Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/46523c09-7e48-3940-b42e-0fd8819d2b74.roa
File: 46523c09-7e48-3940-b42e-0fd8819d2b74.roa (raw, json)
Hash identifier: QK1bQUER0cSqf1mB0Sv+9XlF/KrYjzlyy/1cJL51aYs=
Subject key identifier: C4:C4:B0:D4:7F:BF:1A:B0:F2:13:89:26:86:40:7E:C5:13:DC:84:EA
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285849115E17EB0B5C0E022263DD00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/46523c09-7e48-3940-b42e-0fd8819d2b74.roa
Signing time: Mon 03 Mar 2025 18:12:09 +0000
ROA not before: Mon 03 Mar 2025 18:12:09 +0000
ROA not after: Sun 01 Jun 2025 17:12:09 +0000
asID: 401152
IP address blocks: 166.0.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:11:5e:17:eb:0b:5c:0e:02:22:63:dd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Mar 3 18:12:09 2025 GMT
Not After : Jun 1 17:12:09 2025 GMT
Subject: CN=e0881ffa-afec-48c6-8ee9-14ff42ce90ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c7:39:93:3b:01:ed:a2:ee:b4:2f:ac:d2:28:
73:9f:bb:8c:9f:43:4c:eb:66:7b:bb:75:cd:de:ff:
14:8a:65:26:b2:78:18:62:78:75:04:bd:e2:4b:25:
da:7f:76:e6:fa:17:c4:f4:ad:07:11:cf:a0:a6:58:
48:14:8f:1f:d9:6d:9c:c3:4d:87:38:74:ad:e2:87:
d1:22:ab:88:53:25:b7:d1:2f:aa:7d:6c:a0:30:28:
0d:89:c7:a9:e0:35:0e:d1:6a:17:01:4c:78:6b:3c:
1c:28:09:69:15:53:e1:04:67:1e:c5:0b:94:9e:df:
36:42:9e:f4:76:39:d0:2c:7c:39:95:0a:89:63:1d:
bb:a3:91:07:3e:97:57:e7:98:b7:d2:88:b1:39:c1:
c4:3a:5e:68:2c:2b:45:35:6c:93:58:a6:2d:dc:48:
64:c4:5b:3b:76:bd:6c:1c:50:b4:64:71:20:a8:6e:
6d:d8:cf:f5:c0:cb:45:ab:d0:9b:69:b0:ea:df:7b:
b7:dd:2d:9f:b2:13:08:49:9e:72:7e:0a:eb:ec:66:
82:63:d3:1f:d5:ad:29:82:e9:ed:14:4b:81:db:b4:
84:d9:89:e2:3d:d8:91:fc:09:b0:71:31:2b:89:b1:
76:df:9b:ea:42:48:29:1d:dc:b2:a7:37:dd:5d:27:
7c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:C4:B0:D4:7F:BF:1A:B0:F2:13:89:26:86:40:7E:C5:13:DC:84:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/46523c09-7e48-3940-b42e-0fd8819d2b74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.154.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ad:58:3c:05:b7:37:ab:46:e3:ea:f7:60:79:3f:64:88:4b:a7:
56:44:a8:c7:bf:a4:e7:62:10:93:30:9c:77:0d:26:47:61:1e:
e2:b7:60:1b:bd:16:46:0c:e9:1b:ee:af:09:79:fa:5b:5c:d9:
c6:aa:88:49:70:d6:7e:c1:5a:ff:30:1b:d7:81:4d:a9:42:df:
56:31:7c:5d:85:54:41:9c:54:2c:a5:32:24:ef:cc:21:28:3e:
86:55:69:87:75:94:56:38:88:4c:ec:4e:e4:14:80:e2:d7:ae:
6c:21:e6:04:54:24:52:45:52:8e:cc:a9:03:39:37:23:4c:5b:
dd:61:98:c9:c8:64:ae:92:7c:73:b5:73:66:7f:b7:5b:6f:1e:
05:b2:6a:f0:27:6b:86:dc:da:50:45:fb:d5:fc:64:b1:81:33:
f3:ab:3e:60:89:e1:d0:3c:48:57:4e:a3:8f:cd:be:f2:de:3c:
95:05:e0:b2:59:a7:b8:a7:79:48:bc:6c:75:3d:21:4f:c7:31:
1a:d9:b2:f0:90:b2:30:17:07:89:7d:2b:bb:59:93:d8:74:1f:
6a:04:8c:38:53:2f:8e:ae:43:d4:a8:d9:00:ac:c4:29:af:60:
3e:e5:2b:4f:43:81:2f:49:97:93:a9:85:5e:26:e0:c6:fc:fa:
9a:ae:5e:1f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkRXhfrC1wOAiJj3QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDMwMzE4MTIwOVoXDTI1MDYwMTE3MTIwOVowLzEtMCsGA1UEAxMk
ZTA4ODFmZmEtYWZlYy00OGM2LThlZTktMTRmZjQyY2U5MGFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAisc5kzsB7aLutC+s0ihzn7uMn0NM62Z7u3XN
3v8UimUmsngYYnh1BL3iSyXaf3bm+hfE9K0HEc+gplhIFI8f2W2cw02HOHSt4ofR
IquIUyW30S+qfWygMCgNicep4DUO0WoXAUx4azwcKAlpFVPhBGcexQuUnt82Qp70
djnQLHw5lQqJYx27o5EHPpdX55i30oixOcHEOl5oLCtFNWyTWKYt3EhkxFs7dr1s
HFC0ZHEgqG5t2M/1wMtFq9CbabDq33u33S2fshMISZ5yfgrr7GaCY9Mf1a0pgunt
FEuB27SE2YniPdiR/AmwcTEribF235vqQkgpHdyypzfdXSd8pwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMTEsNR/vxqw8hOJJoZAfsUT3ITqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNDY1MjNjMDktN2U0OC0z
OTQwLWI0MmUtMGZkODgxOWQyYjc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgCaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK1YPAW3N6tG4+r3YHk/ZIhLp1ZEqMe/pOdiEJMwnHcNJkdhHuK3YBu9
FkYM6Rvurwl5+ltc2caqiElw1n7BWv8wG9eBTalC31YxfF2FVEGcVCylMiTvzCEo
PoZVaYd1lFY4iEzsTuQUgOLXrmwh5gRUJFJFUo7MqQM5NyNMW91hmMnIZK6SfHO1
c2Z/t1tvHgWyavAna4bc2lBF+9X8ZLGBM/OrPmCJ4dA8SFdOo4/NvvLePJUF4LJZ
p7ineUi8bHU9IU/HMRrZsvCQsjAXB4l9K7tZk9h0H2oEjDhTL46uQ9So2QCsxCmv
YD7lK09DgS9Jl5OphV4m4Mb8+pquXh8=
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:01:59 2025 by rpki-client