Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/32163d65-0622-3982-baaa-a2eeadfd61bf.roa
File: 32163d65-0622-3982-baaa-a2eeadfd61bf.roa (raw, json)
Hash identifier: PpFPzey+a4jR2S4bYkrl74I06/n1IFcoYFj9jF51nOY=
Subject key identifier: 2C:5C:60:87:35:F8:6E:3F:CB:06:37:30:4F:4F:A8:7C:A4:F5:71:7B
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848C582365485591D771BC39C80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/32163d65-0622-3982-baaa-a2eeadfd61bf.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 58061
IP address blocks: 166.0.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:82:36:54:85:59:1d:77:1b:c3:9c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=09a48194-7fca-4c3c-8bc7-7e94de8d9da6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:bd:2d:f9:88:43:d2:b1:1e:0d:51:02:69:01:
17:3a:32:3e:01:24:70:c3:44:50:16:a4:19:2a:41:
d7:80:a2:ff:06:03:10:e0:5f:4b:01:97:b4:2e:d9:
b9:a7:e2:84:5d:46:df:90:5a:45:99:06:e5:5c:a4:
67:0d:5f:b9:7d:15:f6:75:e5:c6:64:77:a3:23:a8:
39:64:32:55:84:f2:1e:0f:06:aa:17:57:c4:4a:06:
09:b0:32:ab:7a:d0:e5:c7:b5:9e:a9:90:b3:af:59:
68:e7:7a:48:35:de:e0:5a:50:13:24:6e:bd:3a:60:
42:1f:75:34:07:0e:bf:80:49:80:2a:46:ba:b8:a7:
8d:83:51:30:fe:71:b5:9b:f1:91:cd:49:0f:07:d4:
cb:c4:a8:9f:aa:4a:3e:48:a4:a5:d1:ad:37:f8:a6:
ef:6a:49:9b:d5:f9:81:6a:b5:9a:38:9f:34:0e:b4:
14:d0:17:fb:6a:1e:96:f2:95:d0:1e:9b:66:b7:7e:
75:a8:cd:53:17:a9:90:2d:6b:a9:8e:1e:ef:54:68:
8f:4f:48:d0:5d:28:76:86:83:36:dd:a5:77:b4:54:
14:da:a8:e6:a5:7a:19:1b:ff:8c:b5:8c:ef:8f:c3:
ee:54:1d:30:97:82:e3:79:fa:1b:c8:b2:75:d4:bb:
32:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:5C:60:87:35:F8:6E:3F:CB:06:37:30:4F:4F:A8:7C:A4:F5:71:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/32163d65-0622-3982-baaa-a2eeadfd61bf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.121.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b0:93:ca:7c:44:ad:d8:06:be:51:62:09:36:a1:aa:91:c6:c8:
f4:f1:dd:10:7f:f8:29:50:4b:94:24:43:f0:5f:14:b5:4d:f3:
d0:94:26:81:3a:3b:5c:f7:9d:eb:3f:aa:c8:e1:c6:20:65:18:
48:8a:e1:80:3e:93:32:98:9e:e0:36:01:ca:23:77:ce:36:29:
de:5f:6e:5b:31:45:76:25:cb:38:47:a5:fc:17:5b:e1:30:e4:
ff:1f:06:91:19:d6:1a:31:c9:8a:71:ab:e3:c9:dd:28:54:0d:
12:cd:f5:d3:61:0c:31:54:0a:fb:c5:49:2f:a3:3b:10:18:a1:
2c:38:ff:ba:a1:92:91:cb:b8:33:07:d5:c4:24:ff:7d:a7:18:
f6:7d:ab:d5:91:ab:82:c3:71:e5:81:07:01:7d:d3:d1:cf:fb:
51:6a:b4:38:e1:42:11:c3:a7:3d:30:ca:7e:0f:97:7d:bd:c8:
5b:3e:d6:1f:01:0f:d4:4f:c6:5b:02:81:b0:8a:a6:00:c4:1f:
52:f2:e7:c6:38:43:11:65:5d:73:bf:79:c0:74:f4:dd:33:cf:
4a:c2:d3:01:c7:ef:46:69:88:f1:e8:31:ee:77:84:30:d8:e3:
34:0c:bf:63:5e:1d:47:e6:64:07:1e:e1:f6:29:67:3f:47:8a:
20:88:d3:85
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgjZUhVkddxvDnIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
MDlhNDgxOTQtN2ZjYS00YzNjLThiYzctN2U5NGRlOGQ5ZGE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlL0t+YhD0rEeDVECaQEXOjI+ASRww0RQFqQZ
KkHXgKL/BgMQ4F9LAZe0Ltm5p+KEXUbfkFpFmQblXKRnDV+5fRX2deXGZHejI6g5
ZDJVhPIeDwaqF1fESgYJsDKretDlx7WeqZCzr1lo53pINd7gWlATJG69OmBCH3U0
Bw6/gEmAKka6uKeNg1Ew/nG1m/GRzUkPB9TLxKifqko+SKSl0a03+Kbvakmb1fmB
arWaOJ80DrQU0Bf7ah6W8pXQHptmt351qM1TF6mQLWupjh7vVGiPT0jQXSh2hoM2
3aV3tFQU2qjmpXoZG/+MtYzvj8PuVB0wl4LjefobyLJ11LsyPwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCxcYIc1+G4/ywY3ME9PqHyk9XF7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMzIxNjNkNjUtMDYyMi0z
OTgyLWJhYWEtYTJlZWFkZmQ2MWJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgB5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALCTynxErdgGvlFiCTahqpHGyPTx3RB/+ClQS5QkQ/BfFLVN89CUJoE6
O1z3nes/qsjhxiBlGEiK4YA+kzKYnuA2Acojd842Kd5fblsxRXYlyzhHpfwXW+Ew
5P8fBpEZ1hoxyYpxq+PJ3ShUDRLN9dNhDDFUCvvFSS+jOxAYoSw4/7qhkpHLuDMH
1cQk/32nGPZ9q9WRq4LDceWBBwF909HP+1FqtDjhQhHDpz0wyn4Pl329yFs+1h8B
D9RPxlsCgbCKpgDEH1Ly58Y4QxFlXXO/ecB09N0zz0rC0wHH70ZpiPHoMe53hDDY
4zQMv2NeHUfmZAce4fYpZz9HiiCI04U=
-----END CERTIFICATE-----
Generated at Sat Apr 5 13:20:00 2025 by rpki-client