Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/91edaa71-e874-3e47-b4a5-ad1523195b4b.roa
File: 91edaa71-e874-3e47-b4a5-ad1523195b4b.roa (raw, json)
Hash identifier: 0Uq/EHrdu8U4hb68NDazXvEqafNVjgfh7pYJsG+0CsI=
Subject key identifier: 1F:31:77:4A:85:68:F2:5B:1F:DB:2C:1A:B3:3E:6F:0B:28:BC:E2:1F
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848F65BE87F06140B90DAEB5AC0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/91edaa71-e874-3e47-b4a5-ad1523195b4b.roa
Signing time: Sat 22 Feb 2025 02:00:38 +0000
ROA not before: Sat 22 Feb 2025 02:00:38 +0000
ROA not after: Fri 23 May 2025 01:00:38 +0000
asID: 19437
IP address blocks: 166.0.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f6:5b:e8:7f:06:14:0b:90:da:eb:5a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Feb 22 02:00:38 2025 GMT
Not After : May 23 01:00:38 2025 GMT
Subject: CN=7f03ca7b-8563-454e-acd7-7cb5b32563c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:29:cd:1e:f4:71:ef:aa:b8:9f:7f:e5:d0:0f:
82:fa:9f:97:43:f4:a0:80:60:6c:b7:91:f2:a2:07:
64:72:5d:5d:4d:74:c1:cf:22:4e:4a:d1:44:a0:a3:
6d:cf:c3:2d:1a:47:ce:56:cc:a0:70:fe:28:4e:b5:
07:b9:47:32:23:16:de:f2:13:e0:d6:bc:da:6b:86:
32:df:ff:09:5b:2b:77:45:f5:c1:c2:99:d7:53:b9:
f7:ee:2b:4c:93:20:56:bd:64:31:a3:ae:b9:55:6d:
f3:95:b8:8d:6c:4a:82:52:7a:ce:bd:cc:ea:4d:f7:
3c:61:87:6b:70:c5:3f:7b:5c:08:08:dd:7d:2f:33:
45:a9:68:b4:66:f6:b3:03:02:6c:00:55:66:61:ca:
3c:05:c2:8f:8a:e2:a1:97:75:44:ea:c7:c3:5a:18:
97:f8:b9:b1:47:75:4d:03:01:a2:94:9c:a2:21:36:
1a:52:2f:39:9a:16:8d:93:7f:38:95:df:30:e4:b1:
0f:d8:be:99:f8:ff:86:64:21:e4:58:ab:d9:0e:e5:
df:de:53:4a:cd:29:64:34:56:48:02:41:7c:bf:6d:
9c:4c:2f:ca:cc:d0:61:48:94:c9:c2:2d:cd:cf:92:
97:39:d2:79:ef:58:21:f3:55:f9:a4:55:bc:d4:df:
c9:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:31:77:4A:85:68:F2:5B:1F:DB:2C:1A:B3:3E:6F:0B:28:BC:E2:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/91edaa71-e874-3e47-b4a5-ad1523195b4b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.159.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:ba:f7:30:06:e5:52:24:a2:d9:ae:eb:14:1b:a1:18:5e:47:
63:c3:cf:f9:cb:36:1c:b6:10:11:98:a4:45:87:ed:62:4a:23:
05:f8:90:cb:3f:fe:e7:78:0e:31:71:26:34:d5:b5:80:1a:ee:
e2:fe:7b:a9:ee:56:c0:3f:40:55:a3:32:d7:0d:5f:10:d7:54:
37:ef:80:1b:8d:2c:0f:0b:ba:3e:37:39:33:66:3c:fc:43:e0:
81:ef:d7:f0:72:f2:f3:3a:9a:c6:73:58:61:2d:11:6b:94:07:
7c:61:e4:50:e9:89:c0:66:c1:7b:ba:cb:aa:68:c0:e6:3c:9a:
65:fd:c8:6b:ac:43:4d:e9:77:41:6b:db:84:4b:74:32:69:85:
24:d9:87:2a:df:d1:7d:23:77:c6:f9:16:4b:f4:7a:c6:12:64:
91:eb:ba:f4:db:df:d1:97:95:c6:00:af:89:10:a6:f7:06:06:
d6:1a:ae:82:fd:c5:a9:fb:84:1c:a6:77:04:04:28:a4:14:4d:
a4:78:5c:7a:cb:a3:c8:a6:b9:f4:26:bf:9a:30:1d:80:ac:ba:
2d:be:6f:0a:78:b9:99:15:d4:8a:0c:65:6b:7b:a8:5a:21:da:
d0:5c:fa:20:4e:30:44:73:8c:a6:bc:9d:82:33:51:28:45:a6:
d1:7a:d5:a5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj2W+h/BhQLkNrrWsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk
N2YwM2NhN2ItODU2My00NTRlLWFjZDctN2NiNWIzMjU2M2M4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsinNHvRx76q4n3/l0A+C+p+XQ/SggGBst5Hy
ogdkcl1dTXTBzyJOStFEoKNtz8MtGkfOVsygcP4oTrUHuUcyIxbe8hPg1rzaa4Yy
3/8JWyt3RfXBwpnXU7n37itMkyBWvWQxo665VW3zlbiNbEqCUnrOvczqTfc8YYdr
cMU/e1wICN19LzNFqWi0ZvazAwJsAFVmYco8BcKPiuKhl3VE6sfDWhiX+LmxR3VN
AwGilJyiITYaUi85mhaNk384ld8w5LEP2L6Z+P+GZCHkWKvZDuXf3lNKzSlkNFZI
AkF8v22cTC/KzNBhSJTJwi3Nz5KXOdJ571gh81X5pFW81N/JnwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB8xd0qFaPJbH9ssGrM+bwsovOIfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvOTFlZGFhNzEtZTg3NC0z
ZTQ3LWI0YTUtYWQxNTIzMTk1YjRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgCfMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACS69zAG5VIkotmu6xQboRheR2PDz/nLNhy2EBGYpEWH7WJKIwX4kMs/
/ud4DjFxJjTVtYAa7uL+e6nuVsA/QFWjMtcNXxDXVDfvgBuNLA8Luj43OTNmPPxD
4IHv1/By8vM6msZzWGEtEWuUB3xh5FDpicBmwXu6y6powOY8mmX9yGusQ03pd0Fr
24RLdDJphSTZhyrf0X0jd8b5Fkv0esYSZJHruvTb39GXlcYAr4kQpvcGBtYaroL9
xan7hBymdwQEKKQUTaR4XHrLo8imufQmv5owHYCsui2+bwp4uZkV1IoMZWt7qFoh
2tBc+iBOMERzjKa8nYIzUShFptF61aU=
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:49:02 2025 by rpki-client