Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9dc220f3-6e66-36c0-be39-587b3d5cc69e.roa
File: 9dc220f3-6e66-36c0-be39-587b3d5cc69e.roa (raw, json)
Hash identifier: oCoO9VCrwCCG7kxR7akpN/y0neFud4GoNH7ucsQ5bCU=
Subject key identifier: D8:9B:CC:38:8B:B1:F3:DF:5E:EF:E5:F9:2C:E4:3D:5C:5D:A3:CD:97
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848F00C6EF402C8AA851CC77D00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9dc220f3-6e66-36c0-be39-587b3d5cc69e.roa
Signing time: Wed 19 Feb 2025 19:45:57 +0000
ROA not before: Wed 19 Feb 2025 19:45:57 +0000
ROA not after: Tue 20 May 2025 18:45:57 +0000
asID: 62240
IP address blocks: 166.1.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f0:0c:6e:f4:02:c8:aa:85:1c:c7:7d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Feb 19 19:45:57 2025 GMT
Not After : May 20 18:45:57 2025 GMT
Subject: CN=0a7c6459-d50c-4228-8a29-5fcf1cce51c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:27:82:19:d5:b5:a3:82:7a:16:70:23:84:6a:
a4:81:81:29:86:c0:ca:25:f3:5b:d9:b4:7b:c7:df:
b7:39:3e:30:fd:df:1c:c0:41:fb:48:e6:f9:d0:71:
cd:c0:d7:a6:0a:4d:2f:28:ee:1c:75:f5:a1:8a:9c:
20:f6:d6:b9:63:63:65:70:45:d4:4b:ba:cc:99:0a:
97:fa:34:87:52:02:2a:8d:f2:f5:cb:08:d8:e4:ba:
ab:c7:a2:48:ec:51:2a:a8:78:ea:dd:72:8e:d2:64:
ce:5a:11:a4:54:fb:b8:6a:fc:a9:68:ec:86:74:af:
fe:df:74:d7:ff:e4:1f:75:1e:f2:5e:67:06:fd:7c:
f7:b2:9c:53:bc:7b:0e:e0:88:06:d7:b1:fe:7b:67:
79:ad:4b:73:25:99:50:9c:02:f0:b4:7b:45:7a:86:
9d:8d:8b:19:91:5a:47:30:63:84:64:7d:25:5e:a9:
70:55:ac:62:03:63:69:32:81:89:d8:cb:56:af:6b:
2c:ad:59:25:af:a0:aa:3b:fd:b2:75:82:0e:1a:69:
55:e2:41:6c:7f:14:2d:38:f0:90:b8:2c:f3:3c:80:
5b:74:7a:25:83:62:7f:3f:94:c4:dd:0c:a0:c4:7e:
99:8e:0b:bb:6b:35:7d:f2:a7:c0:9e:28:94:08:2f:
e7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:9B:CC:38:8B:B1:F3:DF:5E:EF:E5:F9:2C:E4:3D:5C:5D:A3:CD:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9dc220f3-6e66-36c0-be39-587b3d5cc69e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.147.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:65:e7:8d:a9:90:e1:75:4f:77:ae:fb:04:6c:19:8c:b4:2a:
e8:3b:d7:63:62:02:6a:74:13:e3:79:4e:31:75:77:ed:87:87:
24:1c:3f:78:1a:33:2f:8a:27:63:c2:10:f0:22:40:57:19:8e:
dc:c5:b1:26:70:5a:0d:1d:8b:7f:88:c2:ac:be:0f:98:2c:15:
4a:e9:65:45:57:c4:d3:12:5d:aa:7c:9c:04:52:45:c9:66:b1:
a8:20:84:0c:b5:8d:e5:51:ed:f5:01:4a:2a:28:74:b3:a2:fc:
1a:33:7a:8c:d1:98:20:a1:96:54:8b:b0:a1:15:ac:df:be:84:
5b:81:40:9f:2a:0a:a8:49:de:55:4b:5c:a4:f4:31:2b:7f:a6:
cd:56:b2:0e:c8:99:fb:77:10:cf:ab:bb:23:17:18:8f:fc:8b:
7b:33:bd:de:08:f0:fd:e8:fd:03:1f:00:9e:21:cf:ca:2f:8d:
3b:3d:c4:58:f8:c5:e4:b6:65:f6:f7:f3:b0:bb:bb:ff:79:b7:
fc:3a:33:4a:43:7f:e0:ca:42:d3:f3:b9:b7:20:21:cd:ca:3b:
dd:49:0c:8c:3f:e8:53:ae:2b:a5:36:af:38:ca:0c:11:0a:f8:
78:9f:c4:b8:07:7e:3e:dd:0c:88:c8:25:2a:23:a7:d9:2e:ef:
21:19:eb:3f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjwDG70AsiqhRzHfQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDIxOTE5NDU1N1oXDTI1MDUyMDE4NDU1N1owLzEtMCsGA1UEAxMk
MGE3YzY0NTktZDUwYy00MjI4LThhMjktNWZjZjFjY2U1MWMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCeCGdW1o4J6FnAjhGqkgYEphsDKJfNb2bR7
x9+3OT4w/d8cwEH7SOb50HHNwNemCk0vKO4cdfWhipwg9ta5Y2NlcEXUS7rMmQqX
+jSHUgIqjfL1ywjY5Lqrx6JI7FEqqHjq3XKO0mTOWhGkVPu4avypaOyGdK/+33TX
/+QfdR7yXmcG/Xz3spxTvHsO4IgG17H+e2d5rUtzJZlQnALwtHtFeoadjYsZkVpH
MGOEZH0lXqlwVaxiA2NpMoGJ2MtWr2ssrVklr6CqO/2ydYIOGmlV4kFsfxQtOPCQ
uCzzPIBbdHolg2J/P5TE3QygxH6Zjgu7azV98qfAniiUCC/nEwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNibzDiLsfPfXu/l+SzkPVxdo82XMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvOWRjMjIwZjMtNmU2Ni0z
NmMwLWJlMzktNTg3YjNkNWNjNjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgGTMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGFl542pkOF1T3eu+wRsGYy0Kug712NiAmp0E+N5TjF1d+2HhyQcP3ga
My+KJ2PCEPAiQFcZjtzFsSZwWg0di3+Iwqy+D5gsFUrpZUVXxNMSXap8nARSRclm
sagghAy1jeVR7fUBSioodLOi/BozeozRmCChllSLsKEVrN++hFuBQJ8qCqhJ3lVL
XKT0MSt/ps1Wsg7Imft3EM+ruyMXGI/8i3szvd4I8P3o/QMfAJ4hz8ovjTs9xFj4
xeS2Zfb387C7u/95t/w6M0pDf+DKQtPzubcgIc3KO91JDIw/6FOuK6U2rzjKDBEK
+HifxLgHfj7dDIjIJSojp9ku7yEZ6z8=
-----END CERTIFICATE-----
Generated at Thu Apr 3 22:22:47 2025 by rpki-client