Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0d6dea67-8e7a-30f1-9fda-e86e9a762509.roa
File: 0d6dea67-8e7a-30f1-9fda-e86e9a762509.roa (raw, json)
Hash identifier: i+9QQIUN5aUN2ZuJ38OgCcjvQEyt8pdUGbpN04BhK6Q=
Subject key identifier: 9A:5E:F8:31:B7:1A:7C:1A:EE:73:73:02:1E:F7:DF:BB:60:38:22:3B
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848D6FD64D79DF33BE646E0CD80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0d6dea67-8e7a-30f1-9fda-e86e9a762509.roa
Signing time: Mon 10 Feb 2025 20:20:26 +0000
ROA not before: Mon 10 Feb 2025 20:20:26 +0000
ROA not after: Sun 11 May 2025 19:20:26 +0000
asID: 401152
IP address blocks: 108.165.246.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d6:fd:64:d7:9d:f3:3b:e6:46:e0:cd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Feb 10 20:20:26 2025 GMT
Not After : May 11 19:20:26 2025 GMT
Subject: CN=f244d910-3751-49d5-9172-715dcd6d55ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e6:8e:bb:08:e7:3e:be:8b:49:20:8a:96:15:
5f:86:95:60:4c:f3:37:a4:d8:32:76:0f:29:18:07:
00:80:f7:00:7e:42:da:41:c9:28:77:94:a9:9a:5a:
2a:96:b9:9c:72:0e:7f:e2:bc:49:61:a7:1a:5d:ad:
4a:e2:08:a2:67:17:0f:c7:02:8e:7e:f4:f0:18:d4:
57:7c:c9:ba:8b:6d:68:1f:78:73:07:5f:2f:0e:b6:
9a:db:1e:66:9a:f8:1b:d6:f7:ec:ba:46:d9:7c:75:
b4:df:28:5b:5a:35:14:fc:31:64:fb:52:ce:c0:61:
63:f9:58:f5:6f:41:bd:f0:22:30:42:97:1e:5f:f8:
b1:4b:45:ee:41:04:7a:93:8d:48:14:73:c9:4d:4a:
23:d2:39:94:c7:8d:f8:72:7d:b8:21:cb:41:ec:c4:
fe:4d:d7:3e:a7:29:00:af:ba:a3:8e:60:85:ba:6c:
1f:5e:6a:03:5b:45:f9:97:39:38:49:d9:e4:dc:c5:
e5:30:32:5e:36:e0:9f:45:3b:32:7c:98:c7:66:74:
99:c2:07:8a:29:92:e6:d7:a6:35:51:ca:d1:95:c2:
ed:18:05:d7:e9:57:03:3c:36:c8:a1:91:7d:5f:30:
a8:60:5c:e5:c3:9a:ac:a4:b9:bb:29:70:c7:46:b1:
40:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:5E:F8:31:B7:1A:7C:1A:EE:73:73:02:1E:F7:DF:BB:60:38:22:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0d6dea67-8e7a-30f1-9fda-e86e9a762509.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.246.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:3b:b1:40:c0:94:b0:6a:c1:17:3c:95:8e:7f:ab:ba:8a:0e:
e9:fa:a1:51:b2:c3:d4:a6:7d:a6:75:97:0d:10:b8:9d:88:69:
c1:da:4f:08:1e:42:e7:45:3a:0a:76:f8:ce:67:a9:50:d0:80:
e4:a5:22:ca:40:e6:ba:0a:ff:15:a4:b8:b3:2c:df:38:89:34:
bb:a4:72:4c:c9:e3:3a:ab:87:58:17:16:c6:90:cf:ef:1f:5a:
4b:cd:1a:7d:15:52:dc:54:7a:9c:04:55:e6:f6:61:ed:2f:ab:
6d:3d:82:00:b6:40:09:7c:ed:91:66:77:24:ff:59:37:3f:9f:
b4:6e:eb:c4:c5:bc:4f:cd:79:06:d7:be:a0:8e:ae:08:d3:2d:
79:01:3a:dc:fd:6f:29:c8:0b:a3:bb:b3:2a:2d:04:d6:d9:30:
6e:af:a6:b6:e4:6e:a5:72:ea:2d:29:3b:bc:ec:4a:5a:e4:3a:
2d:84:ca:16:07:c4:73:84:17:91:91:0f:a7:22:9a:5c:79:82:
1e:f9:d7:17:6b:1d:51:45:fc:35:e0:59:ac:c8:09:7e:69:de:
33:6d:93:c8:25:4b:ca:ea:fc:2f:0b:8a:35:d2:ba:40:32:29:
6f:5e:5a:ec:22:43:00:5a:f5:05:af:fa:ad:8b:62:59:e0:bc:
a2:e5:a8:01
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjW/WTXnfM75kbgzYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDIxMDIwMjAyNloXDTI1MDUxMTE5MjAyNlowLzEtMCsGA1UEAxMk
ZjI0NGQ5MTAtMzc1MS00OWQ1LTkxNzItNzE1ZGNkNmQ1NWVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuaOuwjnPr6LSSCKlhVfhpVgTPM3pNgydg8p
GAcAgPcAfkLaQckod5Spmloqlrmccg5/4rxJYacaXa1K4giiZxcPxwKOfvTwGNRX
fMm6i21oH3hzB18vDraa2x5mmvgb1vfsukbZfHW03yhbWjUU/DFk+1LOwGFj+Vj1
b0G98CIwQpceX/ixS0XuQQR6k41IFHPJTUoj0jmUx434cn24IctB7MT+Tdc+pykA
r7qjjmCFumwfXmoDW0X5lzk4Sdnk3MXlMDJeNuCfRTsyfJjHZnSZwgeKKZLm16Y1
UcrRlcLtGAXX6VcDPDbIoZF9XzCoYFzlw5qspLm7KXDHRrFATwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJpe+DG3Gnwa7nNzAh7337tgOCI7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMGQ2ZGVhNjctOGU3YS0z
MGYxLTlmZGEtZTg2ZTlhNzYyNTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKX2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA87sUDAlLBqwRc8lY5/q7qKDun6oVGyw9SmfaZ1lw0QuJ2IacHaTwge
QudFOgp2+M5nqVDQgOSlIspA5roK/xWkuLMs3ziJNLukckzJ4zqrh1gXFsaQz+8f
WkvNGn0VUtxUepwEVeb2Ye0vq209ggC2QAl87ZFmdyT/WTc/n7Ru68TFvE/NeQbX
vqCOrgjTLXkBOtz9bynIC6O7syotBNbZMG6vprbkbqVy6i0pO7zsSlrkOi2EyhYH
xHOEF5GRD6cimlx5gh751xdrHVFF/DXgWazICX5p3jNtk8glS8rq/C8LijXSukAy
KW9eWuwiQwBa9QWv+q2LYlngvKLlqAE=
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:50:07 2025 by rpki-client