Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/747a2148-9cf1-347d-95d6-8f8a4e4c9fb4.roa
File: 747a2148-9cf1-347d-95d6-8f8a4e4c9fb4.roa (raw, json)
Hash identifier: SnJlBTWTUZ7HxDhDHWAOQ+lwLEajhrwzU4OqnPe0jnY=
Subject key identifier: D5:82:87:2F:97:76:70:7D:BD:79:19:DB:1F:3A:C4:3D:AE:85:A8:30
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848E20D573C04EEA20D7A635480
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/747a2148-9cf1-347d-95d6-8f8a4e4c9fb4.roa
Signing time: Fri 14 Feb 2025 19:26:27 +0000
ROA not before: Fri 14 Feb 2025 19:26:27 +0000
ROA not after: Thu 15 May 2025 18:26:27 +0000
asID: 401152
IP address blocks: 166.0.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:0d:57:3c:04:ee:a2:0d:7a:63:54:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Feb 14 19:26:27 2025 GMT
Not After : May 15 18:26:27 2025 GMT
Subject: CN=c399b0d1-3de4-47b4-957f-a537290a1117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:cf:4f:fa:32:f2:c1:7a:f8:a4:fe:5b:2c:7b:
08:96:10:e0:ae:2b:f5:ba:79:64:07:df:4e:bf:e8:
28:50:2f:ab:1f:2c:96:fa:fd:24:3c:89:fb:10:a3:
3f:aa:ff:16:ab:1b:7a:0f:e1:99:ca:8e:fc:5f:16:
54:4a:dd:d0:cf:f9:be:55:b4:e6:c5:3d:cf:d5:0b:
56:84:2e:34:e9:44:46:32:8a:59:a1:e9:ba:36:a7:
4e:36:ef:b8:c0:a6:69:61:6a:df:ed:ca:fe:3c:b8:
52:7b:fc:57:2a:ab:74:74:1a:7f:16:d4:c4:d5:0d:
79:13:46:83:44:63:59:7a:eb:a6:cc:84:83:4a:b5:
29:8c:95:88:2e:e7:d8:c1:71:0d:b9:d1:9b:61:84:
01:65:c7:f6:58:9a:45:8b:bf:d6:89:cf:99:23:ef:
6d:65:52:78:50:75:65:8f:ba:03:3e:28:25:53:a1:
ad:e1:d5:d2:06:61:50:69:9a:87:36:40:b6:f9:b5:
95:d6:01:be:37:15:31:70:91:64:53:aa:d9:61:29:
49:94:70:6a:3e:61:23:b2:d3:5c:25:2b:ae:44:34:
5f:40:2a:e5:aa:d6:93:c6:c9:17:44:e8:fb:cd:ce:
3f:9e:4a:fa:b2:a0:38:17:78:12:a7:49:90:41:d2:
1b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:82:87:2F:97:76:70:7D:BD:79:19:DB:1F:3A:C4:3D:AE:85:A8:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/747a2148-9cf1-347d-95d6-8f8a4e4c9fb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.109.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:a4:1f:2a:32:f6:c9:2e:cd:a1:95:36:e4:c0:49:28:3e:11:
46:e9:3d:f9:f1:58:e0:43:b2:14:11:fd:47:1a:21:d7:7a:8a:
2c:09:55:13:1e:4a:fa:01:6b:a8:2a:90:f5:00:19:74:cb:1a:
50:e3:f1:62:28:2b:1f:ad:eb:b2:4c:8c:63:15:0e:14:26:c6:
0e:1d:14:bd:22:05:cf:4e:5d:28:de:59:86:8e:be:94:c8:67:
fd:71:4a:4d:5f:f6:a1:33:a9:a0:6b:46:9b:bd:95:94:d8:2e:
e8:3e:8b:3b:ec:be:4c:2a:60:da:ca:ec:42:b0:37:d5:9f:15:
f2:10:e4:5d:ab:63:ba:5a:33:d4:5b:d9:a4:aa:97:88:61:f3:
80:67:e9:0c:65:e4:a2:75:2f:31:8c:f0:86:8e:84:f5:15:8e:
3e:7d:9f:01:c0:7d:af:3f:d5:13:5e:69:1d:eb:73:94:49:8c:
ea:d5:3e:3d:92:ca:84:0f:56:05:60:40:eb:9a:51:71:fc:6c:
be:46:ad:cd:fe:39:8b:34:11:60:df:c2:b3:51:94:3a:21:0b:
f5:2e:f4:00:a0:e4:88:8d:2f:ea:d5:60:60:0a:16:58:a0:27:
5f:8c:76:f2:b7:2b:9f:69:f1:7c:5a:29:11:4c:c0:7e:78:e4:
32:37:d4:be
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjiDVc8BO6iDXpjVIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDIxNDE5MjYyN1oXDTI1MDUxNTE4MjYyN1owLzEtMCsGA1UEAxMk
YzM5OWIwZDEtM2RlNC00N2I0LTk1N2YtYTUzNzI5MGExMTE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAls9P+jLywXr4pP5bLHsIlhDgriv1unlkB99O
v+goUC+rHyyW+v0kPIn7EKM/qv8Wqxt6D+GZyo78XxZUSt3Qz/m+VbTmxT3P1QtW
hC406URGMopZoem6NqdONu+4wKZpYWrf7cr+PLhSe/xXKqt0dBp/FtTE1Q15E0aD
RGNZeuumzISDSrUpjJWILufYwXENudGbYYQBZcf2WJpFi7/Wic+ZI+9tZVJ4UHVl
j7oDPiglU6Gt4dXSBmFQaZqHNkC2+bWV1gG+NxUxcJFkU6rZYSlJlHBqPmEjstNc
JSuuRDRfQCrlqtaTxskXROj7zc4/nkr6sqA4F3gSp0mQQdIbaQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNWChy+XdnB9vXkZ2x86xD2uhagwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNzQ3YTIxNDgtOWNmMS0z
NDdkLTk1ZDYtOGY4YTRlNGM5ZmI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgBtMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGSkHyoy9skuzaGVNuTASSg+EUbpPfnxWOBDshQR/UcaIdd6iiwJVRMe
SvoBa6gqkPUAGXTLGlDj8WIoKx+t67JMjGMVDhQmxg4dFL0iBc9OXSjeWYaOvpTI
Z/1xSk1f9qEzqaBrRpu9lZTYLug+izvsvkwqYNrK7EKwN9WfFfIQ5F2rY7paM9Rb
2aSql4hh84Bn6Qxl5KJ1LzGM8IaOhPUVjj59nwHAfa8/1RNeaR3rc5RJjOrVPj2S
yoQPVgVgQOuaUXH8bL5Grc3+OYs0EWDfwrNRlDohC/Uu9ACg5IiNL+rVYGAKFlig
J1+MdvK3K59p8XxaKRFMwH545DI31L4=
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:07:56 2025 by rpki-client