ7tiloLksFVSLd9FcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvY2E1NGViZGYtMjE3OC0z
M2UxLThmMTgtMTBjMWFiYWMwYzg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjrBCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJswjQXyJ9wS7ipc7YmCkwPw+XgzYWW2mfZIY8tWand6b4jNsggH0x9c
sm87ly7VUiXM7wd7QEZ/fmpdp+Z9LjBTsfBRoMhcoeqyd1j1WQPg9b7o5mocy1dh
v4qpYIqgsIpInDFfaxcMRlzDfiH345LnIxJ+n47f/a7x0wVRRf13gaNCfghN4znf
NUC5l+JZ0vq8rbseCPai3nKQ9NW6u9IJhd71bBe9a7wi+8nZn3oIAqE2pzEAaS+L
eE8V+/9I8pnmiBrMHp/H3jWn0/vycn8EPNUpVBfF1pBL6d8wKzcAqSvPu6afroiO
krREZNE7zHHvuNTzyTUzTZwyggzdsTs=
-----END CERTIFICATE-----
Generated at Mon Apr 7 16:54:46 2025 by rpki-client