Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/31f5762a-425a-31dc-b407-6d24f4dc9737.roa
File: 31f5762a-425a-31dc-b407-6d24f4dc9737.roa (raw, json)
Hash identifier: astobQmI2HwxJrAnRfRyQ5TY+8AMROr+SR3DjwnL/fA=
Subject key identifier: 22:80:92:BC:F2:B9:73:10:C2:FF:D9:0E:2B:0C:A0:7F:53:4C:73:D8
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848F926A59BA56ED4B041AE3980
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/31f5762a-425a-31dc-b407-6d24f4dc9737.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 26383
IP address blocks: 166.1.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:a5:9b:a5:6e:d4:b0:41:ae:39:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=31f2a138-455d-4345-a475-d5d0a4a6d630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:4f:4b:bc:b6:4a:91:43:f4:33:4f:2d:85:72:
d7:b2:c0:4c:d5:db:85:42:14:c9:02:3b:da:ce:ad:
81:25:8f:85:53:ae:3a:4e:ea:21:30:3c:66:d3:d5:
8a:94:32:83:d8:d5:c7:cb:ec:c3:2a:4d:41:5c:c2:
18:10:eb:22:96:70:0b:17:36:41:cd:fb:9c:f6:75:
69:a8:89:4e:8d:a8:94:94:d5:07:1a:c8:a2:5e:8e:
37:7c:45:c6:5d:19:04:08:be:ae:1a:63:33:6c:10:
14:69:9f:09:c4:e3:d4:cb:a3:88:4f:95:e1:0e:83:
dc:92:46:11:26:02:c1:1d:c8:e4:0a:38:21:2d:94:
2e:60:c9:ef:57:1f:7e:74:27:3b:50:9e:87:a0:7f:
3c:69:b7:56:65:bd:6f:1a:f4:22:ac:ff:cd:6b:b9:
65:40:b5:79:4e:ca:57:ca:06:2a:e1:ad:ce:8d:bd:
c5:45:f2:6f:d3:97:c2:84:4a:05:82:fe:c2:2b:4f:
eb:1b:79:29:56:a0:18:51:82:7d:68:aa:78:c0:92:
a3:89:5a:3b:aa:ee:57:97:c9:04:18:39:a3:97:57:
17:a1:17:83:3b:88:8a:e2:87:7d:9d:5f:58:9b:a1:
6a:5c:8a:70:fb:25:c1:27:e1:2d:09:2e:ac:9c:fa:
32:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:80:92:BC:F2:B9:73:10:C2:FF:D9:0E:2B:0C:A0:7F:53:4C:73:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/31f5762a-425a-31dc-b407-6d24f4dc9737.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.18.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:67:94:aa:f9:c2:d4:52:06:6c:ba:0f:3e:6a:88:95:32:63:
f7:ae:38:51:97:87:e0:68:f8:eb:85:4b:e5:c1:a9:63:fd:39:
c9:cb:30:68:08:bd:92:fa:e7:b3:6f:d9:a2:43:4e:8d:2d:db:
32:41:22:c2:69:9b:bb:5f:bc:61:44:43:a6:ac:77:08:e3:1d:
f9:b5:a3:af:58:cc:73:74:b3:ad:12:e7:c1:ec:c2:59:a8:df:
55:8b:e5:c0:2e:01:6b:f2:bc:b4:29:b0:bc:18:f4:68:98:91:
30:c3:15:c2:4c:3b:d2:1c:94:44:67:f8:29:e8:a6:d4:89:31:
e8:5c:16:7b:25:77:0b:fc:3d:5b:46:82:1a:b3:13:23:05:e3:
11:7c:c9:11:9a:ac:af:05:37:8f:bf:7b:2d:63:54:00:a4:75:
5e:53:0d:d4:a8:be:36:16:0e:55:56:75:7f:92:31:6d:63:36:
a6:cd:23:dc:2f:5e:16:f7:ad:5f:1e:f6:e4:41:fb:14:97:ec:
3d:69:4f:4f:c3:9e:4f:ca:a0:d7:74:01:0e:3f:04:b1:f7:40:
a6:b5:47:76:7a:7e:84:ee:a1:ad:23:f8:13:0e:3d:3e:cd:f6:
b0:be:53:54:1c:50:b8:2f:f8:d6:a1:ae:42:fe:5f:03:c6:7c:
e4:69:ac:b0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj5JqWbpW7UsEGuOYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk
MzFmMmExMzgtNDU1ZC00MzQ1LWE0NzUtZDVkMGE0YTZkNjMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhU9LvLZKkUP0M08thXLXssBM1duFQhTJAjva
zq2BJY+FU646TuohMDxm09WKlDKD2NXHy+zDKk1BXMIYEOsilnALFzZBzfuc9nVp
qIlOjaiUlNUHGsiiXo43fEXGXRkECL6uGmMzbBAUaZ8JxOPUy6OIT5XhDoPckkYR
JgLBHcjkCjghLZQuYMnvVx9+dCc7UJ6HoH88abdWZb1vGvQirP/Na7llQLV5TspX
ygYq4a3Ojb3FRfJv05fChEoFgv7CK0/rG3kpVqAYUYJ9aKp4wJKjiVo7qu5Xl8kE
GDmjl1cXoReDO4iK4od9nV9Ym6FqXIpw+yXBJ+EtCS6snPoyWQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCKAkrzyuXMQwv/ZDisMoH9TTHPYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMzFmNTc2MmEtNDI1YS0z
MWRjLWI0MDctNmQyNGY0ZGM5NzM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgESMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG5nlKr5wtRSBmy6Dz5qiJUyY/euOFGXh+Bo+OuFS+XBqWP9OcnLMGgI
vZL657Nv2aJDTo0t2zJBIsJpm7tfvGFEQ6asdwjjHfm1o69YzHN0s60S58Hswlmo
31WL5cAuAWvyvLQpsLwY9GiYkTDDFcJMO9IclERn+CnoptSJMehcFnsldwv8PVtG
ghqzEyMF4xF8yRGarK8FN4+/ey1jVACkdV5TDdSovjYWDlVWdX+SMW1jNqbNI9wv
Xhb3rV8e9uRB+xSX7D1pT0/Dnk/KoNd0AQ4/BLH3QKa1R3Z6foTuoa0j+BMOPT7N
9rC+U1QcULgv+NahrkL+XwPGfORprLA=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:14:23 2025 by rpki-client