Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/46e3dae5-a47c-3ed8-8023-7c88d8abb730.roa
File: 46e3dae5-a47c-3ed8-8023-7c88d8abb730.roa (raw, json)
Hash identifier: di7/l2qOi1Gv8qSvus0tWc2j03VxPMhHz9woARPccXo=
Subject key identifier: A4:69:ED:9C:A2:8D:AC:61:13:DC:F2:C2:12:C7:EA:F1:9E:B5:B2:DB
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848D0ABAF944F467730292BFD00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/46e3dae5-a47c-3ed8-8023-7c88d8abb730.roa
Signing time: Sat 08 Feb 2025 14:00:52 +0000
ROA not before: Sat 08 Feb 2025 14:00:52 +0000
ROA not after: Fri 09 May 2025 13:00:52 +0000
asID: 15083
IP address blocks: 166.1.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d0:ab:af:94:4f:46:77:30:29:2b:fd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Feb 8 14:00:52 2025 GMT
Not After : May 9 13:00:52 2025 GMT
Subject: CN=1a5e6b94-282a-4f36-9346-9246d9683c1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:68:72:50:06:ff:fe:68:f5:fa:e5:2a:41:5d:
e8:90:93:32:12:24:3a:d3:3e:7e:5c:cc:e1:2d:c2:
8a:cd:b7:31:f6:6c:08:fa:16:21:dd:3c:87:c5:cc:
50:c6:26:72:b8:3c:69:5b:d4:50:a1:3b:34:30:37:
4a:e6:60:73:99:cc:fd:24:5e:9d:60:99:e4:37:08:
8e:fd:96:f5:24:25:77:c9:f7:09:45:2a:b2:24:7e:
c3:fa:94:cc:c9:d0:49:9c:93:1b:dd:e6:05:d2:28:
2a:50:26:57:a0:5e:c1:39:ad:ff:0f:df:c7:b7:cb:
9c:29:d2:da:d1:58:77:e4:32:52:ea:ff:3a:fa:10:
4f:8d:dd:95:48:de:cd:c1:9a:66:94:0c:eb:e1:cf:
e7:1f:39:ba:e0:51:68:42:a5:8b:15:69:87:b5:65:
40:19:f8:29:93:a6:98:cb:53:ff:a4:cb:78:d6:88:
3b:fb:72:d3:e0:d0:5a:28:8c:6b:72:62:c7:cf:65:
fc:d3:72:4c:ba:43:93:df:0d:4c:e2:0b:5b:81:a3:
e6:64:b4:a5:7f:03:11:bd:7f:8c:52:fc:27:5a:af:
63:e7:48:23:22:60:f0:fe:13:65:23:4b:14:f1:27:
9e:c5:0c:08:bb:10:15:dc:20:62:be:9c:57:a0:09:
e3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:69:ED:9C:A2:8D:AC:61:13:DC:F2:C2:12:C7:EA:F1:9E:B5:B2:DB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/46e3dae5-a47c-3ed8-8023-7c88d8abb730.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.208.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:18:1b:50:5f:43:c5:02:90:f9:15:e2:85:57:c7:11:60:43:
54:7e:3d:1d:c8:51:3a:0c:fd:3e:78:3b:03:83:b1:91:cf:c9:
90:74:de:9e:c5:62:56:d7:9a:d6:1b:87:cd:43:46:9a:74:10:
a6:93:cf:50:fb:bc:97:69:94:5b:9a:cf:fb:e1:f3:97:4b:06:
84:d3:59:45:4e:66:1e:93:93:e0:8f:9e:65:c8:70:0d:e0:ca:
9f:a2:36:86:32:9b:d6:8e:87:da:04:b3:40:08:03:c0:6a:5f:
4c:e3:39:7e:b1:05:d9:df:7e:6c:89:3f:19:26:aa:2e:fb:78:
16:a2:3d:68:fe:de:b8:8f:a8:e0:06:54:48:9d:6b:53:2a:73:
04:ae:a9:cc:9e:cd:25:47:35:3d:e2:14:b1:7d:54:20:80:70:
a8:dc:31:18:aa:80:51:b2:e0:9e:57:bd:b3:43:7a:cf:f4:a5:
30:cc:92:43:62:e7:78:7d:6c:a3:93:19:4f:16:7b:7e:59:a8:
06:be:44:d4:53:47:df:cf:fb:85:eb:4e:2a:5e:8b:2d:8f:ee:
db:1c:bc:f1:4f:f5:6a:fd:97:02:54:5f:b4:84:74:9a:27:d3:
e3:68:99:1f:e0:18:1e:1f:58:53:55:ea:47:38:95:f2:3f:e7:
51:77:e9:e7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjQq6+UT0Z3MCkr/QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDIwODE0MDA1MloXDTI1MDUwOTEzMDA1MlowLzEtMCsGA1UEAxMk
MWE1ZTZiOTQtMjgyYS00ZjM2LTkzNDYtOTI0NmQ5NjgzYzFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2hyUAb//mj1+uUqQV3okJMyEiQ60z5+XMzh
LcKKzbcx9mwI+hYh3TyHxcxQxiZyuDxpW9RQoTs0MDdK5mBzmcz9JF6dYJnkNwiO
/Zb1JCV3yfcJRSqyJH7D+pTMydBJnJMb3eYF0igqUCZXoF7BOa3/D9/Ht8ucKdLa
0Vh35DJS6v86+hBPjd2VSN7NwZpmlAzr4c/nHzm64FFoQqWLFWmHtWVAGfgpk6aY
y1P/pMt41og7+3LT4NBaKIxrcmLHz2X803JMukOT3w1M4gtbgaPmZLSlfwMRvX+M
UvwnWq9j50gjImDw/hNlI0sU8SeexQwIuxAV3CBivpxXoAnjFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKRp7ZyijaxhE9zywhLH6vGetbLbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNDZlM2RhZTUtYTQ3Yy0z
ZWQ4LTgwMjMtN2M4OGQ4YWJiNzMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgHQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJEYG1BfQ8UCkPkV4oVXxxFgQ1R+PR3IUToM/T54OwODsZHPyZB03p7F
YlbXmtYbh81DRpp0EKaTz1D7vJdplFuaz/vh85dLBoTTWUVOZh6Tk+CPnmXIcA3g
yp+iNoYym9aOh9oEs0AIA8BqX0zjOX6xBdnffmyJPxkmqi77eBaiPWj+3riPqOAG
VEida1MqcwSuqcyezSVHNT3iFLF9VCCAcKjcMRiqgFGy4J5XvbNDes/0pTDMkkNi
53h9bKOTGU8We35ZqAa+RNRTR9/P+4XrTipeiy2P7tscvPFP9Wr9lwJUX7SEdJon
0+NomR/gGB4fWFNV6kc4lfI/51F36ec=
-----END CERTIFICATE-----
Generated at Wed Apr 9 12:51:10 2025 by rpki-client