Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6d77872b-9b6a-3b07-8282-7d114f2523e6.roa
File: 6d77872b-9b6a-3b07-8282-7d114f2523e6.roa (raw, json)
Hash identifier: ebrVUsRwlo9t8PT+LfE+9IwCDsFivRXKfNAIYRpT8Fo=
Subject key identifier: 81:0A:75:4F:DA:E9:B5:1D:85:6B:00:AB:78:6B:27:AA:B8:69:B2:A9
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848F00C7166195B87A2816EEFC0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6d77872b-9b6a-3b07-8282-7d114f2523e6.roa
Signing time: Wed 19 Feb 2025 19:45:58 +0000
ROA not before: Wed 19 Feb 2025 19:45:58 +0000
ROA not after: Tue 20 May 2025 18:45:58 +0000
asID: 62240
IP address blocks: 166.1.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f0:0c:71:66:19:5b:87:a2:81:6e:ef:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Feb 19 19:45:58 2025 GMT
Not After : May 20 18:45:58 2025 GMT
Subject: CN=d069318a-59c4-408b-b54c-771a0134f8fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:be:cc:4e:b5:7e:1a:b3:89:ab:45:2a:52:86:
ad:5f:9f:53:3a:71:88:c1:58:2e:37:58:09:c6:a6:
8a:a9:fb:e1:d9:7b:9e:5b:e6:a8:28:d9:1f:3c:b6:
4f:98:e0:f0:c4:43:46:dc:a6:3c:5d:b5:b0:48:78:
52:73:3f:8a:9d:2b:e5:a9:6f:7d:56:d1:0d:c6:a3:
45:db:0d:99:d9:81:a9:30:83:68:b2:dd:e4:22:6f:
94:5b:3f:2e:68:55:28:62:0d:f8:2f:dd:42:af:72:
25:f3:b6:96:0b:1a:63:39:e7:7d:99:69:5a:b7:a6:
17:9f:23:09:6e:7c:b9:12:14:2e:c6:1b:f4:41:10:
cc:96:77:71:10:ba:77:55:65:77:a3:cc:73:11:42:
fd:fc:2e:82:b4:12:36:f7:b7:be:f1:72:28:04:40:
92:28:d8:f2:6c:27:85:5b:af:57:b6:2a:a7:a0:09:
89:93:dc:2c:b7:80:a4:cc:e6:12:b6:3c:e5:2a:3e:
1d:99:f0:2f:95:04:6b:6e:41:f8:ee:49:99:55:9f:
55:37:f2:53:49:6a:fd:7c:21:0f:2c:20:c2:13:9a:
12:36:69:08:86:08:7e:3d:cc:38:c3:6c:91:84:ca:
81:9b:37:dc:64:9d:96:23:90:1b:a3:c6:61:60:cb:
ef:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:0A:75:4F:DA:E9:B5:1D:85:6B:00:AB:78:6B:27:AA:B8:69:B2:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6d77872b-9b6a-3b07-8282-7d114f2523e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.168.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:b0:91:54:fa:37:55:37:6f:b5:45:7f:77:55:73:4b:37:90:
5c:53:4f:55:84:99:95:96:50:04:f4:2b:08:b9:41:14:04:fb:
cf:ed:ae:0e:e7:19:79:56:65:15:cb:a0:2f:d4:9f:da:41:2b:
52:44:94:bd:52:e7:12:34:43:6a:f2:f2:ca:e9:35:36:f7:b4:
31:5a:a6:e5:54:fa:38:66:76:35:a9:fc:2d:c8:0b:b0:e2:ed:
20:78:36:04:81:c8:61:89:23:eb:e3:65:d6:9a:27:61:d7:28:
a7:8c:bb:d3:e0:5b:e5:e3:cf:22:c2:d9:fa:dc:c6:ae:82:ca:
e5:28:81:ce:1a:6d:1f:63:4a:8d:60:5a:7a:dc:7e:bb:e4:ba:
2c:fc:22:b8:56:29:e2:bc:b0:02:e5:96:68:d1:8d:5b:99:04:
96:19:5f:35:67:12:50:d3:a0:32:f4:30:6f:68:b0:c9:c5:00:
ea:86:48:ec:4f:91:46:9e:a7:94:4c:d1:d3:00:5a:f5:bb:92:
9e:18:16:6a:60:7d:a3:34:00:c4:5e:d7:c2:3e:81:5f:63:44:
87:5b:26:35:7e:37:58:eb:81:95:8d:0f:6a:cc:42:73:ff:7b:
5c:bf:7a:23:2b:5a:ab:e3:ab:00:d6:e9:d8:a5:48:e5:09:f7:
26:42:19:0b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjwDHFmGVuHooFu78AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDIxOTE5NDU1OFoXDTI1MDUyMDE4NDU1OFowLzEtMCsGA1UEAxMk
ZDA2OTMxOGEtNTljNC00MDhiLWI1NGMtNzcxYTAxMzRmOGZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzb7MTrV+GrOJq0UqUoatX59TOnGIwVguN1gJ
xqaKqfvh2XueW+aoKNkfPLZPmODwxENG3KY8XbWwSHhScz+KnSvlqW99VtENxqNF
2w2Z2YGpMINost3kIm+UWz8uaFUoYg34L91Cr3Il87aWCxpjOed9mWlat6YXnyMJ
bny5EhQuxhv0QRDMlndxELp3VWV3o8xzEUL9/C6CtBI297e+8XIoBECSKNjybCeF
W69XtiqnoAmJk9wst4CkzOYStjzlKj4dmfAvlQRrbkH47kmZVZ9VN/JTSWr9fCEP
LCDCE5oSNmkIhgh+Pcw4w2yRhMqBmzfcZJ2WI5Abo8ZhYMvvEwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIEKdU/a6bUdhWsAq3hrJ6q4abKpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNmQ3Nzg3MmItOWI2YS0z
YjA3LTgyODItN2QxMTRmMjUyM2U2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgGoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI2wkVT6N1U3b7VFf3dVc0s3kFxTT1WEmZWWUAT0Kwi5QRQE+8/trg7n
GXlWZRXLoC/Un9pBK1JElL1S5xI0Q2ry8srpNTb3tDFapuVU+jhmdjWp/C3IC7Di
7SB4NgSByGGJI+vjZdaaJ2HXKKeMu9PgW+XjzyLC2frcxq6CyuUogc4abR9jSo1g
Wnrcfrvkuiz8IrhWKeK8sALllmjRjVuZBJYZXzVnElDToDL0MG9osMnFAOqGSOxP
kUaep5RM0dMAWvW7kp4YFmpgfaM0AMRe18I+gV9jRIdbJjV+N1jrgZWND2rMQnP/
e1y/eiMrWqvjqwDW6dilSOUJ9yZCGQs=
-----END CERTIFICATE-----
Generated at Thu Apr 3 22:23:41 2025 by rpki-client